Privacy Policy

• Personal Information: Name, email address, or other contact information you provide voluntarily through forms or communications.
• Usage Information: IP address, browser type, pages visited, and other usage data collected automatically for analytics.

We use cookies and similar technologies to analyze site usage and improve your experience. We use PostHog for analytics, which collects:

• Pages visited and interactions
• Device and browser information
• Approximate location (country/region level)
• Session duration and navigation patterns

Your consent: When you first visit our site, you will see a cookie consent banner. Analytics cookies are only set if you click "Accept". If you click "Reject", no tracking cookies are stored and analytics data is only kept in memory for the duration of your session.

Changing your choice: You can change your cookie preferences at any time by clearing your browser's cookies and localStorage for this site, which will show the consent banner again on your next visit.

Legal basis: We process analytics data based on your consent (GDPR Article 6(1)(a)). You have the right to withdraw consent at any time.

We use the following third-party services:

• PostHog (analytics): Collects usage data to help us improve our service. Data is processed in the United States. PostHog Privacy Policy
• Stripe (payments): Processes payment information securely. We do not store your payment card details. Stripe Privacy Policy
• Resend (email): Sends transactional emails such as magic link sign-ins. Resend Privacy Policy
• MongoDB Atlas (database): Stores your account and journal data. MongoDB Privacy Policy

International transfers: Some of these services are based in the United States. By using our service, you acknowledge that your data may be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

We implement strong security measures to protect your information:

• Encryption at rest: Your journal entries and personal data are encrypted using AES-256 encryption before being stored in our database.
• Secure transmission: All data is transmitted over HTTPS/TLS.
• Passwordless authentication: We use magic link authentication, eliminating password-related vulnerabilities.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Under applicable data protection laws (including GDPR), you have the right to:

• Access your personal data
• Correct inaccurate personal data
• Delete your personal data
• Withdraw consent for analytics cookies at any time
• Object to processing of your personal data
• Data portability - receive your data in a structured format
• Lodge a complaint with a supervisory authority if you believe your rights have been violated

To exercise any of these rights, contact us at hi@minimumlovableproduct.now

We retain your data as follows:

• Account data: Retained while your account is active. You can delete your account at any time.
• Journal entries: Retained until you delete them or your account.
• Analytics data: Retained by PostHog according to their retention policies (typically 7 years or less).