Privacy Policy

1. Introduction

UNDRNK ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform, purchase our products, or interact with our community.

This policy applies to all users of the UNDRNK website, digital products, community features, and related services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name and email address when you create an account via Manus OAuth
• Email Subscription: Email address when you sign up for the free 3-Day Reset or newsletter
• Community Content: Posts, comments, and daily check-in data you submit to the UNDRNK Community
• Progress Data: Assessment scores, metrics, and notes you log in the Protocol Progress Tracker
• Challenge Data: Task completions, streaks, and participation data from UNDRNK Challenges

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Analytics: Anonymized website analytics for improving our service

2.3 Information from Third Parties

• Stripe: Payment confirmation, transaction IDs, and subscription status (we do not receive or store your full credit card number)
• Manus OAuth: Basic profile information (name, email) used for authentication

3. How We Use Your Information

• To provide and maintain the Service, including delivering digital products and community access
• To process payments and manage subscriptions through Stripe
• To send transactional emails (purchase confirmations, access links, password resets)
• To send marketing emails via Kit (ConvertKit) if you have opted in, including the 14-day nurture sequence and product-specific email sequences
• To display your progress data in the Protocol Progress Tracker and generate PDF reports
• To maintain leaderboards and streak tracking for Challenges
• To improve and optimize the Service based on usage patterns
• To enforce our Terms and Conditions and Community Guidelines

4. Data Sharing & Third-Party Services

We do not sell your personal data to third parties. We share your information only with the following service providers, strictly for the purposes described:

5. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. These cookies are strictly necessary for the Service to function and cannot be disabled.

We may use anonymized analytics to understand how users interact with our platform. This data is aggregated and does not personally identify you.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Community posts and comments may be anonymized rather than deleted to preserve the integrity of community discussions.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Email Communications

When you sign up for the free 3-Day Reset or subscribe to our newsletter, you consent to receiving marketing emails from UNDRNK via Kit (ConvertKit). These may include product recommendations, challenges, community updates, and promotional offers.

You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any email. Transactional emails (purchase confirmations, access links) will continue to be sent as necessary for the Service.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted database connections (SSL/TLS), secure authentication via OAuth, and PCI-compliant payment processing through Stripe. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.