Pakto is developed and operated by a sole individual acting as the data controller for the personal information described below. For any privacy question, request, or complaint, contact support@gopakto.com. We aim to respond within 30 days as required under GDPR.

We collect only what the Service needs to function:

• Account data: email address, username, display name, date of birth (for age verification), and password hash. Sign-in via Apple / Google returns only the fields you authorise them to share.
• Profile content: avatar, bio, profile visibility, and any content you publish (Pacts, Journeys, check-ins, comments, Circles). Public content is visible to anyone; private content is visible only to you and your invited members.
• Commitment data: your Pact details, schedule, verification method, streaks, check-in photos / videos / notes, missed and recovered days.
• Health-derived signals (opt-in only): when you sign a Pact backed by Apple Health, Screen Time, Google Health Connect, or Android Digital Wellbeing, we receive the specific daily metric you authorised (steps, sleep, mindful minutes, active minutes, app usage). We never read anything you did not explicitly grant. Raw health data is not stored on our servers beyond the check-in it verifies.
• Payment / subscription metadata: when you subscribe or purchase Grain, Apple or Google shares a receipt identifier and a subscription status. We never see your card number, bank details, or Apple / Google account credentials.
• Device & log data:device model, OS version, app version, IP address, coarse timezone, crash and error diagnostics.
• Push tokens if you enable notifications, so we can deliver check-in reminders.

We do not sell your personal data. We do not use your health, commitment, or check-in data for advertising.

• Contract: to provide the core Service — your account, Pacts, Journeys, Circles.
• Consent: to access health-derived signals, deliver push notifications, or process any optional data. You may withdraw consent at any time in the app's settings.
• Legitimate interest: to keep the Service secure, prevent abuse, and diagnose crashes.
• Legal obligation: to respond to lawful requests and to comply with tax / consumer protection law where applicable.

We share personal data only with the service providers we need to run Pakto. Each of them is bound by a data-processing agreement:

• Amazon Web Services — hosting, storage, and database (EU / US regions).
• Apple & Google — App Store / Play Store distribution, in-app purchases, push delivery.
• RevenueCat — subscription entitlement management.
• Stripe — payment processing for any web-based purchases.
• Sentry / crash-reporting providers — diagnostics.

We never sell or rent your data to advertisers, brokers, or marketing platforms. We may disclose data if compelled by valid legal process (court order, subpoena) or to protect the rights, safety, or property of the Developer, our users, or the public.

Data may be processed on servers located outside your country of residence, including in the United States and the European Union. Where we transfer personal data outside the EEA / UK, we rely on Standard Contractual Clauses approved by the European Commission, or on the provider's own approved transfer mechanisms.

• Account data: for the life of the account.
• Pacts, Journeys, check-ins: for the life of the account, unless you delete them earlier.
• Payment / subscription receipts: 7 years, to meet tax obligations.
• Log & crash data: 90 days.
• Backups: rolling 35-day window; deletion propagates within that window.

When you delete your account, we erase your identifiable data and content within 30 days, except where retention is legally required (e.g. tax records).

Depending on where you live (EEA, UK, California, and other jurisdictions), you have the right to:

• Access the data we hold about you.
• Correct data that is inaccurate.
• Delete your data (“right to be forgotten”).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw any consent you previously gave.
• Lodge a complaint with your national data-protection authority.

To exercise any of these rights, email support@gopakto.com from the address on your account. We may request additional verification to confirm your identity.

Pakto is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us at support@gopakto.com and we will delete it.

We use industry-standard measures to protect your data: TLS in transit, encryption at rest, hashed passwords (argon2id), least-privilege database access, and short-lived credentials for backend services. No online service can guarantee absolute security, but we take reasonable and proportionate steps to reduce risk.

Pakto may link to external websites (Apple Health, Play Store, Stripe, etc.). We are not responsible for their content or their privacy practices. Review their policies before providing them any personal data.

In line with Apple App Store requirements, our full data-type disclosures appear on the app's App Store product page (“App Privacy” card). The categories listed there mirror the categories described in this Policy. No data collected by Pakto is used for cross-app tracking as defined by Apple's App Tracking Transparency framework.

We may update this Policy from time to time. If a change is material (e.g. expanded processing, new recipients, weaker user rights), we will notify you in-app and by email at least 14 days before it takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

Privacy enquiries, data requests, and complaints: support@gopakto.com. We answer every message.