Privacy Policy

1. Data We Collect

We collect data in the following categories:

• Account data: email, profile details, authentication metadata.
• Service data: tasks, goals, planner events, streaks, notes, and other user-generated content.
• Usage data: interactions with features, pages, and product events.
• Device/technical data: IP address, browser type, device identifiers, and logs.
• Billing data: subscription status and payment metadata from processors (not raw card numbers).
• Support data: messages, attachments, and request history sent to support.

2. How We Use Data

We use personal data to:

• provide and operate the Service;
• authenticate users and secure accounts;
• process subscriptions, renewals, invoices, and payment operations;
• deliver AI-assisted planning and productivity features;
• measure performance, debug issues, and improve product quality;
• prevent fraud, abuse, and policy violations;
• communicate transactional, support, and service notices.

3. Legal Bases (Where Required)

Depending on your jurisdiction, we process data under one or more legal bases:

• contract performance (to provide the Service);
• legitimate interests (security, analytics, improvements);
• legal obligations (tax, compliance, enforcement);
• consent (for non-essential cookies/marketing where required).

4. AI Features

Inputs you provide to AI features may be processed to generate outputs and improve quality, safety, and abuse prevention. Do not submit sensitive personal data unless necessary.

5. Third-Party Processors and Services

We use third-party providers to operate core parts of the Service, including:

• Supabase (authentication and database hosting),
• Stripe (payments and billing),
• Cloudflare (hosting, CDN, edge services, and security),
• email delivery and communication providers,
• analytics providers where enabled.

These providers process data under their own policies and contractual obligations, and only for permitted purposes.

6. Data Sharing

We do not sell personal data. We may share personal data:

• with processors/service providers acting on our instructions;
• if required by law, regulation, or valid legal request;
• to protect rights, users, and the Service from fraud/abuse/security threats;
• in connection with a merger, acquisition, or asset transfer.

7. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, preferences, security, analytics, and performance. See our Cookie Policy for details and controls.

8. Data Retention

We keep personal data only as long as needed for service delivery, legal obligations, dispute resolution, and enforcement. Retention periods vary by data type and legal requirements.

9. Security

We use reasonable technical and organizational safeguards designed to protect personal data. No system is fully secure, and we cannot guarantee absolute security.

10. International Transfers

Your data may be processed in countries other than your own. Where required, we apply appropriate safeguards for cross-border transfers.

11. Your Privacy Rights

Depending on your location, you may have rights to:

• access, correct, or delete personal data;
• request portability of certain data;
• restrict or object to certain processing;
• withdraw consent for consent-based processing;
• appeal or complain to a supervisory authority where applicable.

To exercise rights, contact support@gamifiedgoals.com. We may verify identity before completing requests.

12. Children

The Service is not directed to children under 13 (or higher minimum age where required). We do not knowingly collect personal data from children in violation of applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post updates with a revised effective date and, for material changes, provide additional notice where required.

14. Contact

Privacy questions and requests: support@gamifiedgoals.com