1. Introduction

Achiever ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using Achiever, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information you provide

Account information: email address, display name, phone number (optional)
Goal descriptions and task inputs you submit to the AI pipeline
Payment information (processed by Razorpay - we do not store card details)
Profile preferences and model settings

2.2 Information collected automatically

Usage data: pages visited, features used, plan generation activity
Work session data: task start/pause/complete timestamps for analytics
IP address (used for geo-detection to show localised pricing)
Browser type and device information
Authentication tokens stored in httpOnly cookies

3. How We Use Your Information

To provide, operate, and improve the Achiever platform
To generate AI-powered plans using your goal descriptions
To process payments and manage subscriptions
To send weekly progress reports and transactional emails
To detect your country for localised pricing (IP geolocation)
To provide analytics and productivity insights
To enforce our Terms of Service and prevent abuse
To respond to support requests

4. AI Processing of Your Data

When you submit a goal description, it is sent to AI language models (via OllamaFreeAPI community nodes or configured models) to generate your plan. Your goal descriptions may be processed by third-party AI infrastructure. We do not use your personal data to train AI models. Goal descriptions are stored in our database to enable plan modification and history.

5. Data Sharing

We do not sell your personal data. We share data only with:

Razorpay - for payment processing (subject to Razorpay's privacy policy)
Neon PostgreSQL - our cloud database provider for data storage
Brevo (Sendinblue) - for transactional email delivery
ipgeolocation.io - for IP-based country detection (IP only, no personal data)
Google - if you use Google OAuth or Calendar integration

We may disclose data if required by law or to protect the rights and safety of our users.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data, plans, tasks, and analytics are permanently deleted within 30 days. Payment transaction records may be retained for up to 7 years for legal and accounting compliance.

7. Security

We implement industry-standard security measures including: httpOnly JWT cookies, bcrypt password hashing, TLS encryption in transit, and PostgreSQL row-level access controls. No system is 100% secure; we encourage you to use a strong, unique password.

8. Children's Privacy

The Service is not directed to children under 13. Users under 18 require parental consent. The Parent Mode feature allows parents to monitor and manage child accounts. Child account data is subject to the same protections as adult accounts.

9. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data via your profile settings
Delete your account and all associated data
Opt out of marketing emails (transactional emails cannot be opted out)
Request a copy of your data by contacting us

10. Cookies

We use a single httpOnly cookie ("access_token") for authentication. We do not use third-party tracking cookies or advertising cookies. We use localStorage only to store your email address for display purposes in the navbar.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or data requests, contact us at support@achieversapp.com.