Privacy Policy

1. Scope

This Privacy Policy describes how Blazendary (“we,” “us”) collects, uses, stores, and discloses information when you use Write That Down (the “Service”). By using the Service, you consent to the practices described here.

2. Information We Collect

Account information. Email address, display name, profile image (if uploaded), authentication identifiers from your sign-in provider (Google or email/password), and account creation timestamp.

Content. All entries, tasks, events, notes, ideas, people records, attached images, list assignments, due dates, recurrence rules, and metadata you create or upload through the Service.

Operational data. IP address, browser user-agent, device information, request timestamps, error logs, and aggregate usage metrics collected to operate, secure, and monitor the Service.

3. How We Use Information

We use the information described above to: (a) provide, maintain, and improve the Service; (b) authenticate you and protect your account; (c) execute classification, tagging, and search features on your content; (d) deliver service communications including account, security, and policy updates; (e) detect, investigate, and prevent fraud, abuse, and security incidents; and (f) comply with legal obligations.

We do not use your content to train machine-learning models. We do not sell or rent personal information.

4. Storage & Processing

Account data and content are stored on Supabase infrastructure located in the United States (region: US-East-1). Data is encrypted in transit using TLS and at rest using provider-managed encryption. Row-Level Security is enforced at the database layer so each user can access only their own content (and content explicitly shared with them via the in-app sharing feature).

Image attachments are stored in object storage with access controlled by signed paths derived from your account identifier.

5. Disclosure

We do not disclose your personal information except: (a) to service providers acting on our behalf under appropriate confidentiality and data-processing terms (currently: Supabase for database and authentication, Vercel for hosting); (b) when you explicitly share content with other accounts using the in-app sharing feature; (c) when required by applicable law, regulation, legal process, or governmental request; or (d) to protect the rights, property, or safety of Blazendary, our users, or others.

6. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies, third-party analytics cookies, or cross-site tracking.

7. Your Rights

Subject to applicable law, you may: (a) access the personal information we hold about you; (b) correct inaccurate information; (c) request deletion of your account and associated data; (d) export your content in machine-readable form using the in-app export feature; and (e) object to or restrict certain processing. To exercise these rights, contact dev@blazendary.com.

8. Data Retention

We retain account data and content for as long as your account is active or as needed to provide the Service. When you delete your account, your content is permanently removed from production systems within thirty (30) days. Backups containing deleted data are purged within ninety (90) days. We may retain limited records as required by law or for legitimate business purposes (for example, transaction records and abuse-prevention logs).

9. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, row-level access controls, and security monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have different data-protection laws than your jurisdiction.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date and, where appropriate, by additional notice through the Service or by email.

13. Contact

For privacy inquiries or requests, contact dev@blazendary.com.