PRIVACY POLICY

Your privacy matters. This Privacy Policy explains how Ordo Daily collects, uses, and protects your information.

1. Information We Collect

Account information: when you sign up, we collect your email address, password (encrypted), name, and account preferences.

Usage data: as you use the Service, we collect data about your missions, goals, habits, journal entries, focus sessions, check-ins, and other activity. This is your data — you control it.

Technical data: we automatically collect device type, browser, IP address, and pages visited via analytics tools.

Payment data: when you subscribe, payment is processed by Stripe. We never see or store your card details.

2. How We Use Your Data

We use your data to provide and improve the Service, personalize features, communicate with you about your account, detect and prevent fraud, and comply with legal obligations.

We do NOT: sell your data; use your data to train AI models; share your journal entries or notes with anyone; advertise to you using your personal data.

3. AI Features and Third-Party Processors

When you use AI features, relevant portions of your data are sent to AI providers (OpenAI and Anthropic) to generate responses. Both providers contractually agree not to use API data for training and to delete it within 30 days.

4. Data Sharing

We share data only with: Supabase (database), Stripe (payment), OpenAI and Anthropic (AI features), Sentry (errors), PostHog (analytics), Resend (transactional email). Each is contractually bound to security and privacy standards. We do not share with advertisers or data brokers.

5. Data Storage and Security

Your data is stored encrypted by Supabase. Connections use HTTPS encryption. We use Row Level Security to ensure users only access their own data.

6. Your Rights

You can access your data (download via settings), correct your data, delete your data (delete account in settings), restrict processing, and lodge a complaint with a data protection authority.

EU users (GDPR) and California users (CCPA) have additional rights. Contact ordodailyco@gmail.com to exercise them.

7. Data Retention

We retain your account data while your account is active. Upon account deletion, your data is permanently removed within 30 days.

8. Children

Ordo Daily is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated.

10. Contact

Privacy questions: ordodailyco@gmail.com

Questions? Email ordodailyco@gmail.com