Privacy Policy (SoftDay)

1. Introduction

Soft Day ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information.

2. Information We Collect

A. Information You Provide Directly

• Email Address: For account creation, subscription management, and restore purchase verification.
• Recovery Plans & Habits: Data you create while using the app (energy levels, stress levels, sleep quality, activities, journal entries, reflections).
• Subscription Information: Billing details processed via Stripe (we do not store full credit card details).

B. Information Collected Automatically

• Device Information: Device type, operating system, app version, device ID.
• Usage Data: Features used, activity timestamps, app performance metrics.
• Analytics: Crash reports, error logs (via Sentry or similar services).

C. Third-Party Data

• Stripe: Payment and subscription status information.

3. How We Use Your Information

• To provide the service: Process subscriptions, send recovery codes, sync your data.
• To improve the app: Analyze usage patterns, fix bugs, optimize features.
• To communicate: Send password resets, subscription reminders, important updates.
• For security: Prevent fraud, protect accounts, enforce terms of service.
• Legal compliance: Meet regulatory and legal obligations.

4. Data Sharing & Disclosure

• Service Providers: Stripe (payments), SendGrid or similar (emails), Sentry (error tracking).
• Legal Requirements: We may disclose information if required by law or to protect safety.
• Business Transfers: If Soft Day is acquired or merged, your data may be transferred.
• With Your Consent: Only as you explicitly authorize.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

• Active Account: While your account is active, we retain all your data.
• Account Deletion: Upon request, we delete your account and associated data within 30 days.
• Backup Data: Backup copies may be retained for up to 90 days for disaster recovery.

6. Data Security

• Encryption: Your data is encrypted in transit (TLS/SSL) and at rest.
• Access Controls: Only authorized personnel access personal information.
• Regular Audits: We conduct security reviews and vulnerability assessments.
• Incident Response: We notify you of data breaches affecting your personal information.

7. Your Rights & Choices

Access & Portability. You have the right to request a copy of your personal information. Contact us at info@domcreator.co.uk.

Rectification. You can update your email address and account settings within the app.

Deletion. You can request account deletion and permanent removal of your data. We will comply within 30 days, except where legally required to retain information.

Opt-Out. You can disable app analytics in your device settings. You can unsubscribe from non-essential emails by clicking the unsubscribe link.

8. Third-Party Links

Soft Day may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before sharing information.

9. Children's Privacy

Soft Day is not intended for users under 13. We do not knowingly collect information from children under 13. If we discover such data, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws different from your home country. By using Soft Day, you consent to such transfers.

11. Cookies & Tracking

• Local Storage: The app uses browser local storage to remember your theme preference.
• Analytics Cookies: Third-party services may use cookies to track app performance.
• You can disable: Adjust your browser or device settings to limit tracking.

12. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected.
• Know whether personal information is sold or disclosed.
• Delete personal information.
• Opt-out of the sale of personal information.

To exercise these rights, contact info@domcreator.co.uk with "California Privacy Request" in the subject line.

13. European Privacy Rights (GDPR)

If you are located in the EU, you have rights including:

• Access, rectification, erasure.
• Restrict processing, data portability.
• Object to processing, withdraw consent.

Contact info@domcreator.co.uk with "GDPR Request" in the subject line, and we will respond within 30 days.

14. Data Protection Officer

For GDPR-related inquiries, contact: info@domcreator.co.uk.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Effective Date" and posting the revised policy on our website and within the app.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• Email: info@domcreator.co.uk
• Website: domcreator.co.uk
• Mailing Address: domcreator.co.uk (if applicable).