Privacy Policy

We collect information you provide directly, information created when you use Valryn, and limited technical information needed to operate, secure, and improve the service.

This may include account details, Google OAuth account information, habit and completion data, optional slip notes, proof uploads, subscription and habit-stake billing information, support requests, report records, product analytics, device information, log data, and communications you send to us.

When you create an account, we collect information such as your email address, name, password authentication data, Google OAuth identifiers and profile details when you sign in with Google, date of birth or age eligibility information, timezone, and profile settings.

We use account information to create and secure your account, personalize your dashboard, send account-related messages, and provide support.

Valryn is not directed to children under 13, and you may not use Valryn if you are under 13 or below the minimum age required in your location.

We do not knowingly collect personal information from children under 13. If we learn that an under-13 account has provided personal information, we will take appropriate steps to delete or disable it, subject to legal, security, and backup retention limits.

Valryn stores the habits you create, including habit names, descriptions, schedules, completion and slip history, streaks, goals, settings, stake periods, and related progress data. A logged slip may include a reason, urge intensity, and an optional free-text note.

If you use social or accountability features, some habit-related information may be visible to people you choose to connect with or to features you enable, such as leaderboards or proof reviews. Slip-note text is shared with an accountability partner only when the applicable sharing setting is enabled.

Slip notes may contain sensitive information. Include only information you are comfortable storing and processing through Valryn.

If you upload proof photos or files, we collect and store the uploaded content and related metadata, such as the associated habit, upload time, review status, and storage identifiers.

If you enable anonymous or app-assisted proof review, proof images, proof metadata, and relevant habit details may be processed by AI service providers to help evaluate whether the proof matches the habit. If you use accountability proof review, approved accountability partners may receive temporary access to proof images and related habit context so they can review the submission.

Do not upload sensitive, private, unlawful, or third-party content unless you have the right to do so and are comfortable using it with the service.

We may use cookies, local storage, analytics tools, and similar technologies to keep you signed in, remember preferences, understand feature usage, measure performance, and improve the product.

Analytics information may include device type, browser, approximate location derived from IP address, pages viewed, referring pages, upgrade interactions, proof submissions, check-ins, AI feature usage, report exports, admin actions, and other interactions with the service.

We may use AI systems and third-party processors to provide features such as habit insights, strategy reports, proof processing, moderation, customer support, analytics, infrastructure, and security.

When you use an AI coaching, insight, report, moderation, or proof-processing feature, relevant context may be sent to an AI service provider. Depending on the feature, that context may include habit names, descriptions, schedules, planned times and places, completion history, recent slip reasons, urge information, slip-note text, proof images, proof metadata, and content reports. We do not treat AI output as medical, mental health, financial, legal, or other professional advice.

When we use third-party processors, we share only the information reasonably needed for them to provide services to Valryn and require them to handle it according to applicable confidentiality and security obligations.

Subscription payments and optional habit-stake charges are handled by payment providers such as Stripe. Valryn does not store your full card number or card security code.

For subscriptions, we may receive and store your plan, subscription status, billing interval, renewal or cancellation dates, customer and subscription identifiers, and payment events.

For a habit stake, Stripe stores the payment method you authorize for later use. Valryn stores related Stripe customer, payment-method, SetupIntent, and PaymentIntent identifiers, along with the stake amount, currency, period, charge status, and failure information. Habit stakes are denominated in Canadian dollars (CAD) for users in Canada and United States dollars (USD) elsewhere; approximate country information supplied by the hosting network is used to select the currency.

We use information to provide, maintain, personalize, and improve Valryn; authenticate users; track habits, slips, stakes, and streaks; provide coaching and analytics; process uploads; send notifications; provide support; administer subscriptions and conditional stake charges; prevent abuse; and comply with legal obligations.

We may also use aggregated or de-identified information to understand trends and improve the service.

We may share information with service providers who help us operate Valryn, including hosting, authentication, storage, analytics, AI processing, payment, email, and security providers.

We may also share information when you direct us to, when a feature requires it, with connected users according to your settings, to comply with law, to protect rights and safety, or as part of a merger, acquisition, financing, or asset transfer.

Valryn and its service providers may process and store information in the United States, Canada, and other countries where they operate. Privacy and data protection rules may differ from those in your location.

When information is transferred or processed across borders, we use reasonable safeguards appropriate to the nature of the information and the service providers involved.

We keep information for as long as needed to provide Valryn, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and backups.

Raw habit slip-note text is retained in the active database for 365 days after the slip is logged and is then scheduled for automatic erasure. Cleanup runs daily, so erasure normally completes within 24 hours after the retention period ends. The underlying slip record, including its date, reason, urge intensity, and effect on habit history, may be retained. Cached AI coaching messages follow the same schedule.

Proof photos and uploaded proof files may be retained in active storage for up to 365 days, unless you delete your account earlier, a shorter product limit applies, or we need to retain a record for support, safety, billing, dispute, security, or legal reasons.

Support emails, support ticket messages, admin notes, content reports, audit logs, webhook records, product analytics events, and email delivery logs may be retained as needed for support history, abuse prevention, operations, security, compliance, and legal obligations.

When raw slip-note text is erased, protected backups may continue to contain an older copy until those backups are rotated or deleted. Backups are not used to restore erased note text to the live service except where necessary for disaster recovery, security, or legal compliance.

Subscription, stake-cycle, and stake-charge records may be retained longer when reasonably necessary for billing, accounting, fraud prevention, dispute handling, security, or legal compliance.

Some logs, backups, and billing records may be retained for a limited period after account deletion where required for legitimate business, security, or legal reasons.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information.

You can update certain account details in profile settings and request account or data deletion in the product or by contacting us. We will process deletion requests subject to identity verification, unresolved disputes, transaction records, support and audit logs, legal requirements, fraud prevention, security, and backup retention limits.

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration.

No internet service can be guaranteed to be completely secure, so you are responsible for keeping your account credentials safe and notifying us if you suspect unauthorized access.

Questions or requests about this Privacy Policy can be sent to support@mail.valryn.xyz.