Privacy Policy

1. Overview

Changed Labs OÜ ("Changed," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Changed application and related services (the "Service").

We believe that wellness data is deeply personal. Our approach is privacy-by-design: we collect only what is necessary, store it securely, and never sell your personal information to third parties.

2. Information We Collect

Information you provide directly:

• Account details (name, email address, password)
• Profile information (age, timezone, wellness goals)
• Wellness data (journal entries, mood logs, habit records, streak data)
• Communications you send to us (support requests, feedback)

Information collected automatically:

• Device information (model, operating system, unique device identifiers)
• Usage data (features used, session duration, in-app events)
• Log data (IP address, timestamps, crash reports)
• Push notification tokens (if you enable notifications)
• Payment information: We do not collect or store payment card numbers, bank account details, or other financial information. In-app purchases are billed directly by Apple Inc. (App Store) or Google LLC (Google Play). Web purchases are not available.

3. How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve the Service
• Personalize your experience and deliver relevant content
• Process transactions and manage subscriptions
• Send transactional communications (account confirmations, receipts)
• Send product updates and feature announcements (you may opt out at any time)
• Analyze usage patterns to improve the App's design and features
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

We do not use your wellness data to serve you third-party advertisements.

4. Sharing Your Data

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers: Trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, analytics, payment processing), bound by confidentiality agreements.
• Legal requirements: When required by law, court order, or governmental authority.
• Safety: When necessary to protect the rights, property, or safety of Changed, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.
• Apple Inc. and Google LLC: We share minimal transaction data with these providers to process, verify, and restore purchases. Billing is handled by Apple Inc. (iOS) or Google LLC (Android). Your payment details are handled exclusively by these providers under their respective privacy policies.

5. Data Storage & Security

Your data is stored on secure servers. We implement industry-standard technical and organizational measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Our servers are located in the European Union and United States. By using the Service, you consent to the transfer of your data to these locations.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we remove or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., billing records retained for 7 years).

You may request deletion of your data at any time from within the App settings or by contacting us at [email protected].

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request that we limit the processing of your data.
• Objection: Object to certain processing activities, including direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California residents (CCPA): If you reside in California, you have the right to know what personal information we collect and how we use it, to request deletion of your personal information, and to opt out of the sale of your personal information (we do not sell personal information). To exercise these rights, contact us at [email protected].

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you believe a child under 13 has used the Service, please contact us immediately.

9. Cookies & Tracking

The Changed app itself does not use browser cookies. Our website may use essential cookies for session management and analytics cookies to understand how visitors use our site. You can control cookie preferences through your browser settings.

We may use analytics tools (such as anonymized crash reporting) to improve the App. These tools are configured to minimize personal data collection wherever possible.

10. Third-Party Services

We work with the following trusted third-party providers to operate and improve the Service. Each processes data under its own privacy policy:

• Supabase (Supabase Inc.): Provides our database, authentication, and file storage infrastructure. Data may be processed in the EU and United States.
• Apple Inc. (App Store): Processes in-app purchases and subscription billing for iOS users. Changed Labs OÜ does not receive or store your payment card details. Privacy Policy
• Google LLC (Google Play): Processes in-app purchases and subscription billing for Android users. Changed Labs OÜ does not receive or store your payment card details. Privacy Policy
• Crash & performance reporting: We may use anonymized crash-reporting tools to detect and fix technical errors. These tools are configured to minimize personal data collection.
• Web billing: Web purchases are currently not available. Subscription purchases are supported only via Apple App Store (iOS) and Google Play Store (Android).

We only share data with these providers as necessary to deliver the Service and require them to protect your data through appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the App or by email at least 14 days before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent revision.

12. Contact Us

For privacy-related questions, requests, or complaints, please contact our team: