Privacy Notice

This Privacy Notice explains how Sober Media™ ("Company", "we", "us") collects, uses, shares, and protects personal data when you use R.U.F.U.S.("Service"). We act as the data controller of personal data you provide through the Service.

1. Data We Collect

• Account data: email address, password hash, display name.
• Sobriety & wellness content: sobriety start date, daily check-ins, journal entries, gratitudes, mood and mental-health responses, mindfulness logs, exercise and meal entries, photos you upload.
• Conversations with Rufus: the messages you send and the AI's responses.
• Usage & device data: log timestamps, pages viewed, device and browser type, IP address, basic error diagnostics.
• Billing data: handled by Paddle; we receive subscription status, plan, and a transaction reference — we do not store full card details.

2. How We Use Your Data

• To create and maintain your account (legal basis: contract).
• To deliver the Service — saving check-ins, generating Rufus responses, tracking your sobriety progress (contract).
• To detect abuse, fraud, and security incidents (legitimate interests).
• To improve the Service through aggregate, de-identified analysis (legitimate interests).
• To send transactional and service emails (contract).
• To meet legal obligations such as tax and accounting (legal obligation).

3. AI Processing

Messages you send to Rufus are processed by AI model providers (currently provided via the Lovable AI Gateway) to generate responses. We do not use your conversations to train third-party foundation models. We may review flagged conversations for safety, abuse investigation, and product quality.

4. Who We Share Data With

• Lovable Cloud (Supabase): our hosting, database, and authentication provider.
• Paddle.com Market Limited: our Merchant of Record. Paddle processes payments, handles subscription billing, tax compliance, and invoicing, and may contact you regarding your purchase. See Paddle's Privacy Notice.
• AI model providers (via the Lovable AI Gateway) to power Rufus.
• Professional advisers (legal, accounting) under confidentiality.
• Authorities where required by law or to protect rights, safety, or property.

We do not sell your personal data.

5. International Transfers

Some service providers process data outside Canada (e.g. in the United States or European Union). Where required, we rely on appropriate safeguards such as standard contractual clauses and adequacy decisions.

6. Retention

• Account data: kept while your account is active and for up to 12 months after deletion.
• Journal & check-in content: kept while your account is active; deleted on request or on account closure.
• Billing records: retained as required by tax and accounting law (typically 6–7 years).
• Server logs: typically up to 90 days.

7. Your Rights

Subject to your local law, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. Residents of British Columbia and other Canadian provinces may contact us under PIPEDA / provincial privacy law. Residents of the UK/EEA have the rights afforded by the UK GDPR / EU GDPR, including the right to complain to a supervisory authority. To exercise any right, email brian@sobermedia.ca. We respond within 30 days.

8. Security

We use appropriate technical and organisational measures to protect your data, including TLS in transit, encryption at rest, role-based access controls, and row-level security on our database. No system is perfectly secure; please use a strong, unique password.

9. Cookies

We use essential cookies and similar storage to keep you signed in and to operate the Service. We do not currently use third-party advertising cookies. You can manage cookies through your browser settings.

10. Children

The Service is not directed to children under the age of majority in your jurisdiction. We do not knowingly collect personal data from children.

11. Changes

We may update this Notice from time to time. Material changes will be communicated through the Service or by email.

12. Contact

Sober Media™ · brian@sobermedia.ca