Privacy Policy
Effective [DATE] · [COMPANY LEGAL NAME] (“we”, “us”) operates this pilot app (“the App”). Questions: [PRIVACY CONTACT EMAIL].
1. What we collect
- Account details: the username and password an administrator set up for you, and an optional email address (used only for password-reset links). Passwords are stored as one-way hashes, not in readable form.
- Access requests: if you ask for access, the name, email, optional phone number, how you heard about us and the optional note you send. We use them only to review your request, set up your account and contact you about it. Declined requests are deleted after 90 days.
- Invite links: each member gets a personal invite link. If you request access through someone’s link, we record which link you used so the person who invited you can earn in-app rewards. They see only a count of friends who joined and finished the Freedom Path intake, never your name, email or plan. Rewards are app features only, with no cash value.
- Visit counts: we count how many people open the login and request-access pages each day, and which link or website sent them (for example, a Facebook post). We keep only daily totals, never your IP address or anything that identifies you or your device. When you open the request page, a small cookie remembers that link for one day so we know which link led to your request.
- Your plan data: the income, debts, goals, planned amounts, notes, review entries and snapshots you type or speak into the App. You choose what to enter; we don’t connect to your bank or any financial account.
- Security data: if you turn on two-factor login, a secret key for your authenticator app and hashed recovery codes. Login-attempt counts are kept briefly in server memory to block guessing.
- Purchase records: if you buy an upgrade, we keep which offer, the amount, the date and the payment reference. We never receive or store your card number.
- Technical data: one essential session cookie that keeps you logged in. We do not use advertising or analytics cookies or trackers. LAWYER: confirm that hosting-provider logs create no additional obligations, and revisit if analytics are added later.
2. How we use it
To run your account, show and save your plan, process purchases, secure the service, send password-reset emails you request, and respond to support requests. We do not sell your data and do not use it for advertising. [LAWYER: confirm lawful-basis wording if you serve users in the EU/UK.]
3. Who else handles data
- Hosting provider [e.g. Render] stores the App’s data on our behalf.
- Stripe processes payments on its own checkout page under its own privacy policy.
- Email provider [Resend, if used] delivers password-reset emails.
- Your browser’s speech services: if you use the voice feature, your browser (for example Chrome/Google or Safari/Apple) may send your audio to its own provider to turn speech into text, and spoken answers use your device’s voice. We do not receive, record or store your audio or transcripts. The browser vendor’s policy governs that processing.
4. Who can see your plan
Other members cannot see your plan. Administrators can create, reset and delete accounts and see purchases. To support your training, administrators can also see your progress: your member number and title, which plan steps you’ve finished, how many lessons you’ve completed in each course, how many Freedom Path stations you’ve reached and your rank, counts of toolkit entries (for example, how many decisions you’ve journaled), and when you last logged in. The App provides no screen for viewing your dollar amounts, debts, notes or written answers. However, plan data is not encrypted at rest, so people who operate the server or hosting account could technically access the stored files. [LAWYER: confirm this wording and our access-control commitments.]
5. How long we keep it
Until you ask us to delete your account or the pilot ends, then [RETENTION PERIOD, e.g. 30 days] for backups. Purchase records may be kept longer where the law requires [LAWYER: tax/accounting period].
6. Your choices
You can ask us at [PRIVACY CONTACT EMAIL] to access, correct or delete your data, and you can print your plan from the Report screen. [LAWYER: add region-specific rights (e.g. California, EU/UK) and response timelines.]
7. Security
We use encrypted connections (HTTPS), hashed passwords, optional two-factor login, login rate-limiting and per-user data separation. No system is perfectly secure, and we cannot guarantee absolute security. [LAWYER: breach-notification commitments.]
8. Children
The App is for adults 18 and over and is not directed to children. [LAWYER: confirm age limit.]
9. Not financial advice
The App is an educational organizing tool. Nothing in it is investment, tax, legal, insurance, credit or lending advice.
10. Changes and contact
We will post updates here and change the effective date. [COMPANY LEGAL NAME, MAILING ADDRESS, CONTACT EMAIL]