Privacy Policy

1. Introduction

Kaizen Daily ("we," "our," or "us") is a mobile application operated by TASTECH Pte. Ltd., a company incorporated in Singapore.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Kaizen Daily mobile application ("App") and related services. By using the App, you agree to the practices described in this policy.

We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. Information We Collect

We collect only the information necessary to provide and improve our service.

2.1 Information You Provide

• Email address — collected when you create an account via Supabase authentication. Used for login, account recovery, and service-related communications.
• Daily entries ("1% logs") — text content you write as your daily improvement records. This content is stored securely and is private to your account.
• Weekly reflections — text content you write during weekly review sessions. Stored securely and private to your account.
• Notification preferences — your settings for push notifications (e.g., daily reminder times, enabled/disabled status).
• Profile photo — if and when you choose to set a profile photo (this feature may be added in a future update; photo_url is reserved but currently unused).

2.2 Information Collected Automatically

• Subscription status — whether you are on a free or premium plan, managed via RevenueCat (see Section 4).
• App usage data — basic interaction data (e.g., feature usage, session length) may be collected to help us improve the App. This data is aggregated and not linked to personally identifiable information.

2.3 Information We Do Not Collect

• We do not collect precise location data.
• We do not access your contacts, camera, or microphone beyond features you explicitly activate.
• We do not collect financial information; all payments are handled by the App Store (Apple) or Google Play.

3. How We Use Information

We use the information we collect for the following purposes:

• Providing the service — to create and maintain your account, display your entries, and sync data across your devices.
• AI-powered weekly summaries (Premium) — your weekly reflection text is sent to Google Gemini API to generate personalized insights. This data is processed in real time and is not stored by Google for training purposes under our API agreement. See Section 4.
• Notifications — to send daily reminders and motivational nudges based on your preferences.
• Subscription management — to verify your subscription status and unlock premium features.
• Customer support — to respond to your inquiries or troubleshoot issues.
• Service improvement — to analyze aggregated usage patterns and improve app performance and features.
• Legal compliance — to comply with applicable laws, regulations, and legal processes.

We do not sell your personal data to third parties. We do not use your journal entries or reflections for advertising purposes.

4. Third-Party Services

We use the following trusted third-party services to operate the App:

4.1 Supabase

Supabase is our Backend-as-a-Service (BaaS) provider, handling authentication and data storage. Your email address, daily entries, weekly reflections, and preferences are stored on Supabase infrastructure hosted on Amazon Web Services (AWS) in the US-East-1 (Northern Virginia) region.

Supabase Privacy Policy: https://supabase.com/privacy

4.2 RevenueCat

RevenueCat manages in-app subscriptions and purchase validation across iOS and Android. RevenueCat receives your device identifier and subscription transaction data. RevenueCat does not receive your journal entries or reflections.

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

4.3 Google Gemini API

Premium subscribers can generate AI-powered weekly summaries. To produce these summaries, we send your weekly reflection text to the Google Gemini API. This data is transmitted securely over HTTPS, processed to generate a summary, and returned to your device. We do not store the data sent to Gemini beyond the time required to generate the response. Google's use of this data is governed by the Google Cloud / Gemini API terms, which prohibit Google from using API data to train its models.

Google Privacy Policy: https://policies.google.com/privacy

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account:

• Your data will be marked for deletion immediately upon your request.
• Complete deletion from all systems, including backups, will occur within 30 days.
• Aggregate, anonymized analytics data (which cannot be used to identify you) may be retained beyond this period.

You can request account deletion at any time by contacting us at support@kaizendaily.app or using the in-app account deletion feature.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 Rights Under GDPR (EU/EEA Residents)

• Right of Access — request a copy of the personal data we hold about you.
• Right to Rectification — request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten") — request deletion of your personal data.
• Right to Data Portability — receive your data in a structured, machine-readable format (JSON or CSV).
• Right to Restrict Processing — request that we limit how we use your data.
• Right to Object — object to certain processing activities.
• Right to Withdraw Consent — where processing is based on consent, withdraw it at any time.

6.2 Rights Under CCPA (California Residents)

• Right to Know — request details about the personal information we collect and how it is used.
• Right to Delete — request deletion of your personal information.
• Right to Opt-Out of Sale — we do not sell your personal information. No opt-out action is required.
• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

6.3 How to Exercise Your Rights

To exercise any of these rights, contact us at support@kaizendaily.app with your request. We will respond within 30 days. We may need to verify your identity before processing certain requests.

7. Children's Privacy

If you are under 13, please do not use this App or provide any personal information to us.

8. International Data Transfers

TASTECH Pte. Ltd. operates from Singapore. Your data is stored on Supabase infrastructure hosted on Amazon Web Services (AWS) in the US-East-1 region (Northern Virginia, United States).

By using Kaizen Daily, you consent to your data being transferred to and processed in the United States and other countries that may have different data protection laws than your country of residence.

For transfers from the EU/EEA, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards as required by GDPR.

9. Cookies and Tracking

Kaizen Daily is a mobile application and does not use browser cookies. The App may use local device storage (AsyncStorage) to save your preferences and session tokens locally on your device.

We do not use cross-app tracking, advertising identifiers (IDFA/GAID), or third-party analytics SDKs that track your behavior across other apps or websites. If we introduce analytics in a future update, we will update this policy and, where required, seek your consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via in-app notification or email for significant changes.

Your continued use of the App after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@kaizendaily.app
• Company: TASTECH Pte. Ltd.
• Registered in: Singapore

We aim to respond to all privacy-related inquiries within 5 business days.