Legal
Privacy Policy
Last updated: March 6, 2026
On this page
Privacy policy summary
- We collect only the data needed for account access, billing, and product functionality.
- You can request access, export, correction, or deletion of your personal data.
- You control cookie and analytics preferences at any time.
1. Scope
This policy explains what data Yourdec handles when you use yourdec.com and related services.
2. Data we collect
We collect account data (name and email), product data (goals, habits, logs, notes), billing references (Stripe IDs), and technical logs for reliability and abuse prevention.
3. How we use data
We use data to run core features, sync your account, process billing, provide support, and keep the platform secure. Some plans also include analytics and AI insights.
4. Processors
We use service providers: Stripe (payments), Resend (email), Cloudflare (infrastructure), PostHog and Google Analytics (analytics), and OpenAI API (selected insight features).
6. Security
We use encrypted transport (TLS), access controls, and encrypted backups. Time Capsule content is encrypted on the client before storage.
7. Retention
We keep data only as long as needed for service delivery, legal obligations, and fraud prevention. When deletion is requested, production data is removed within our standard deletion window.
8. Your rights (GDPR/CCPA)
You can request access, export, correction, deletion, and objection or limitation by contacting us. We respond within legal timelines.
9. Children's privacy
Yourdec is not intended for children below the minimum age in your jurisdiction. If a child submitted personal data, contact us and we will remove it.
10. Policy updates
We may update this policy. We announce material changes before they take effect. The Last updated date shows the latest revision.
11. Contact
Privacy contact: [email protected]. For legal matters: [email protected].