Privacy Policy

Golden Poppy, Leiria, Portugal (goldenpoppy.pt@outlook.com) is the data controller.

• Account: email address and sign-in data.
• Session record: protocols run, durations, states and notes you choose to write.
• Billing: plan, status and Stripe customer reference. Card details are handled by Stripe and never reach us.
• Reminders and sound preferences stay on your device.

To provide the service (contract), process payments (contract and legal obligation) and keep the service secure (legitimate interest). We do not sell data or use it for advertising.

When you request a match or pattern read, the text you wrote and relevant session details are sent to our AI provider to generate a response. It is not used to identify you.

Hosting and database, Stripe (payments) and an AI gateway. Some may process data outside the EU under standard contractual clauses.

Account and session data are kept while your account exists. Billing records are kept as required by tax law.

Access, correction, deletion, portability, objection and restriction. Email goldenpoppy.pt@outlook.com. You may complain to the CNPD (Portugal).