Privacy Policy

1. Information We Collect

Personal Information

• Name, email address, and account credentials
• Profile information and preferences
• Goals, tasks, and progress data
• Journal entries and personal reflections
• Communication between partners (when shared)

Payment Information

• Payment information is processed securely by Stripe
• We do not store credit card numbers or payment details
• We retain transaction records for billing purposes

Usage Data

• App usage patterns and feature interactions
• Device information and browser type
• IP address and general location data
• Session duration and frequency of use

2. How We Use Your Information

• Provide and improve our services
• Process payments and manage subscriptions
• Send important account and service updates
• Provide customer support
• Generate insights and recommendations
• Ensure security and prevent fraud

3. Partner Data Sharing

• Shared goals and projects are visible to both partners
• Progress on shared challenges and activities
• Calendar events marked as "shared"
• Collaboration partner interactions
• Individual journal entries remain private unless explicitly shared

4. Data Security

• All data is encrypted in transit and at rest
• Secure authentication and session management
• Regular security audits and monitoring
• Limited access to personal data by staff
• Secure cloud infrastructure and backups

5. Calendar Integration (Google Calendar & Microsoft Outlook)

What We Access

• Calendar Events: We read your calendar events to display them in your REAP Daily Hub for schedule management
• Event Creation: We create calendar events in your Google/Outlook calendar when you create events in REAP
• Event Details: Event titles, dates, times, locations, descriptions, and meeting links (Zoom, Teams, Google Meet)
• Meeting Information: We extract meeting links to make it easy for you to join meetings directly from REAP

What We Do NOT Do

• No Sharing: We do not share your calendar data with anyone, including other REAP users
• No Selling: We never sell your calendar data to third parties or advertisers
• No Unrelated Access: We only access calendars you explicitly connect to REAP
• No Marketing: We don't use your calendar data for marketing or advertising purposes
• Private Events Stay Private: Events marked as private in your calendar are not accessible by REAP

How We Protect Calendar Data

• All calendar data is encrypted in transit and at rest
• We use secure OAuth 2.0 authentication (no passwords stored)
• Access tokens are stored securely and refreshed automatically
• You can disconnect your calendar at any time from Account Settings
• When you disconnect, we immediately stop accessing your calendar and delete stored tokens

Why We Need Calendar Access

• Display all your commitments in one place (REAP Daily Hub)
• Help you manage time and avoid scheduling conflicts
• Track productivity and time allocation for your personal development goals
• Provide easy access to meeting links (Zoom, Teams, Google Meet)
• Sync events between REAP and your existing calendar workflow

6. Zoom Integration

• Meeting Creation: We create Zoom meetings on your behalf when you schedule events that require video conferencing
• Meeting Links: We store meeting URLs to display in your calendar and share with participants
• No Recording Access: We do not access, store, or process any Zoom meeting recordings
• No Participant Data: We do not collect data about meeting participants from Zoom
• Secure Tokens: We use OAuth 2.0 to securely connect to your Zoom account (no passwords stored)
• Disconnect Anytime: You can disconnect Zoom from Account Settings at any time

7. Third-Party Services

• Stripe: Payment processing (subject to Stripe's privacy policy)
• SendGrid: Email communications
• OpenAI: AI-powered coaching features (data processed securely)
• Google Calendar API: Calendar synchronization for productivity features
• Microsoft Graph API: Outlook Calendar synchronization for productivity features
• Zoom API: Video meeting creation and scheduling
• These services have their own privacy policies and security measures
• REAP's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements

8. Data Retention

• Account data is retained while your subscription is active
• Data may be retained for up to 30 days after cancellation
• Financial records kept for 7 years as required by law
• You can request complete data deletion at any time

9. Your Rights

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Export your data in a common format
• Opt-out: Unsubscribe from marketing communications

10. Cookies and Tracking

• We use essential cookies for authentication and security
• Session cookies to maintain your login state
• Preference cookies to remember your settings
• We do not use advertising or tracking cookies

11. International Users

Our services are hosted in the United States. If you are accessing from outside the US, please be aware that your information may be transferred to, stored, and processed in the US where our servers are located.

12. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

13. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or through our service. Your continued use after changes constitutes acceptance.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us: