Privacy Notice

Kristy Brereton ("we") runs 30 Days of Gratitude and is the controller of the personal information described here. We handle it in line with the Australian Privacy Principles.

What we collect and why

• Account details — email address, login credentials, and your name and email from Google if you sign in with Google. Used to create your account and let you sign in (contract).
• Your journey — reflections, check-in answers, progress and first name you choose to enter. Used only to provide the app back to you (contract).
• Purchase record — that you've paid and a transaction reference, so we can unlock access and show your receipt (contract, legal obligation).
• Support messages — if you email us (legitimate interests).
• Technical data — basic logs and device/browser information needed to keep the app secure and working (legitimate interests).

Site analytics

We use Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors. This is recorded for every visitor, without cookies and without identifying anyone. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Storage on your device

To keep you signed in and make the app fast, your browser stores your sign-in session and a copy of your journey. These are essential to the app working; they aren't used for advertising.

Who we share it with

• Paddle (Paddle.com Market Ltd), our Merchant of Record, for the sale, payment processing, tax compliance and invoicing. Paddle collects your payment details directly.
• Service providers who host the app and its database and handle sign-in (Lovable and its infrastructure providers), and Google if you choose Google sign-in.
• Professional advisers (legal, accounting) and authorities where required by law.

Some providers store data outside Australia. We use providers with appropriate safeguards.

How long we keep it

We keep your account and journal while your account exists. Purchase records are kept as long as tax law requires. When information is no longer needed, we delete or anonymise it.

Your rights

You can ask to access, correct or delete your personal information, or complain about how we've handled it, by emailing support@30daysofgratitude.app. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Data is encrypted in transit, and access to your journal is restricted to your own signed-in account.