Privacy Policy

1. What data we collect

We collect the following types of data when you use YOU 2.0:

• Account data: email and password (your password is securely managed by our authentication provider and is never stored in plain text by us).
• Profile data: your name, your persona's name (the future version of you the app helps you build), and the text you write about who you want to become.
• Product usage data: habits, tasks, goals, priorities, projects, routine, mood logs, daily and weekly reflections, and the notes you write in your Life Map areas. This data may include sensitive information you choose to share (for example, about health, finances, or relationships) — it exists so the app can function, and you have full control to edit or delete it at any time.
• Voice: when you use voice Quick Add, the audio is processed by your iPhone's speech recognition (Apple), which may process the audio on Apple's servers to generate text. We do not store the audio — only the resulting text, as if you had typed it.
• Payment data: if you subscribe to Premium, payment is processed by Stripe (on the website) or by Apple, via in-app purchase (on iPhone). YOU 2.0 never sees or stores your card number.
• Usage and diagnostic data: product usage events (which screens you visit), approximate country/region, and the source that brought you to the app (for example, a campaign link). We don't use third-party trackers like Google Analytics or Facebook Pixel — this data stays only in our own database.

2. How we use your data

• To provide and personalize the Service (your habits, goals, and progress are yours alone).
• To process your subscription and payments.
• To send reminders and notifications you configure yourself.
• To respond to support requests.
• To understand aggregated product usage in order to improve it.
• To comply with legal obligations.

We never sell your personal data.

3. Who we share data with

We only share data with service providers who operate the Service on our behalf:

• Supabase: database hosting and authentication.
• Stripe: website payment processing.
• Apple: in-app purchase processing on iOS and speech recognition.

These providers only have access to what's necessary to deliver the contracted service.

4. Your rights

Depending on your location, you may have rights over your personal data, including (for Brazilian users, under the LGPD — Lei 13.709/2018) the right to:

• Confirm the existence of processing and access your data.
• Correct incomplete, inaccurate, or outdated data.
• Request deletion of your data (you can delete most of it directly in the app, under Settings).
• Request portability of your data to another provider.
• Withdraw your consent at any time.

To exercise any of these rights, contact us at contact@you2.com.br.

5. Retention and deletion

We keep your data while your account is active. If you delete your account, we erase or anonymize your personal data, except where the law requires us to keep some record (for example, payment tax records) for a set period.

If your account was part of a shared Project, Shared Goal, or Challenge, that content may remain visible to other participants — it is disconnected from your personal identity and shown as a generic "Deleted user." We may also retain a limited technical, non-identifying record for security, platform integrity, or legal purposes.

6. Security

We use row-level access controls (Row Level Security) in the database, so each user can only read and change their own data, and all communication between the app and our servers is encrypted (HTTPS/TLS).

7. Children

The Service is not directed at children under 13, and we do not knowingly collect data from children in that age range.

8. Changes to this policy

We may update this policy periodically. Material changes will be communicated in the app or by email before they take effect.

9. Contact

Questions about this policy or your data: contact@you2.com.br.