Privacy Policy

Welcome to our website (the "Service"), operated by Concept Play, based in Indonesia. Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, how it's stored, and your rights regarding your data.

1. Information We Collect

We only collect information necessary to operate the app and provide services to you. This includes:

• Email address (for login and support)
• Journal entries (created by you, stored privately)
• Subscription and payment info (processed by PayPal)
• Metadata (e.g., timestamps of entries)

We do not collect personal analytics, behavioral data, or usage statistics beyond what's needed for app functionality.

2. How We Use Your Data

We use your data to:

• Authenticate and manage your account
• Save and retrieve your journal entries
• Provide AI-generated insights (using OpenAI)
• Process your subscription (via PayPal)
• Respond to your support requests

3. Data Storage

Your data is securely stored via Supabase, a trusted backend provider. Access is restricted and protected with modern encryption and security standards.

We do not share or sell your personal data to third parties.

4. AI & Third Parties

We use OpenAI to process and generate insights based on your journal entries. Data is only sent for processing, not for training or external storage. OpenAI's processing complies with privacy regulations.

Payments are handled by PayPal. Your payment information is never stored on our servers.

5. Cookies

We only use essential cookies to enable login/authentication and subscription flow. No tracking, advertising, or analytics cookies are used.

By using the site, you acknowledge the use of these essential cookies. Learn more in our Cookie Policy.

6. Your Rights

🌍 For EU Users (GDPR)

• Right to access your data
• Right to correct or delete your data
• Right to download your data (available to "World Champion" users)
• Right to withdraw consent for non-essential cookies

🇺🇸 For California Users (CCPA/CPRA)

• Right to know what data we collect
• Right to request deletion
• Right to opt out of data sharing (not applicable as we don't share data)

To request data access or deletion, contact us at support@grapplrnote.com.

7. Data Retention

We retain your data only as long as your account is active or as needed to comply with legal obligations. You may delete your account at any time through your settings or by emailing us.

8. Children's Privacy

This website is not intended for users under the age of 18. We do not knowingly collect information from children.

9. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact:

support@grapplrnote.com