This Privacy Notice explains how dectables ("dectables", "we", "us", or "our"), the operator of the Reclaim application (the "Service"), collects, uses, and protects your personal data. dectables is the data controller for personal data processed through the Service.

1. Personal data we collect

Account data — name, email address, password hash, authentication provider identifiers (e.g. Google or Apple), age range you select during onboarding.
Profile & usage data — addictions or goals you choose, streaks, habits, journal entries, reminder times, and other content you submit.
AI interaction data — messages you send to the AI coach and the structured inputs you provide for relapse-risk analysis.
Subscription data — plan tier, status, current period end (received from Paddle).
Technical data — IP address, device and browser identifiers, and limited logs used for security and rate-limiting.
Support data — messages you send us via email.

Payment card data is collected directly by Paddle and is not stored on our servers.

2. How we use your data & legal basis

Provide the Service (contract performance) — create your account, store your progress, deliver AI coaching and reminders.
Process subscriptions (contract performance) — manage trials, renewals, and access entitlements via Paddle.
Security & fraud prevention (legitimate interests / legal obligation) — rate limiting, abuse detection, log retention.
Product improvement (legitimate interests) — diagnose errors and improve features. We do not sell personal data.
Customer support (legitimate interests) — respond to your requests.
Transactional emails (contract performance) — welcome messages, download links, billing notifications. Marketing emails are sent only with your consent.

3. Who we share data with

Paddle — our Merchant of Record. Paddle processes payments, manages subscriptions, calculates taxes, issues invoices, and handles refunds and related customer service. See the Paddle Privacy Notice.
Hosting & backend (Supabase / Lovable Cloud) — stores account data, subscription records, and content you submit.
AI providers (Google via the Lovable AI Gateway) — processes your AI coach messages and relapse-risk inputs to generate responses.
Email delivery (Google / Gmail API) — sends transactional emails such as the mobile-app download link.
Identity providers — Google and Apple when you choose to sign in with them.
Professional advisers (legal, accounting) and authorities where required by law.

4. International transfers

Some of our providers operate outside the UK/EEA. Where personal data is transferred outside your region, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

5. Retention

Account and profile data: kept while your account is active and for up to 30 days after deletion, after which it is deleted or anonymised.
AI conversation logs: retained up to 90 days for safety and abuse review, then deleted.
Subscription and billing records: retained for the period required by applicable tax and accounting law (typically up to 7 years), by us and by Paddle.
Security logs: up to 90 days.

You can request deletion at any time using the in-app "Delete all my data" control or by emailing us.

6. Your rights

Subject to your local law, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate data;
Erase your data ("right to be forgotten");
Restrict or object to certain processing;
Receive your data in a portable format;
Withdraw consent at any time (where processing is based on consent);
Lodge a complaint with your local data-protection authority.

We aim to respond to requests within one month. Contact support@bey-ou.life.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), encrypted storage at rest with our hosting provider, role-based access controls, and least-privilege server credentials. No system is fully secure; we work to improve continuously.

8. Cookies

Reclaim uses only essential cookies and equivalent local storage required to keep you signed in, remember your theme preference, throttle abusive requests, and operate the Service. We do not use third-party advertising or tracking cookies. Your browser lets you manage or block cookies.

9. Children

Reclaim is intended for users aged 12 and older. Users between 12 and 18 should use the Service with a parent or guardian's involvement. We do not knowingly collect data from children under 12. If you believe a child under 12 has provided us with personal data, please contact us so we can delete it.

10. Changes

We may update this Notice from time to time. Material changes will be notified in-app or by email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

dectables
Email: support@bey-ou.life