Privacy Policy

Template — last updated placeholder. Have a lawyer review this before real launch, especially if you'll have users in the EU/UK (GDPR) or California (CCPA).

1. What we collect

Account info: your email address (via Supabase Auth).
Product data: the target names you enter, quiz answers, generated blueprints, daily habit completions, and optional mood check-ins (1–10).
Billing data: handled directly by LemonSqueezy — we store your subscription status, not your card details.

2. How we use it

To generate your AI blueprint, run your daily tracking dashboard, manage your subscription, and improve the product. We do not sell your personal data.

3. Third parties we share data with

Google Gemini API — receives the target name and quiz answers to generate your blueprint.
Supabase — hosts our database and handles authentication.
Resend — sends account emails (sign-up verification, password reset) on our behalf.
LemonSqueezy — processes payments and manages subscriptions.

4. Data retention & deletion

We retain your data while your account is active. [Placeholder — add your actual deletion process/timeline; consider adding a self-serve "delete my account" flow before real launch, required under GDPR/CCPA.]

5. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. Contact us using the details below to exercise these rights.

6. Cookies

We use essential cookies for authentication (session cookies set by Supabase). We don't currently use advertising or cross-site tracking cookies.

7. Contact

[Placeholder — add a privacy/support contact email.]