Privacy Notice

This Privacy Notice explains how NOT ENOUGH APP ("we", "us", "our") collects, uses, and protects your personal data when you use the Not Enough application and related websites (the "Service"). NOT ENOUGH APP is the data controller for the personal data described here.

1. Information we collect

• Account data: email address, login credentials, display name, optional profile photo.
• Content you create: journal entries, confessions, reflections, mood logs, ritual responses, AI prompts and saved outputs.
• Usage and device data: pages visited, features used, approximate location derived from IP, device/browser type, crash and diagnostic logs.
• Support data: messages you send through the Contact form or email.
• Subscription metadata: plan, status, renewal dates, and the identifiers our payment provider sends us (we do not receive or store full card numbers).

2. How we use your data

• Provide, personalise, and improve the Service (contract performance).
• Generate AI responses, reflections, and recommendations you request (contract performance).
• Authenticate you, prevent fraud, and keep the Service secure (legitimate interests, legal obligation).
• Respond to support requests and communicate service updates (contract performance).
• Send optional product or marketing emails where you have consented (consent — you can withdraw at any time).

3. Legal basis

We process personal data on the basis of contract performance (to deliver the Service you sign up for), our legitimate interests (security, abuse prevention, product improvement), consent (optional marketing and analytics cookies), and legal obligations (tax, accounting, responding to lawful requests).

4. Who we share data with

• Infrastructure and hosting providers who run our database, file storage, and email delivery.
• AI model providers who process the prompts you submit to generate responses.
• Paddle.com Market Limited, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance, fraud prevention, and invoicing.
• Analytics and error-monitoring services used to keep the Service reliable.
• Professional advisers (legal, accounting) where reasonably necessary.
• Authorities where required by law or to protect rights, property, or safety.

We do not sell your personal data.

5. International transfers

Your data may be processed outside the country where you live, including in the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data for as long as your account is active and for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed it is deleted or anonymised. You can request deletion of your account at any time via the Contact form.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, object to processing, and withdraw consent. EEA/UK users also have the right to lodge a complaint with their local supervisory authority. We aim to respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege principles, to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service (authentication, session, security). Where we use optional analytics or marketing cookies, we ask for your consent first and you can change your preferences at any time in your browser.

10. Children

The Service is not directed to children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.

11. Changes

We may update this Privacy Notice from time to time. We will update the "Last updated" date above and, for material changes, give you reasonable notice through the Service.

12. Contact

Questions or rights requests: use the Contact form in the app.