Privacy Policy

[Paracl8 operator — legal entity TBD] ("we", "us", "our") publishes Paracl8 (the "Service") [jurisdiction TBD]. This Policy explains what personal information we collect, why, who we share it with, and the choices and rights you have. It applies to both this website and the Paracl8 app.

1. Information We Collect

When you create an account and use the Service, we collect:

• Account information — your email address, used for passwordless sign-in via magic link.
• Profile information — display name and timezone.
• Schedule preferences — your chosen reminder day/time and notification settings.
• Activity and task data — the activities and tasks you track (for example Deep work, Admin, or custom activities you name) and the logs you record for them, including timing, duration, and any notes you write.
• Push notification data — if you enable notifications, we store the subscription details your browser or device provides so we can deliver them, along with a label you may give the device.

We do not collect payment information (the Service is free), and we do not knowingly collect your physical address or phone number.

2. How We Use Your Information

We use your information to: operate your account and keep you signed in; schedule and generate your weekly reminders and nudges; send you push notifications you've opted into; and maintain and secure the Service. We do not use your information for advertising, and we do not build advertising profiles.

3. Who We Share It With

We share information with the following service providers, only as needed to run the Service — never for their own marketing purposes, and never for sale:

• Supabase — our database, authentication, and background-function provider. Holds essentially all data described above.
• Resend — delivers our transactional weekly reminder email; receives your email address and the email content.
• Web push infrastructure (e.g. your browser vendor's push service) — delivers push notifications; receives your subscription endpoint, not your activity content.
• Anthropic — we send relevant schedule and activity data to Anthropic's Claude API to generate the personalised wording of your weekly reminder. Anthropic processes this on our behalf and does not use it to train models, per our agreement with them.

We do not sell your personal information to anyone.

4. International Data Transfers

[Paracl8 operator — legal entity TBD] operates from [jurisdiction TBD], but our service providers listed above may store or process data in other countries (including the United States). Where this occurs, we take reasonable steps to ensure your information continues to receive appropriate protection under applicable data protection law.

5. Data Retention

We retain your information for as long as your account remains active. If you delete your account, we delete or anonymise your personal information within a reasonable period, except where we are required to retain it to comply with a legal obligation or resolve disputes.

6. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can access and correct most of your information directly in the app's Settings, or contact us at the address below to make a request.

If you are in the European Economic Area or United Kingdom, you also have rights under the GDPR/UK GDPR, including data portability and the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what information we hold and to request its deletion — we do not sell personal information, so there is no sale to opt out of.

7. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Security

We apply reasonable technical safeguards to protect your information, including encryption of stored OAuth tokens, database-level access controls scoping each user to their own data, and security headers on our web infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies

This website does not use cookies. The app uses one strictly-necessary session cookie to keep you signed in. See our Cookie Statement for details.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected in an updated "Last updated" date, and where required by law, we will ask you to re-confirm your consent.

11. Contact Us

To exercise any of the rights above, or with questions about this Policy, contact us at legal@paracl8.example.