Privacy Policy
Last updated: May 24, 2026
Our Privacy Promise
Your data belongs to you. We will never sell your personal information to third parties.
1. Information We Collect
You provide: Full name, email address, phone number (optional), and marketing preferences when you create an account.
Automatically collected: IP address, browser type, pages visited, and usage patterns to improve the service and ensure security.
We do not collect: Health information, financial data (payments are handled by Stripe), precise location data, or biometric information.
2. How We Use Your Information
- To create and maintain your account
- To provide access to purchased reports and guides
- To send promotional emails if you have opted in
- To improve the service through analytics
- To ensure security and prevent abuse
- To comply with legal obligations
3. Data Sharing
We use limited third-party services to operate:
- Cloudflare — hosting and edge delivery
- D1 (Cloudflare) — database storage
- Resend — transactional and marketing email delivery
- Stripe — payment processing (no card data touches our servers)
We may disclose information if required by law (court order, legal subpoena). We will notify you unless prohibited.
4. Data Retention
Account data is retained until you delete your account. Usage analytics are kept for 2 years in anonymized form. Backups are purged within 90 days. When you delete your account, personal data is removed within 30 days.
5. Your Rights
You have the right to:
- Access — view your data on the account page
- Correct — edit your name and phone on the account page
- Delete — delete your account and all associated data
- Opt out — toggle marketing email preferences on the account page
California residents (CCPA) and EU/UK residents (GDPR) have additional rights as provided by law. Contact us to exercise them.
6. Security
We protect your data with encryption in transit (TLS), encryption at rest, and access controls. Passwords are hashed using PBKDF2 with per-user salts. In the event of a data breach, affected users will be notified within 72 hours.
7. Children's Privacy
This service is intended for users 18 years or older. We do not knowingly collect data from children under 18.
8. Changes to This Policy
We may update this policy. Significant changes will be notified via email or in-app notification.
9. Contact
Questions about your privacy? Email [email protected].