Privacy Policy

Last updated: December 4, 2024

At Re:shape, your privacy is fundamental to everything we do. This Privacy Policy describes in detail how we collect, use, store, share, and protect your personal information when you use our relationship advice application and related services.

By using Re:shape, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this Privacy Policy, please do not use our services.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account and use Re:shape, you provide us with:

• Account Information: Your name, email address, and profile preferences
• Onboarding Information: Relationship status, relationship goals, communication styles, conflict management preferences, and other details you share during the initial setup process
• Chat Conversations: All messages, questions, and interactions you have with our AI chatbot, including the context and advice provided
• User Preferences: Settings, saved articles, bookmarked resources, and customization choices
• Feedback and Communications: Survey responses, customer support inquiries, and any other communications with Re:shape

1.2 Information Collected Automatically

When you use our services, we automatically collect certain information:

• Device Information: Device type, operating system, and unique device identifiers
• Usage Data: Pages viewed, features accessed, time spent in the app, navigation patterns, click data, and interaction with articles and resources
• Log Data: Error logs, and referring URLs

1.3 Information from Third Parties

We may receive information about you from third-party services if you choose to connect your Re:shape account with them, such as:

• Authentication providers for account creation and login
• Payment processors for subscription management
• Analytics services that help us understand user behavior

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Improve Our Services

• Deliver personalized relationship advice based on your unique situation, goals, and preferences
• Maintain context across your conversations to provide more relevant and helpful responses
• Recommend articles, resources, and content tailored to your interests and needs
• Develop, test, and improve our AI algorithms and service features
• Conduct research and analytics to understand how users interact with Re:shape

2.2 To Communicate With You

• Send you account-related notifications, updates, and security alerts
• Respond to your inquiries, questions, and support requests
• Send you newsletters, tips, and educational content (with your consent)
• Notify you about changes to our services, policies, or terms

2.3 To Ensure Security and Compliance

• Protect against, investigate, and prevent fraudulent, unauthorized, or illegal activity
• Monitor and analyze security threats and vulnerabilities
• Enforce our Terms and Conditions and other policies
• Comply with legal obligations and respond to lawful requests from authorities

2.4 To Process Payments

• Process subscription payments and manage billing
• Prevent payment fraud and verify transactions
• Maintain records for accounting and tax purposes

3. Legal Basis for Processing (for EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to provide the services you requested
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
• Legal Obligation: Processing necessary to comply with legal requirements

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We work with third-party service providers who perform services on our behalf, such as:

• Cloud hosting and storage providers
• AI and machine learning infrastructure providers
• Payment processors and billing services
• Analytics and performance monitoring services
• Email delivery and communication services
• Customer support platforms

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements and Protection

We may disclose your information if required to do so by law or if we believe such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Prevent or investigate potential fraud or security issues
• Protect the personal safety of users or the public

4.3 Business Transfers

If Re:shape is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you. This may include statistical data about usage patterns, demographics, or trends for research, marketing, or partnership purposes.

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: We limit access to personal information to employees and contractors who need it to perform their job functions. All access is logged and monitored.
• Authentication: Your account is protected by your password, which is hashed and salted using bcrypt or similar secure algorithms.
• Infrastructure Security: We use secure cloud infrastructure with regular security audits, penetration testing, and vulnerability assessments.
• Incident Response: We maintain an incident response plan to quickly address any security breaches.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

• Account Information: Retained while your account is active and for up to 90 days after deletion (to allow for account recovery)
• Chat Conversations: Retained while your account is active. Deleted within 30 days of account deletion.
• Usage Data and Logs: Typically retained for 12-24 months for security and analytical purposes
• Financial Records: Retained for 7 years to comply with tax and accounting regulations

After the retention period expires, we will securely delete or anonymize your personal information.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access your personal information through your account settings. You have the right to request a copy of your data in a portable format.

7.2 Correction

You can update or correct your information at any time through your account settings or by contacting us.

7.3 Deletion

You can delete your account at any time through the app settings. This will permanently delete your personal information, subject to our retention requirements. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Opt-Out of Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by adjusting your notification preferences in your account settings. Note that you cannot opt out of service-related communications.

7.5 Cookie Management

Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that some features of Re:shape may not function properly without cookies.

7.6 Do Not Track

Some browsers have "Do Not Track" features. Currently, there is no industry standard for responding to these signals, so Re:shape does not respond to Do Not Track requests.

7.7 Additional Rights for EEA/UK Users

If you are located in the European Economic Area or United Kingdom, you have additional rights:

• Right to restriction of processing
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@getreshape.app

8. International Data Transfers

Re:shape is based in [Your Country/Region], and your information may be stored and processed in this location or any other country where we or our service providers operate. By using Re:shape, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

For transfers from the EEA or UK, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or rely on adequacy decisions where applicable.

9. Children's Privacy

Re:shape is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@getreshape.app. If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Third-Party Links and Services

Re:shape may contain links to third-party websites, articles, or resources. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise these rights, contact us at privacy@getreshape.app. We will verify your identity before processing your request.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email (to the address associated with your account)
• Display a prominent notice within the app
• For material changes that affect your rights, obtain your consent where required by law

We encourage you to review this Privacy Policy periodically. Your continued use of Re:shape after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@getreshape.app
• Support: support@getreshape.app
• Data Protection Officer: dpo@getreshape.app

We will respond to your inquiry within 30 days of receipt.

14. Commitment to Privacy

At Re:shape, we understand that you trust us with deeply personal information about your relationships and life. This trust is not something we take lightly. We are committed to maintaining the highest standards of privacy and security, being transparent about our practices, and giving you control over your information.

We continuously work to improve our privacy practices and welcome your feedback. Thank you for choosing Re:shape.