Privacy Policy

This Privacy Policy describes how Jeffrey Kiyomura, operating as Mental Load Assistant ("we," "us," or "our"), collects, uses, and shares information about you when you use our web application and mobile app (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this Policy.

1. Information We Collect

Information You Provide Directly

• Account information: When you register, we collect your first name, last name, email address, and password. You may also optionally provide a display name (nickname) shown to other users.
• Profile photo: You may upload an optional avatar image. This image is stored on Cloudflare R2 object storage and is accessible via a URL associated with your account.
• Calendar and event data: We store the events, recurring schedules, tags, notes, and any other content you create within the Service.
• Payment information: When you subscribe to the Pro plan, payment is processed by Stripe. We do not store your full credit card number; we only retain the Stripe Customer ID and subscription status associated with your account.
• Communications: If you contact us for support or send us feedback, we may retain those communications to help resolve your issue and improve the Service.

Information Collected Automatically

• Device tokens: If you enable push notifications in the mobile app, we collect and store an Expo push token (and underlying APNS/FCM device token) to deliver notifications to your device. This token is deleted when you disable notifications or sign out.
• Log data: Our servers automatically record information when you use the Service, including your IP address, browser type, operating system, referring URL, pages visited, and timestamps. This data is used for security monitoring and diagnosing technical issues.
• Cookies and local storage: We use authentication cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and provide the Service.
• Process payments and manage your subscription.
• Send transactional emails (e.g., password reset, account notices). We do not send unsolicited marketing emails.
• Deliver push notifications you have opted into.
• Respond to your support requests and inquiries.
• Monitor and improve the reliability, security, and performance of the Service.
• Comply with legal obligations and enforce our Terms of Service.

We do not use your data to build advertising profiles, and we do not serve third-party advertisements within the Service.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

Sub-processors

We use the following third-party service providers to operate the Service. Each processes only the data necessary for their function and is contractually bound to protect it:

• Stripe — payment processing. Stripe collects and stores your payment card data under their own Privacy Policy.
• Cloudflare — object storage (R2) for media files, and CDN/infrastructure services.
• Our hosting provider — the web server and database that power the Service.
• PurelyMail — transactional email delivery (password resets, account notices).
• Expo / Apple / Google — push notification delivery via Expo's push service, Apple Push Notification Service (APNS), and Firebase Cloud Messaging (FCM).

Other Users

When you share a tag or event with another user, that user will see your display name (or first and last name if no display name is set). Your email address is never shown to other users.

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Service, our users, or the public.

Business Transfers

If the Service is acquired by or merged with another entity, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

Push notification tokens are deleted immediately when you disable notifications or sign out.

5. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted connections (HTTPS/TLS), hashed password storage, and access controls on our infrastructure.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. If you suspect that your account has been compromised, please contact us immediately.

6. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@mentalloadassistant.app.

7. Your Rights and Choices

Access and Correction

You can access and update most of your account information (display name, profile photo) directly within the Service. For other corrections, contact us at privacy@mentalloadassistant.app.

Account Deletion

You may request deletion of your account and associated personal data at any time by emailing privacy@mentalloadassistant.app. We will process your request within 30 days.

Push Notifications

You can disable push notifications at any time through the Settings screen in the mobile app or through your device's notification settings. Disabling notifications removes your device token from our servers.

Cookies

You can configure your browser to refuse cookies or alert you when cookies are being sent. Note that disabling authentication cookies will prevent you from remaining signed in.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you, to request deletion of that information, and to opt out of the "sale" of your personal information. We do not sell personal information. To exercise your rights, contact us at privacy@mentalloadassistant.app.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Our lawful basis for processing is performance of a contract (to provide the Service) and legitimate interests (security and abuse prevention). To exercise your rights, contact us at privacy@mentalloadassistant.app.

8. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing any personal information.

9. International Data Transfers

The Service is operated from the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you by email or a prominent notice in the Service. Your continued use of the Service after the effective date of the revised Policy constitutes your acceptance of the changes.