Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account registration information (name, email address, password)
• Profile and avatar customization data
• Goals, tasks, and accountability content you create
• Payment information (processed securely by our payment processor; we do not store full card numbers)
• Communications you send to us (support emails, feedback)

1.2 Information Collected Automatically

• Device information (device type, operating system, browser type)
• Usage data (features used, pages visited, session duration, click patterns)
• IP address and approximate geographic location
• Log data (access times, error logs, referring URLs)
• Cookies and similar tracking technologies (see Section 7)

1.3 Information from Third Parties

• Payment processors (transaction confirmation, billing status)
• AI service providers (interaction metadata, not content, unless required for safety review)
• Analytics providers (aggregated behavioral data)

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Provide, operate, and improve the Service
• Personalize your experience and avatar
• Process payments and manage subscriptions
• Send transactional communications (receipts, password resets, account notices)
• Send marketing communications where you have opted in (you may opt out at any time)
• Detect, investigate, and prevent fraud and abuse
• Comply with legal obligations
• Analyze usage trends to improve the Service
• Train and improve AI models (only with anonymized/aggregated data, never personal content without consent)

3. Legal Basis for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction requiring a legal basis for data processing, we process your personal data under the following bases:

• Contract: Processing necessary to provide the Service you have signed up for
• Legitimate Interests: Fraud prevention, security, and improving our Service
• Legal Obligation: Compliance with applicable laws
• Consent: Marketing communications and any non-essential cookies (you may withdraw consent at any time)

4. How We Share Your Information

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service, including:

• Payment processors (e.g., Stripe) — for billing and fraud prevention
• Cloud hosting providers — for data storage and service infrastructure
• AI providers (e.g., Anthropic) — for powering accountability features
• Analytics providers — for usage analysis
• Email service providers — for transactional and marketing communications

All service providers are contractually bound to use your data only to provide services to us and in compliance with applicable law.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as a business asset. We will notify you via the Service or email before your information is transferred and becomes subject to a different privacy policy.

5. International Data Transfers

The Service is operated from the United States. If you access the Service from the EEA, UK, or other regions with data transfer restrictions, you acknowledge that your personal data will be transferred to and processed in the United States, which may have different data protection standards than your country.

For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms as applicable. By using the Service, you consent to this transfer.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixel tags) to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage patterns and improve the Service
• Deliver relevant communications

You may control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service. Where required by law, we will obtain your consent before placing non-essential cookies.

8. Your Privacy Rights

8.1 All Users

Regardless of location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete your account and associated data
• Opt out of marketing communications at any time
• Receive a copy of your data in a portable format

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, or sell
• The right to delete personal information we have collected about you
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise your California rights, contact us at contact.helpmedaddy@gmail.com. We will respond within 45 days.

8.3 EEA and UK Residents (GDPR / UK GDPR)

If you are located in the EEA or UK, you have rights under the GDPR or UK GDPR, including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with your local data protection authority

Our data protection contact for GDPR purposes is: contact.helpmedaddy@gmail.com

8.4 Other International Users

We extend similar rights to users in other jurisdictions to the extent required by applicable local law, including but not limited to Canada (PIPEDA), Australia (Privacy Act 1988), Brazil (LGPD), and other applicable data protection regimes.

9. Children's Privacy

THE SERVICE IS STRICTLY INTENDED FOR USERS 18 YEARS OF AGE AND OLDER.

We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a minor, we will take immediate steps to delete that information. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact.helpmedaddy@gmail.com.

10. Security

We implement commercially reasonable technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS/SSL), hashed and salted passwords, and restricted access controls.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access that is beyond our reasonable control. You are responsible for maintaining the confidentiality of your account credentials.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. AI and Automated Decision-Making

The Service uses AI technology to generate personalized accountability messages and coaching content. This processing is for motivational purposes and does not produce legal or similarly significant decisions about you. If you have concerns about automated processing, you may contact us to discuss.

We do not use your personal goals or task content to train AI models without your explicit consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on the Service with a new effective date, and where required by applicable law, by sending you an email notification. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

14. How to Exercise Your Rights / Contact Us

To exercise any of your privacy rights, submit a data deletion request, or ask questions about this Privacy Policy, please contact:

We will respond to verifiable requests within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

For EEA/UK residents who are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.