This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights. It is based on the application’s data model and current use of third-party services.
We collect the following personal data when you create an account or use the service: username, mobile phone number, email address, and a hashed password. We also record subscription and payment-related flags such as `paid`, `subscriptionStart`, `groupId`, `admin`, `paymentId`, and `customerId`.
We use personal data to: create and manage your account, authenticate you, process payments and subscriptions, prevent fraud, and provide customer support. We may use aggregate or anonymized data for analytics and to improve the service.
Depending on the action, we rely on one or more legal bases for processing: performing the contract (providing paid services), legitimate interests (security, fraud prevention, platform improvements), and your consent where required.
We use Paystack to process payments. When initiating payments we send Paystack your email, name and phone number; Paystack may store customer and transaction identifiers (`customerId`, `paymentId`). Please review Paystack’s privacy documentation for details on how they handle payment data.
We use cookies and similar techniques to manage authentication and the user session (HTTP-only cookies). If we add analytics or other tracking services in future, we will disclose them here and provide opt-out instructions.
We retain personal data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Payment and billing records may be kept for a longer period as required for accounting and fraud prevention.
We implement industry-standard security measures to protect your data. Passwords are hashed before storage. However, no system is perfectly secure; if you believe your account has been compromised contact us immediately.
Subject to local law, you may have the right to access, correct, update, export, or delete your personal data. You may also have the right to restrict or object to certain processing and to withdraw consent where processing is based on consent.
For questions about this Privacy Policy or to exercise your rights, contact: hurwitzse@gmail.com.
We may update this policy from time to time. We will post the updated policy at `/privacy` and indicate the date of the last revision.