Privacy Policy

Account Information: When you create an account through our OAuth authentication provider (Manus), we receive your display name, email address, and a unique user identifier. We do not receive or store your password — authentication is handled entirely by the OAuth provider.

Usage Data: We collect information about how you interact with the Service, including cards drawn, tasks completed, journal entries, challenge participation, forum posts, buddy connections, and coaching sessions. This data is used to personalize your experience and track your progress.

Journal & Reflection Content: When you use the Gratitude Journal or Reflections features, the content you write is stored securely in our database. AI-generated prompts and insights are processed through our AI service and are not used to train AI models.

Payment Information: Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full billing details. We retain only your Stripe customer ID and subscription ID to manage your subscription status.

Email Capture: If you submit your email through our waitlist or "Get 3 Free Wellness Tips" form, we store your email address and optional name to send you wellness content and product updates.

Device & Technical Data: We automatically collect standard technical information such as your browser type, device type, IP address, and referring URL. This data helps us maintain and improve the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Personalize your experience (card draws, AI prompts, coaching recommendations)
• Process your subscription and manage billing through Stripe
• Send you wellness tips if you opted in via email capture
• Facilitate community features (forum posts, buddy connections, events)
• Generate AI-powered insights based on your journal entries and draw history
• Display leaderboards and achievement badges (using your display name only)
• Notify you about account activity, events, and buddy nudges
• Analyze usage patterns to improve features and fix issues
• Comply with legal obligations

We integrate with the following third-party services, each with their own privacy policies:

Session Cookie: We use a single HTTP-only session cookie to maintain your login state. This cookie is essential for the Service to function and cannot be disabled while using authenticated features.

Local Storage: We use browser local storage to save your preferences (theme, tier level, deck state) so the app works offline and loads faster. This data never leaves your device.

Analytics: We may use privacy-friendly analytics to understand aggregate usage patterns. We do not use third-party advertising trackers or sell your data to advertisers.

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure database hosting, hashed session tokens, and access controls. Your data is stored in secure cloud databases with regular backups.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

You have the following rights regarding your personal data:

• Access: You can view your profile, journal entries, draw history, and other personal data through the app's Dashboard and Settings pages.
• Correction: You can update your display name and preferences through your Settings page.
• Deletion: You can delete individual journal entries and forum posts. To request complete account deletion, contact us at the email below. We will delete your data within 30 days, except where retention is required by law.
• Export: You can request a copy of your personal data by contacting us. We will provide it in a machine-readable format within 30 days.
• Opt-Out: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link or contacting us.
• Cancel Subscription: You can cancel your subscription at any time through the Settings page. You will retain access until the end of your current billing period.

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, with the following exceptions:

• Anonymized, aggregated data may be retained for analytics purposes
• Transaction records may be retained as required by financial regulations
• Forum posts may be anonymized rather than deleted to preserve community discussions
• Data required by law enforcement or legal proceedings will be retained as necessary

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through an in-app notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

We are not therapists, counselors, psychologists, or licensed medical professionals. The 52-Card Challenge is designed for general personal growth and wellness purposes only. It does not provide therapy, counseling, diagnosis, or treatment for any mental health condition.

If you are experiencing mental health difficulties, we strongly encourage you to seek professional guidance from a licensed therapist, counselor, or healthcare provider.

If you are considering hurting yourself, please call 988 (Suicide & Crisis Lifeline) and seek immediate treatment. You can also text HOME to 741741 (Crisis Text Line) or visit 988lifeline.org/chat for online support. In emergencies, call 911.

We are very concerned about you and your mental health. You are not alone, and help is available 24/7.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us: