Privacy Notice

1. Who we are

Kingdom Protocol is operated by Dijital Shift LLC. We act as the data controller for personal data collected through the service. Contact: dijitalshift@protonmail.com.

2. Data we collect

• Account data — name, email, password hash, phone number (optional).
• Profile & preferences — timezone, bedtime, accountability partners.
• Behavioral data — paths (commitments), check-ins, breach reports, missed-check-in events.
• Support communications — messages you send us.
• Technical data — IP address, device identifiers, browser/user-agent, basic usage telemetry, push-notification tokens.

3. Why we use it

• Provide the service — create your account, run check-ins, notify partners (contract performance).
• Security & fraud prevention — protect accounts and the platform (legitimate interests).
• Improvement — diagnose issues, measure feature usage (legitimate interests).
• Support — respond to your inquiries (contract / legitimate interests).
• Legal compliance — meet obligations under applicable law.

4. Who we share it with

• Accountability partners you assign — they receive your name and (only when you breach or go silent) your phone number, so they can reach out.
• Service providers / subprocessors — hosting and database (Supabase), transactional email (Resend), application hosting (Cloudflare / Lovable).
• Merchant of Record — Paddle.com handles all sales, subscription management, payments, tax compliance, and invoicing. See Paddle's Privacy Policy.
• Professional advisers — legal and accounting, where necessary.
• Authorities — when required by law.

We do not sell your personal data.

5. Retention

We keep personal data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymise it.

6. International transfers

Our service providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. EU/UK residents may lodge a complaint with their supervisory authority. To exercise any right, email dijitalshift@protonmail.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security on the database — to protect personal data. No system is fully secure; we cannot guarantee absolute security.

9. Cookies

We use only essential cookies and local storage required to keep you signed in and operate the service. We do not use third-party advertising or tracking cookies.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the service or by email.