This page is a placeholder scaffold. It is not final legal text and must be reviewed by a lawyer before launch.
Controller. [Company legal name], [address], [contact email] — placeholder pending final entity details.
What we collect. Account details (email), your SCAMP trigger-assessment answers, urge/episode logs (timestamp, trigger tags, mood, location, outcome, optional notes), and, if you opt in separately, progress photos. Urge and trigger logs may qualify as health data under Art. 9 GDPR — we only process this with your separate, explicit consent given at signup.
Why we collect it. Solely to run the app for you: personalizing competing-response suggestions, computing your awareness dashboard and streaks, and billing (Stripe) for Premium. We do not sell your data or share it with advertisers.
Analytics. With your separate cookie consent, we use privacy-respecting analytics that record event names only — never the content of your logs, triggers, moods, or notes.
Hosting. Data is hosted with Supabase in an EU region.
Your rights. Access, rectification, erasure, and data portability (GDPR Art. 15–20). Self-service export and account deletion are available in Settings → Privacy & data.
Retention. Data is retained until you delete your account, at which point it is permanently deleted.