Privacy Notice

1. Who we are

MyEpicDay is operated by Can Kurt ("we", "us"). We are the data controller for the personal data described in this notice. You can reach us at support@myepicday.app.

2. What we collect and why

• Account data (email address, sign-in identifier from Google or Apple, password hash, display name, avatar) — to create and secure your account. Legal basis: performance of our contract with you.
• Your day entries (daily score, written review, voice recordings, photos, dates) — this is the core content of the service and is stored privately for you. Legal basis: performance of our contract with you.
• Subscription data (plan, status, renewal date, subscription and customer identifiers from our payment provider) — to give you access to Pro features. Legal basis: performance of our contract with you.
• Technical and usage data (IP address, device and browser type, log and error data, timestamps) — to keep the service secure, prevent fraud and abuse, and diagnose problems. Legal basis: our legitimate interests in operating a secure, reliable service.
• Support messages you send us — to answer your request. Legal basis: legitimate interests and, where relevant, contract performance.

We do not sell your personal data, and we do not use the content of your day entries, voice notes or photos for advertising.

3. Who we share data with

• Merchant of Record — Paddle.com Market Ltd. Our order process is conducted by our online reseller Paddle.com, which acts as Merchant of Record for all orders. Paddle handles the sale, payment processing, subscription management, invoicing, tax compliance and refunds, and receives the personal data necessary for those purposes.
• Hosting and infrastructure providers who store the application, database and media files on our behalf as processors.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are required to disclose data by law.

4. International transfers

Some of our providers may process data outside the UK/EEA. Where that happens, transfers are covered by an adequacy decision or by Standard Contractual Clauses together with appropriate additional safeguards.

5. Retention

We keep your account and day entries for as long as your account exists. If you delete an entry it is removed from our systems, and if you delete your account we delete or irreversibly anonymise your personal data, except where we must retain records (for example transaction records for tax purposes) for a legally required period.

6. Your rights

Depending on where you live, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. To exercise any right, email support@myepicday.app — we respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored media, row-level access rules so that only you can read your own entries, and private storage buckets served through short-lived signed links.

8. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember your session. We do not use advertising or third-party tracking cookies. Our payment provider may set cookies that are necessary to complete a checkout. You can clear cookies and local storage at any time through your browser settings; doing so will sign you out.

9. Changes

We may update this notice as the service evolves. Material changes will be communicated in the app or by email before they take effect.