Privacy Policy

This Privacy Policy explains what personal information Actiqa collects, why we collect it, how it is used, and the choices you have. It applies to our website, mobile app, and any related services. By using Actiqa you agree to the practices described here.

1. Information we collect

We collect only what we genuinely need to run the Service:

• Account data: your name, email, hashed password, and profile preferences (goal category, target hours per week, etc.).
• Product usage: the goals, roadmaps, sessions, notes, quiz answers, streaks, and reflections you create. This is your content — we store it so you can access it later.
• AI coach messages: the questions you ask the coach and the answers we return, tied to your account so we can maintain conversation context.
• Payment information: handled directly by Stripe. Actiqa never sees or stores your full card number. We only store the subscription status and the last-4 / brand for display.
• Technical data: IP address, browser / device type, coarse location (country/region), timestamps, and error logs — used strictly for security, debugging, and preventing abuse.

2. What we do NOT do

• ❌ We do not sell, rent, or trade your personal data to anyone.
• ❌ We do not share your content with third parties for marketing purposes.
• ❌ We do not train our AI models on your goals, notes, or reflections.
• ❌ We do not run third-party advertising networks or ad-tracking pixels inside the app.
• ❌ We do not use dark patterns, hidden opt-ins, or pre-checked consent boxes.

3. How we use your information

We use the data listed above only to:

• Operate the Service — sign you in, generate your roadmap, remember your streak, deliver your daily missions.
• Send transactional emails (password reset, billing receipts, security alerts). These are not marketing emails.
• Answer support requests you submit.
• Keep the Service secure, prevent fraud, and comply with legal obligations.
• Improve Actiqa in aggregate — for example, "how many users completed a session this week" — but never using content that could identify you.

4. Who processes your data on our behalf

To run Actiqa we rely on a small set of trusted service providers. They act only as data processors under contract and cannot use your data for their own purposes:

• Cloud hosting: our web servers and database.
• Stripe: processes subscription payments. Governed by Stripe's Privacy Policy.
• AI model provider: generates coach responses and roadmaps. Messages are transmitted for processing under an enterprise data-processing agreement; the provider does not use the content to train foundation models.
• Email delivery: a transactional email service (e.g. Resend / SendGrid) sends account emails.
• Google Sign-In: optional. If you use it, Google shares only your email, name, and profile picture with us.

We do not share your data with anyone else. In particular, we do not share it with data brokers, advertisers, insurers, employers, or governments — except when required by a valid legal order.

5. Cookies & local storage

We use only essential cookies and local storage entries:

• Authentication tokens so you stay signed in.
• Session cookies that keep your CSRF and refresh-token flow secure.
• Small preference flags (theme, dismissed banners) stored locally on your device.

No analytics cookies, no ad cookies, no cross-site trackers.

6. Data retention

• Account data is kept for as long as your account is active.
• When you delete your account, personal data (email, name, goals, sessions, coach chats) is deleted within 30 days from active systems, and within 90 days from encrypted backups.
• We may retain minimal transactional records (invoices, security logs) longer if required by law.

7. Your rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct anything that's inaccurate.
• Delete your account and associated data at any time.
• Export your goals and progress data in a portable format.
• Object to specific processing, or withdraw consent where processing is based on it.

Most of these are self-serve from Profile → Settings. For anything else, email support@actiqa.com and we'll respond within 30 days.

8. Children

Actiqa is not intended for children under 13. We do not knowingly collect data from users under 13. If you believe a child has created an account, please contact us and we will remove it.

9. International transfers

Our servers and processors may be located in different countries than where you live. When data is transferred internationally, we use industry-standard safeguards such as Standard Contractual Clauses to protect it.

10. Security

We take security seriously: HTTPS everywhere, hashed passwords (bcrypt), encrypted database backups, short-lived access tokens, and principle-of-least-privilege access controls. No system is perfectly secure, but we work hard to make Actiqa a trustworthy home for your goals.

11. Changes to this policy

If we make meaningful changes to this policy, we will notify you in-app or by email at least 14 days before they take effect.

12. Contact

Questions about your privacy? Reach us at support@actiqa.com or via the Contact form on our site. We read every message.