Privacy Policy

1. Who we are

EfeVisionaryAcademy ("we", "us", "our") is the data controller for the personal data you share through this app. Our registered business name is Efevisionaryacademy.

2. What data we collect

• Account data: email address, display name, password hash (handled by Supabase Auth).
• Payment data: Paddle processes all payments. We do not store card numbers. We receive transaction IDs, subscription status, and billing period dates from Paddle.
• Usage data: pages visited, products viewed, and feature interactions (anonymised where possible).
• Device data: browser type, IP address, and screen size for fraud prevention and analytics.

3. Legal basis for processing

• Contract: to provide your purchases and subscription.
• Consent: for marketing emails (only if you opt in).
• Legitimate interests: fraud prevention, app improvement, and analytics.
• Legal obligation: tax and accounting records.

4. Sharing with Paddle

Paddle acts as our Merchant of Record. When you make a purchase or subscribe, Paddle collects your payment details, billing address, and email to process the transaction. Paddle is a separate data controller for payment data. Read their privacy policy at paddle.com/legal/privacy.

5. Data retention

We keep your account data for as long as you have an active account. Transaction records are retained for 7 years to comply with tax law. You can request deletion at any time (see Section 7).

6. Cookies and tracking

We use essential cookies for authentication and session management. Analytics cookies are used only with your consent. You can control tracking through your browser settings.

7. Your rights

Under UK GDPR and data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time.

To exercise any of these rights, email us at privacy@efevisionaryacademy.store.

8. International transfers

Your data is stored on Supabase servers (EU/US) and processed by Paddle (US/UK). Both providers maintain Standard Contractual Clauses (SCCs) and adequate safeguards for international data transfers.

9. Changes to this policy

We may update this privacy policy from time to time. Significant changes will be notified by email or in-app notice. The latest version is always available at this page.

10. Contact us

For privacy questions or data requests, contact:
Efevisionaryacademy
Email: privacy@efevisionaryacademy.store