Privacy Policy — Starter Draft

Last updated: September 6, 2026

Data we may process

Account identifiers, plan status, journal entries, application settings, support messages and security logs.

Credentials

Do not store broker passwords or privileged service keys in the browser. Secrets should remain in secure server-side environment variables.

Service providers

Production deployments may use providers such as Supabase, Cloudflare, Telegram and a payment processor. Update this policy with the providers you actually enable.

Deletion

Provide users with a way to request account and personal-data deletion where required.