Privacy Policy

This Privacy Policy describes how Brave Beyond Breaking DBA Melissa Saulnier ("we", "us", or "our") collects, uses, and protects your personal data when you use the Stillwater website and application (the "Service"). We are the data controller for the personal data described in this notice.

1. Personal Data We Collect

• Account data: email address, authentication credentials (managed by our identity provider).
• User content: journal entries, mood logs, notes, and other content you create in the Service.
• Usage data: app interactions, feature usage, and device identifiers.
• Technical data: IP address, browser type, operating system, and error logs.
• Support data: messages and information you provide when contacting support.

2. How We Use Your Data

• To create and manage your account.
• To provide, maintain, and improve the Service.
• To secure the Service and prevent fraud.
• To respond to your support requests.
• To send you service-related communications (e.g., subscription renewal reminders).

3. Legal Basis

We process your personal data based on the following legal grounds:

• Contract performance: providing the Service you signed up for.
• Legitimate interests: security, fraud prevention, and product improvement.
• Consent: where required for specific processing activities.

4. Data Sharing

We share personal data with the following categories of recipients:

• Service providers: hosting, analytics, and support tooling vendors who process data on our behalf under appropriate contracts.
• Merchant of Record (Paddle): We share necessary information with Paddle for the sale of our product, subscription management, payments, tax compliance, and invoicing. Paddle is the Merchant of Record for all orders.
• Professional advisers: legal and accounting professionals, where necessary.
• Authorities: where required by law or to protect our rights.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or operational purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access to the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your personal data ("right to be forgotten").
• Restriction of processing in certain circumstances.
• Data portability — receiving your data in a structured, machine-readable format.
• Objection to processing based on legitimate interests.
• Withdrawal of consent where processing is based on consent.

To exercise your rights, contact us at support@stillwater.app. We will respond within one month.

7. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security reviews.

8. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for such transfers, such as standard contractual clauses.

9. Cookies

We use essential cookies to operate the Service. We may use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new notice on the Service with an updated effective date.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at support@stillwater.app.