Privacy Notice

Last updated October 9, 2026

This Notice explains how Dijital Shift LLC ("Dijital Shift", "we", "us"), a Wyoming limited liability company, collects and uses personal information in connection with Kingdom Protocol (kingdomprotocol.app and the installable web app).

Our role

Dijital Shift acts as the data controller for information collected through the Service. Payment card and billing details are collected and processed by Stripe as an independent controller; see stripe.com/privacy.

What we collect

Account. Your email address, first name, and optional phone number. Sign-in uses one-time codes or Google — we do not store passwords.

Your Paths. The Paths you create, their notes and end dates, your daily check-ins (Held, Breach, Silent, Sabbath), and the honesty notes you write when you breach.

Watchmen. Who you invite, invitation status, encouragements exchanged, and alert history.

Preferences. Timezone, bedtime reminder time, and notification settings.

Technical. Push-notification tokens, device and browser type, and IP addresses briefly processed for security.

Feedback. Notes you send us through the in-app feedback form.

Why we use it

  • To run your daily check-ins and bedtime reminders.
  • To alert your Watchmen when a Path is breached or goes silent.
  • To deliver encouragements between you and your Watchmen.
  • To manage your free month and paid access.
  • To keep accounts secure and prevent abuse.
  • To comply with legal obligations.

Legal basis

We rely on the performance of our contract with you, our legitimate interests (security and service improvement), and compliance with legal obligations, as applicable.

Who we share it with

  • Watchmen you choose — they see your first name, the Paths they watch, and alerts for those Paths. If you add a phone number, it may be used for text-message alerts.
  • Hosting and infrastructure — our cloud provider, which hosts the database, sign-in, and email delivery.
  • Stripe — for payments, subscriptions, tax, receipts, and refunds.
  • Text-message provider — only to deliver alerts when push notifications are unavailable.
  • Authorities — only where disclosure is required by law.

We do not sell personal information.

International transfers

The Service is operated from the United States. Information may be processed in the U.S. and other jurisdictions where our providers operate, subject to appropriate safeguards where required.

How long we keep it

We keep your data while your account exists, including when your access is resting after the free month. When your account is deleted, personal data is removed within 30 days, except records we must keep for legal or tax reasons.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information and to object to certain processing. You may also lodge a complaint with your local supervisory authority.

Security

We use encryption in transit, row-level security on our database, passwordless sign-in, and least-privilege access. No system is perfectly secure; we cannot guarantee absolute security.

Cookies & local storage

We use only essential local storage to keep you signed in and remember small preferences. We do not use advertising or tracking cookies.

Children

The Service is not directed to children under 13, and we do not knowingly collect their information.

Changes to this Notice

Material changes will be reflected by the "Last updated" date above.

Contact

Dijital Shift LLC — Wyoming, USA. Reach us through the feedback form in Settings.