Privacy Notice

1. Who we are

This Privacy Notice is issued by Crowned & Called LLC (trading as "Crowned & Called"). We act as the data controller of the personal information described below.

2. Personal data we collect

• Account data: name (optional), email address, hashed password.
• Journal content: the reflections you write inside the app.
• Usage data: pages visited, streaks, affirmations marked as favorite, notification preferences.
• Device & technical data: IP address, browser/device type, operating system, approximate location derived from IP.
• Support messages: the content of any email or in-app message you send us.

Payment card details are collected and processed by Paddle, our Merchant of Record. We never see or store your full card number.

3. How we use your data

• Provide the service – create your account, deliver daily affirmations, store your journal (legal basis: performance of contract).
• Manage subscriptions – pass billing information to Paddle and update access when subscription status changes (contract).
• Security & fraud prevention – protect accounts and the service (legitimate interest).
• Improve the product – understand which features are used so we can improve them (legitimate interest).
• Customer support – respond to your messages (contract / legitimate interest).
• Marketing emails – only with your consent; you can unsubscribe at any time.
• Legal obligations – comply with tax, accounting and other applicable laws (legal obligation).

4. Who we share data with

• Paddle – our Merchant of Record for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing.
• Hosting & infrastructure providers – Supabase (database, authentication) and Cloudflare (hosting, CDN) acting as our processors.
• Email delivery providers – for transactional and (where consented) marketing email.
• Professional advisers – legal, accounting, and tax advisers when needed.
• Authorities – where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Our service is operated from the United States. If you access it from the UK or EEA, your data will be transferred to the United States. Where required we rely on Standard Contractual Clauses or other appropriate safeguards.

6. How long we keep data

We keep your account and journal data for as long as your account is active. If you delete your account we will delete or anonymize your personal data within 30 days, except where we are required to keep records for legal, tax, or accounting reasons.

7. Your rights

Depending on where you live you may have rights to access, correct, delete, restrict, port, or object to our processing of your personal data, and to withdraw consent at any time. UK/EEA users have the additional right to lodge a complaint with their local data protection authority. To exercise any of these rights, email us at hello@divineflourish.com. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege policies for our team.

9. Cookies

We use only essential cookies and local storage required to keep you logged in and to remember your preferences. We do not use third-party advertising cookies.

10. Contact

Crowned & Called LLC — hello@divineflourish.com.