Privacy Notice

Jonathan Spinney (trading as decidoo.ai) ("decidoo", "we", "us") is the data controller for the personal data described here. This notice explains what we collect, why, who sees it, how long we keep it and what you can ask us to do.

What we collect

• Account data: your email address, and your name and photo if you sign in with Google; a secure password record if you use email sign-in.
• Profile data you choose to give: display name, profile photo, birth year, location, occupation, life stage, and your answers to the short profile questions.
• Your decisions: the decisions you write, the options and next steps decidoo returns, statuses, and your journal notes.
• Technical data: device and browser details, IP address, and basic logs used to keep the service working and to spot abuse.
• Payment data: handled by our payment provider, not by us. We only keep the plan, status and dates needed to run your subscription.

Why we use it, and our legal basis

• To provide the service (contract): sign you in, save your decisions, show your dashboard and badges, tailor advice to the profile answers you choose to give.
• To keep the service safe (legitimate interests): prevent abuse, spam and account takeover; enforce plan limits.
• To bill you (contract, and legal obligation for tax records).
• To improve decidoo (legitimate interests, and consent where consent is required): aggregated, not sold.
• To email you about your account (contract), such as password resets and plan changes.

Who sees it

• Service providers that host the database and run the model that generates decidoo's answers, under contract and only to provide the service.
• Paddle, our Merchant of Record, for selling your plan, subscription management, payments, tax and invoicing.
• Professional advisers such as accountants or lawyers, under confidentiality.
• Authorities, if we are legally required to disclose.

We do not sell personal data, and we do not use advertising or analytics trackers.

How long we keep it

We keep your account, profile and decisions while your account is open. If you close your account or ask us to delete your data, we remove it within 30 days, except payment records we must keep for tax purposes.

Your choices

• Access, correct or delete your personal data.
• Take your data with you in a usable format.
• Object to processing based on legitimate interests, or withdraw consent where we relied on it.
• Ask us not to sell or share your data for marketing — we do not do this anyway.
• If you are in the EEA or UK, complain to your data protection authority.

To exercise any of these, email jonspinneymobile@gmail.com. We reply within one month. Profile photos are stored privately and only readable by you.

Security

Data is encrypted in transit, access is limited to what is needed, and your profile photo is held in private storage that only your own account can read. No system is perfect, so tell us promptly if you think something is wrong.

Cookies and browser storage

We use only what the service needs to work: sign-in session data held in your browser, and one small technical cookie that remembers whether the in-app side panel is open or closed. There are no advertising, analytics or cross-site tracking cookies.

Where data is processed

Our providers are based in the United States. If you are in the EEA or UK, we rely on standard contractual clauses and similar safeguards for transfers out of your region.

Children

decidoo is not intended for anyone under 18.

Changes and contact

If this notice changes in a way that matters, we will post the new date here and, for significant changes, email you. Questions: jonspinneymobile@gmail.com.