# Privacy Policy

Effective date: [1/10/2026]  

Last updated: [2/14/2026]

This Privacy Policy describes how **[JD Farming Horse Rescue]** (“we”, “us”, “our”) collects, uses, and shares information when you use the **Business Checklist** mobile app (the “App”).

## Contact

If you have privacy questions, contact us at: **[info@jdfhorserescue.org]**

## Information We Collect

We collect information you provide directly and information needed to run the App.

### Account and profile data

– Email address and password (for sign-in/authentication)

– Onboarding/profile answers (for example: state, business setup preferences, reminder preferences)

### App content and usage data

– Checklist progress and completion status

– Growth workspace content (reminders, goals, goal items, leads)

– Document metadata (title, type, file path, file size, MIME type)

– Uploaded files stored in your private document storage area

– AI usage counters and request/response content when you use AI features

### Device and notification data

– Push notification token (when enabled)

– Basic app/device details needed for push delivery and app functionality

### Billing data

– If subscriptions or in-app purchases are enabled, payment processing is handled by the app store platform (Google Play / Apple App Store).

– We do not store full payment card numbers in the App database.

– We may store subscription access state (for example: trial active, paid active, grandfathered status).

## How We Use Information

We use data to:

– Create and maintain your account

– Save your onboarding profile and generate your checklist

– Provide reminders and growth planning features

– Store and retrieve your uploaded documents

– Provide AI explanations and follow-up answers

– Process in-app access state and enforce feature entitlements

– Prevent abuse, maintain security, and improve reliability

## Legal Bases (where applicable)

Depending on your location, we process data under one or more of these bases:

– Performance of a contract (providing the App)

– Legitimate interests (security, fraud prevention, service improvement)

– Consent (for features like push notifications, where required)

– Legal obligations

## Sharing and Service Providers

We share data only as needed to operate the App with trusted service providers, such as:

– **Supabase** (database, authentication, storage)

– **OpenAI** (AI explanations and follow-up responses)

– **Expo/notification services** (push notifications)

– **Resend** (email reminders, if enabled in the future)

– **Google Play / Apple App Store** (billing and subscription management, when enabled)

These providers process data on our behalf under their terms and security controls.

## Data Retention

We keep data while your account is active, and for a limited period after, unless a longer period is required by law or legitimate business needs (for example, fraud prevention, dispute resolution, tax/accounting records).

Typical retention approach:

– Account/profile/checklist/growth/documents: until deletion request or account closure

– Billing and transaction-related records: retained as required by law and store provider policies

– Logs/diagnostics: retained for operational and security purposes for a limited period

## Account and Data Deletion

You can request account deletion and associated data deletion using our deletion page:

**[https://jdfhr-field-guide.org/account-deletion/]**

## Subscription Terms

Subscription and trial terms are published here:

**[https://jdfhr-field-guide.org/subscription-terms/]**

When we process a valid deletion request, we delete or de-identify account data, except where retention is required for legal, security, fraud-prevention, or compliance reasons.

## Security

We use administrative, technical, and organizational safeguards designed to protect personal data. No system is 100% secure, but we work to protect your information and limit access to authorized personnel and processors.

## International Data Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

## Children’s Privacy

The App is not directed to children under 13 (or older age where required by local law). We do not knowingly collect personal data from children without required consent.

## Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to request portability. To exercise rights, contact:

**[info@jdfhorserescue.org]**

## Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date.