Privacy Policy

1. Information We Collect

Backbone collects only what is strictly necessary to authenticate your purchase, run the app, and prevent technical crashes:

• Account & Email Address: We collect your email address purely as your unique account identifier to verify your Stripe purchase, unlock your license, and sync your data across devices. We will never send you promotional newsletters, marketing spam, or unsolicited emails.
• Application Data: Projects, hierarchical tasks, predicted vs. actual satisfaction ratings, sleep/wake times, and optional medication logs you enter into Backbone to run its executive function compensation system.
• Technical & Telemetry Data (via PostHog): When you visit our website or use the application, standard diagnostic telemetry is automatically recorded—including your IP address, approximate geographical region (country/city), operating system (macOS/Windows/Linux), browser type, screen resolution, error/crash logs, and interaction events (such as download clicks and checkout initiation). This data is strictly used for debugging, app stability, and preventing abuse.
• Payment Information: All transactions are processed securely by Stripe. Backbone never collects, sees, or stores your credit card numbers, CVVs, or financial billing details.

2. How Your Information Is Used

Your data is strictly used to deliver Backbone's pattern-recognition features and keep the service operational. We do not sell, rent, monetize, or trade your personal data to third parties, advertising networks, or data brokers.

3. Third-Party Infrastructure & Payment Processing

Backbone relies on trusted, industry-standard service providers to deliver secure infrastructure and payments:

• Stripe (Payment Processing & Data Controller): Our order and checkout process is conducted by Stripe. Stripe acts as an independent data controller for buyer transaction data (such as billing address, country, tax ID, and payment instrument details) for order fulfillment, billing, invoicing, fraud detection, and global tax compliance. Backbone never collects, sees, or stores your credit card numbers. All payment data is processed under Stripe's Privacy Policy.
• Supabase: Encrypted cloud database and authentication infrastructure used to store your tasks and verify your access.
• PostHog: Privacy-conscious product analytics and diagnostic telemetry used to detect bugs, monitor performance, and improve the application.

4. Legal Bases for Processing (GDPR / UK / EEA)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following lawful legal bases:

• Performance of a Contract: Processing your email and account information to provide software access, verify entitlements, and enable multi-device synchronization.
• Legitimate Interests: Processing diagnostic telemetry and crash logs (via PostHog) to protect software integrity, resolve errors, and prevent malicious abuse.
• Legal Obligations: Compliance with statutory financial, legal, and tax reporting requirements handled in partnership with Stripe.

5. Data Retention & Cookies

Data Retention: We retain your account and task records for as long as your account exists or until you request its permanent deletion.

Cookies & Local Storage: Backbone uses essential browser local storage to maintain your login session and privacy-conscious analytics (PostHog) to diagnose page errors. We do not use advertising trackers, marketing cookies, or cross-site profiling tools.

6. Your Data Rights (GDPR, CCPA & Global Rights)

Regardless of where you reside, you have full control over your personal data. Under global privacy laws (including GDPR and CCPA), you have the right to:

• Right of Access: Request confirmation of whether we process your data and obtain a copy of your records.
• Right to Rectification: Request correction of any inaccurate or incomplete personal details.
• Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account, tasks, habits, and associated database records.
• Right to Data Portability: Export your data directly through the Backbone app or request an export file.
• Right to Restrict or Object: Restrict or object to the processing of your data at any time.

To exercise any of these rights, request account deletion, or ask privacy questions, message Maximiliano directly on X/Twitter at @vz_warhead (fastest response) or by email at [email protected].