DRAFT — needs legal review. Not a final privacy policy.

Privacy Policy

Draft v0.1 · EnduraSync · Owner: Joshua Scott

What we collect

Account email, chosen plan, start or event date, timezone, billing details via Stripe, and optional tracker uploads you choose to share. We aim to collect as little health-adjacent data as possible.

How we use it

To generate and deliver your plan, process payments, send transactional email (welcome, check-ins), and improve plan quality. Marketing email only with your consent and owner approval of copy.

Sharing

Processors such as Stripe (payments), hosting/DB (e.g. Vercel, Supabase), and email providers. No sale of personal data.

Retention & deletion

Calendar feed tokens are secret. Delete-on-request process to be implemented before launch. Placeholder for jurisdiction-specific rights (CCPA/GDPR) — counsel to complete.