Privacy Policy

Information We Collect

Personal Information

When you create an account, we collect:

• Username and email address
• Password (securely encrypted)
• Goal and milestone data you create
• Community posts and comments

Analytics and Usage Data

We collect anonymized analytics data to improve our service:

• IP Addresses: We collect and anonymize your IP address by removing the last segment (e.g., 192.168.1.123 becomes 192.168.1.0)
• Device Information: Browser type, device type, and operating system
• Usage Patterns: Pages visited, time spent, and feature usage
• Performance Data: Loading times and error rates

How We Use Your Information

• Service Provision: To provide and maintain your Goal Tracker account
• Communication: To send important account and service updates
• Analytics: To understand usage patterns and improve our platform
• Security: To detect and prevent fraud, abuse, and security threats
• Support: To provide customer support and resolve issues

Legal Basis for Processing

We process your data based on:

• Contract: To provide the services you've signed up for
• Legitimate Interest: For analytics, security, and service improvement
• Consent: For optional features like marketing communications
• Legal Obligation: To comply with applicable laws

Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion
• Analytics Data: Anonymized IP and usage data is retained for 90 days
• Support Data: Customer support interactions retained for 2 years
• Security Logs: Security-related logs retained for 1 year

Your Rights

Under GDPR and other privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Restriction: Restrict processing of your data

Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Basic analytics (anonymized)

We do not use advertising cookies or third-party tracking.

Data Security

We implement appropriate security measures including:

• Encryption in transit and at rest
• Regular security audits and updates
• Access controls and authentication
• Data anonymization and pseudonymization

Third-Party Services

We use the following third-party services:

• Stripe: For payment processing (has its own privacy policy)
• Email Service: For transactional emails only

We do not share personal data with third parties for marketing purposes.

International Data Transfers

Your data is processed in the UK/EU. If we transfer data outside these regions, we ensure adequate protection through appropriate safeguards.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes via email or prominent notice on our website.

Contact Information