Privacy Notice

1. Who we are

Pause Protocol is operated by This Is My LLC, trading as Pause Protocol, which is the data controller for the personal data described in this notice. You can contact us at any time at support@pauseprotocol.online.

2. What we collect and why

• Account data — email address and login credentials. Used to create and secure your account. Legal basis: performance of our contract with you.
• Practice content — urge logs, triggers, intensity ratings, journal entries, pause sessions and sealed partner notes. This is sensitive, personal material about your wellbeing; we store it to provide the Service to you and show you your own patterns. Legal basis: performance of our contract and, where required, your explicit consent.
• Pairing data — invite codes, partner links, pairing requests and their status. Used to operate partner pairing and notify you about pairing events. Legal basis: contract.
• Subscription data — plan, status and renewal dates received back from Stripe, our payment processor. We never see or store your card details. Legal basis: contract and legal obligation.
• Support messages — what you send us through the contact form or by email. Legal basis: legitimate interest in supporting our users.
• Technical and usage data — IP address, device and browser information, error logs. Used for security, fraud prevention, reliability and product improvement. Legal basis: legitimate interests.

Your journal entries and urge logs are private to you. A sealed note is visible only to the partner it is addressed to, once you are both confirmed paired. We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use your practice content for advertising or to train AI models.

3. Who we share data with

• Hosting and database — our cloud infrastructure provider, which stores the application data and runs authentication.
• Payment processor — Stripe, which processes card payments, subscription billing, tax calculation and invoicing on our behalf. Stripe receives the payment details you enter at checkout and processes them under its own privacy policy.
• Email delivery — our transactional email provider, used to send sign-in, account, billing and partner-pairing notification emails.
• Your partner — only the content you deliberately send them (such as a sealed note), plus your pairing status. Never your journal or urge logs.
• Professional advisers and authorities — legal or accounting advisers, and authorities where we are required by law.

4. International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA we rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep your account and practice content for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except records we must keep for legal, tax or fraud-prevention reasons (typically up to 7 years for transaction records).

6. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. Where US state privacy laws apply (for example in California), you have the right to know, delete and correct your personal information, and to not be discriminated against for exercising those rights; we do not sell or share personal information as those laws define it. You may also complain to your data protection supervisory authority. Email support@pauseprotocol.online and we will respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls so users can only reach their own records, and least-privilege access for administrators. No system is perfectly secure, but we take the sensitivity of this content seriously.

8. Cookies and local storage

We use essential cookies and browser local storage only — to keep you signed in, remember which notifications you have already seen, and complete checkout. Stripe may set its own cookies during checkout for fraud prevention. We do not use advertising or third-party tracking cookies. You can clear this data in your browser at any time, though doing so will sign you out.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes

We will update this notice as the Service changes and will tell you about material changes by email or in the app.