Privacy Notice

This Privacy Notice explains how Taylor Matthews ("we", "us"), the operator of the Virtue application (the "Service"), collects and uses your personal data. Taylor Matthews is the data controller for personal data processed through the Service.

1. Data we collect

Account data: name, email, password hash, role (woman / teen / parent), profile details you provide.
Content you create: journal entries, posts, comments, likes, community messages, prayer or reflection notes.
Usage & device data: pages visited, features used, streaks and completions, device type, browser, approximate location derived from IP, and diagnostic logs.
Parent/teen link data: invite codes and the relationship links you accept.
Support communications: messages you send us.

Payment card details are collected and processed by our Merchant of Record (Paddle) and are not stored by us.

2. How we use your data

Create and operate your account (contract).
Provide the Service, including personalized reflections, streaks, and community features (contract).
Process subscriptions via Paddle (contract).
Send transactional emails such as sign-in, receipts, and important account notices (contract, legal obligation).
Prevent fraud, abuse, and secure the Service (legitimate interests).
Understand which reflections resonate and improve the Service, using anonymous analytics only where you consent (consent).
Comply with legal obligations (legal obligation).

3. Who we share data with

Merchant of Record — Paddle (Paddle.com Market Limited): processes payments, subscription management, tax compliance, invoicing, and refunds.
Hosting & infrastructure: our platform provider hosts the application and database.
Email delivery: for transactional emails.
Analytics: only if you consent to analytics cookies.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

We do not sell your personal data.

4. Retention

We keep your data for as long as your account is active. When you delete your account (see the Privacy & your data page), we delete or anonymize your personal data within 30 days, except where we must keep records to meet legal, tax, or fraud-prevention obligations.

5. Your rights

You have the right to:

Access a copy of your personal data.
Correct inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Withdraw consent for analytics at any time.
Port your data to another service.
Lodge a complaint with your local data protection authority.

You can exercise most of these rights directly from the Privacy & your data page inside the app, or by contacting us.

6. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, row-level security on our database, and audit logging.

7. International transfers

Your data may be processed in countries outside your own, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Cookies & analytics

We use only what's needed to keep the app running (essential cookies). With your permission, we also use anonymous analytics to understand which reflections resonate. You can change your choice at any time on the Privacy & your data page.

9. Children

Teen accounts are intended for users age 13 and older, ideally with a parent or guardian's involvement. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we'll remove it.

10. Changes

We'll update this notice as the Service evolves. Material changes will be communicated in-app or by email.

11. Contact

For privacy questions or to exercise your rights, contact Taylor Matthews through the in-app support channel.