Privacy Policy

1. Controller

The data controller is [FOUNDER: full legal name], sole trader, [FOUNDER: registered address, country]. Contact: [FOUNDER: contact email].

2. What we collect

• Account data — name, email address, and a hashed password (or your OAuth identity if you sign in with a third-party provider). Legal basis: performance of contract.
• Content you create — projects, progress, notes, and settings. Legal basis: performance of contract.
• Purchase data — which products you own and subscription status. Card and billing details are collected and processed by Polar (merchant of record); we never see your card number. Legal basis: performance of contract and legal obligations.
• Transactional email events — delivery of verification and password-reset emails. Legal basis: legitimate interest in operating account security.
• Waitlist signup — if you join the pre-launch waitlist, your email address and your answers to the optional three-question quiz (your experience level, what you find hard, and what you want to build). We use it to email you when we launch and, only if you tick the box, to send occasional updates before then. Legal basis: consent, which you can withdraw at any time by unsubscribing or writing to us.

We do not run advertising or analytics trackers, and we do not sell personal data.

3. Processors and international transfers

• Convex, Inc. (USA) — application database and backend hosting.
• Hostinger (EU) — web hosting.
• Polar Software Inc. — payments, invoicing, and tax as merchant of record.
• Brevo (EU) — transactional email and the pre-launch waitlist mailing list.

Where processors are located outside the EEA, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

4. Cookies

We use essential cookies only: the session cookie that keeps you signed in. No marketing or analytics cookies are set, which is why there is no cookie banner.

5. Retention

Account and content data are kept while your account exists and deleted within 30 days of account deletion, except records we must keep for legal (for example, tax) reasons. Purchase records are retained by Polar per its own policy.

Waitlist entries are kept until launch and for up to six months afterwards, or until you unsubscribe or ask us to delete them — whichever comes first.

6. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Write to [FOUNDER: contact email]; we respond within one month. You may also lodge a complaint with your local supervisory authority.

7. Changes

We will announce material changes to this policy in the Service or by email before they take effect.