Privacy Notice

1. Who we are

This app is operated by BizFit community. For the personal data described in this notice, BizFit community is the data controller — we decide why and how your data is processed.

2. What we collect

• Account data: email address and, if you use Google sign-in, your name and profile identifier.
• Journal content: the entries, reflections, and bookmarks you save in the app.
• Reading data: reading progress, favorites, and reset completion, stored to sync your experience.
• Usage and device data: privacy-conscious analytics such as page views, device/browser type, and IP-derived region, used in aggregate.
• Support messages: anything you send us when asking for help.

Payment details (card numbers, billing data) are collected and processed by Paddle, our Merchant of Record, and are not covered by this notice.

3. Why we use it

• To create and secure your account and deliver the service (contract performance);
• To store and sync your journals, bookmarks, and progress (contract performance);
• To prevent fraud and abuse and keep the service secure (legitimate interests);
• To improve the product through aggregate analytics (legitimate interests);
• To respond to support requests (legitimate interests);
• To meet legal obligations where required (legal obligation).

4. Who we share it with

• Service providers/subprocessors: hosting, database, and analytics tooling that process data on our behalf;
• Paddle (Merchant of Record): for the sale of the unlock, subscription/payment management, tax compliance, and invoicing;
• Professional advisers: legal or accounting advisers where necessary;
• Authorities: where required by law.

We never sell your personal data.

5. Retention

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed it is deleted or anonymised. You can delete individual journal entries at any time from within the app.

6. Your rights

Depending on your country, you may have rights to access, correct, export, restrict, or erase your personal data, to object to processing, and to withdraw consent where processing is based on consent. If you are in the UK or EEA, you also have the right to complain to your supervisory authority, and we will respond to requests within one month. Where data is transferred outside the UK/EEA, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.

7. Security

We apply appropriate technical and organisational measures — including encrypted connections, row-level access controls so only you can read your journal, and restricted access for administrators — to protect your data.

8. Cookies

The app uses essential storage (such as your sign-in session and offline reading cache) and privacy-conscious, aggregate analytics. We do not use marketing or advertising cookies.

9. Contact

To exercise your rights or ask a privacy question, contact BizFit community via the contact details provided with your Paddle receipt or in the app.