Privacy & Data Policy

Your account & sign-in data

Your account information (like your email address and sign-in method) is used to sign you in securely and to connect you to your own subscription and saved activity — nothing more.

We record certain data associated with your account — sign-in times, device and browser information, and support conversations — for security, fraud prevention, customer support, and reporting purposes.

Marketing communications

We don't currently send marketing communications. If that changes, we'll ask for your agreement first — you'll always be able to opt out again, and we'll never require marketing consent to use the app or keep your subscription active.

Who else processes your data

We share the minimum data needed with a small number of specialist providers who run parts of the service on our behalf:

• Supabase — authentication and our database.
• Stripe — payment processing for your subscription. We never see or store your full card details.
• Resend — delivery of transactional emails, like sign-in codes and invites.

How long we keep your data

Account deletion is handled by request today — contact us (below) and we'll delete your account and associated personal data, subject to what we're legally required to keep (for example, billing records).

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

Changes to this policy

If we materially change how we handle your data, we'll update this page and change the "last updated" date above.