Privacy Policy

1. Introduction

Welcome to SelfOS. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you visit our website and use our services, and tell you about your privacy rights.

2. Data We Collect

We collect and process the following types of data:

• Account Information: Name, email address, and profile information you provide during registration
• Habit and Goal Data: Information about your habits, goals, and progress that you input into the application
• Usage Data: Information about how you interact with our services, including pages visited and features used
• Technical Data: IP address, browser type, device information, and cookies
• Authentication Data: If you sign in with OAuth providers (like Google), we receive your basic profile information

3. How We Use Your Data

We use your data for the following purposes:

• To provide and maintain our services
• To personalize your experience and provide AI-powered coaching recommendations
• To track your progress on habits and goals
• To send you important notifications and updates about your account
• To improve our services and develop new features
• To ensure the security and integrity of our platform

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase as our backend infrastructure, which provides enterprise-grade security and compliance. Your personal data is encrypted both in transit and at rest.

5. Data Sharing

We do not sell your personal data to third parties. We may share your data only in the following circumstances:

• With your explicit consent
• With service providers who assist us in operating our platform (e.g., hosting, analytics)
• To comply with legal obligations or respond to lawful requests from authorities
• To protect our rights, privacy, safety, or property

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of your personal data
• Correction: You can update or correct your personal information
• Deletion: You can request deletion of your account and associated data
• Export: You can request a copy of your data in a portable format
• Opt-out: You can opt out of marketing communications at any time

7. Cookies

We use cookies and similar technologies to authenticate users, remember preferences, and analyze usage patterns. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our services.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: contact@selfos.club

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given us explicit consent to process your data for specific purposes (e.g., marketing communications).
• Contract Performance: When processing is necessary to fulfill our contract with you, such as providing the SelfOS services you subscribed to.
• Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security.
• Legal Obligation: When we are required to process your data to comply with applicable laws and regulations.

You may withdraw your consent at any time by contacting us at contact@selfos.club. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active Accounts: We retain your data for as long as your account is active.
• Deleted Accounts: When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
• Legal Requirements: We may retain certain data for up to 7 years to comply with legal, tax, and accounting obligations.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement purposes.

Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have the same data protection laws as your country.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transferring to countries with an adequacy decision from the European Commission
• Obtaining your explicit consent for specific transfers
• Transfers necessary for the performance of our contract with you

Our primary data infrastructure is provided by Supabase, which maintains appropriate certifications and safeguards for international data transfers.

14. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at contact@selfos.club. We will respond to your request within 45 days.

Our AI coaching feature uses automated processing to provide personalized recommendations based on your habits, goals, and progress data.

• Nature: The AI analyzes your input data to suggest habits, provide coaching guidance, and generate insights.
• Non-Binding: AI recommendations are suggestions only and do not result in any legally binding decisions about you.
• Your Control: You are always in control of whether to follow AI suggestions. You can disable AI features in your settings.
• Human Review: You may request human review of any AI-generated recommendation by contacting our support team.

Our AI is designed to support personal development and is not a substitute for professional medical, psychological, or therapeutic advice.

16. Business Transfers

In the event of a merger, acquisition, bankruptcy, or other sale of all or part of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.