Privacy Policy

1. Who We Are

This Privacy Notice describes how WarWithin ("WarWithin", "we", "us") collects and uses your personal data. WarWithin is the data controller for personal data processed through the WarWithin app and website. Contact: support@warwithinapp.com.

2. What We Collect

Account info (email, display name), check-ins, journal entries, accountability partners, group membership, and device push tokens. Limited usage telemetry (app version, device type, IP address) is collected for security and debugging. We do not sell your data, ever.

3. How We Use It & Legal Basis

• Provide the service (account, streaks, reminders, SOS alerts, partner features) — legal basis: performance of a contract.
• Improve the AI Pattern Engine and product — legal basis: legitimate interests.
• Security, fraud prevention, and abuse detection — legal basis: legitimate interests and legal obligation.
• Payments and tax compliance (via Stripe) — legal basis: performance of a contract and legal obligation.
• Optional marketing emails — legal basis: consent (withdraw anytime).

4. Third Parties & Data Sharing

We share personal data only with the following categories of recipients:

• Stripe Payments — our Merchant of Record and payment processor for web-based subscriptions. Stripe handles billing, tax, invoicing, refunds, and fraud screening. See stripe.com/privacy.
• Apple and Google — process in-app purchases made through the App Store and Google Play.
• Supabase — database, authentication, and storage hosting.
• Lovable AI Gateway — powers the Pattern Engine.
• Professional advisers and authorities — when required by law.

No tracking pixels, no ad networks.

5. Data Retention

Account data is kept while your account is active. After deletion, personal data is removed within 30 days, except records we are legally required to retain (e.g. tax and payment records held by Stripe for up to 7 years). Backup copies are purged within 90 days. Anonymised analytics may be retained indefinitely.

6. Security

Data is encrypted in transit and at rest. Row-level security enforces that only you and your chosen partners can see your data. Access to production systems is limited and logged.

7. Your Rights

Subject to applicable law, you have the right to: access your data, rectify inaccurate data, request erasure, restrict or object to processing, request portability, and withdraw consent. UK/EEA users may lodge a complaint with their local supervisory authority. Export or delete your data anytime from Settings → Account, or email support@warwithinapp.com. We respond within 30 days.

8. International Transfers

Our processors may store data in the United States and other countries. Where required, transfers from the UK/EEA are protected by Standard Contractual Clauses or equivalent safeguards.

9. Children

WarWithin is not directed at children under 13 and we do not knowingly collect their data.

10. Contact

Questions? Email support@warwithinapp.com.