🔐 Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to operate, secure, and improve the Services.

We do not sell, rent, or trade personal data.

a. Information You Provide

This may include:

• Email address (required for account creation and authentication)
• Name or username (optional)
• Feedback, support requests, or communications
• Data you voluntarily enter into the Services (such as routines, logs, goals, preferences, travel plans, or learning plans)
• Travel details you may optionally store (such as flight numbers, flight confirmation numbers, and hotel confirmation numbers)

Important: All financial or planning data in Rayllie is user-entered. We do not connect to banks, financial institutions, or third-party financial accounts.

b. Information Collected Automatically

When you use the Services, we may automatically collect limited technical information, such as:

• Browser type and version
• Device type and operating system
• IP address (used temporarily for security and diagnostics)
• Basic usage data (pages viewed, feature interactions, session duration)

This data is used only in aggregate and is not used to identify you personally beyond account operation.

c. Optional Account Data

Any routines, activities, financial logs, travel plans, or similar entries you create are stored securely in your account for your personal use.

d. Educational Content

The Services may include educational materials, tutorials, guides, and learning content. Viewing or reading educational content does not require submitting personal information unless you choose to interact with account features or provide feedback.

2. How We Use Your Information

We use your information only to:

• Provide and operate the Services
• Authenticate and support your account
• Improve performance, reliability, and usability
• Communicate essential service-related updates
• Detect abuse, bugs, or security issues
• Analyze aggregated usage trends (only with your consent for analytics cookies)

Legal Basis for Processing

We process your data based on:

• Contractual necessity: To provide your account and deliver the Services you signed up for
• Legitimate interests: To operate, secure, and improve the platform
• Consent: For optional analytics cookies (you can withdraw consent anytime)

We do not:

• Sell personal data
• Rent personal data
• Use data for advertising or profiling
• Share data with advertisers

3. Cookies & Analytics

Essential Cookies

Essential cookies are always active and are necessary for the Services to function. These cookies:

• Keep you logged in (authentication)
• Remember your preferences (theme, settings)
• Maintain session security

Optional Analytics Cookies

Analytics cookies are only activated after you provide consent through our cookie banner. Google Analytics does not load or run until you explicitly accept.

When you accept analytics cookies, we use Google Analytics to understand aggregate website usage. Google Analytics may collect:

• Device and browser information
• Interaction metrics (pages viewed, features used)
• IP address (anonymized where configured)
• Session duration and navigation patterns

Important: Analytics data is not used to directly identify individuals, for advertising, profiling, or behavioral targeting. We use it only to understand how people use the platform and improve the experience.

Google may process analytics data on servers outside your country, including the United States.

You can change your analytics consent choice at any time or opt out using: https://tools.google.com/dlpage/gaoptout

We do not use:

• Google Ads or advertising cookies
• Behavioral advertising or profiling
• Retargeting or remarketing
• Third-party ad networks

4. Data Sharing

We do not sell or rent personal information.

We share limited data only with trusted service providers necessary to operate the Services:

These providers are contractually obligated to use your data only to support the Services.

Payment Processing

Payment information is processed directly by Stripe and is not stored on Rayllie servers. When you make a payment, your credit card or payment details are transmitted directly to Stripe's secure servers. We only receive confirmation of successful payments and basic transaction details (amount, date, subscription status).

Legal Disclosures

We may disclose information if required to:

• Comply with legal obligations
• Respond to lawful requests
• Protect rights, safety, or prevent fraud

We limit such disclosures to the minimum required.

5. Third-Party Services

Rayllie relies on third-party providers including:

• Stripe (payments)
• Supabase (authentication, database, hosting)
• Google Gmail API (email delivery)
• Google Analytics (aggregate analytics)

These providers may process data in the United States or other countries.

6. Data Retention

We retain personal data only as long as necessary to operate the Services.

Account Retention Policy

• If your subscription expires or your account becomes inactive, we will delete or anonymize your account data after 30 days
• You may request deletion at any time by contacting support@rayllieroutines.com
• Certain records (e.g., billing data) may be retained as required by law

7. Data Security

We use reasonable safeguards to protect your information, including:

• Encrypted database storage
• Secure authentication via Supabase
• HTTPS encryption
• Restricted access controls

No system is completely secure. You are responsible for protecting your account credentials.

8. International Data Transfers

Rayllie is operated from the United States.

By using the Services, you acknowledge that your data may be transferred to, stored in, and processed in the United States or other countries where our service providers operate, under appropriate legal safeguards.

9. Diagnostic & Technical Data

To improve stability and performance, we may collect limited diagnostic or crash data, such as error logs or performance metrics. This data is used solely for debugging, security, and service improvement.

10. Push Notifications (If Enabled)

If we introduce push notifications in the future, they will be used only for service-related updates. You will be able to control notification preferences through your device settings.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your data
• Request correction
• Request deletion
• Receive a copy of your data
• Withdraw consent (where applicable)

To exercise these rights, contact support@rayllieroutines.com.

12. Children's Privacy

The Services are not intended for children under 13.

Users aged 13–17 may only use the Services with parental or guardian consent. We do not knowingly collect data from minors.

If you believe a child has provided personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy to reflect new features, technology, or legal requirements. The Effective Date above indicates the latest version. Continued use means acceptance.