Privacy Policy

1. Introduction

This Privacy Policy explains how SIA “AE Lux” (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use Insight · Vision · Path (the “App”). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Latvian and EU data protection law.

2. Data Controller

The data controller responsible for your personal data is SIA “AE Lux”, Reg. No. 40203065425, Ezera iela 5, Talsi, Talsu nov., LV-3201, Latvia. Contact: aurorasdizaini@gmail.com.

3. What Data We Collect

• Email address — provided by you when you register and sign in with your email and password.
• Password — stored only in hashed form by our authentication provider (Supabase); we never see or store your plain-text password.
• Journal entries — the text content you write in the in-app journal feature.
• Usage data — basic technical data such as your browser type, device type, and access timestamps, collected automatically via Supabase infrastructure.
• Authentication tokens — session tokens stored in your browser to keep you signed in.

4. Legal Basis for Processing (GDPR)

• Performance of a contract (Art. 6(1)(b) GDPR) — processing your email and journal data is necessary to provide the App and your subscription.
• Legitimate interests (Art. 6(1)(f) GDPR) — processing basic usage data to maintain security and improve the App.
• Consent (Art. 6(1)(a) GDPR) — for cookies and non-essential tracking, where your consent is obtained.

5. How We Use Your Data

• Create and manage your account via email-and-password sign-in, including email confirmation and password-reset emails.
• Store and sync your journal entries across devices.
• Process subscription payments through Stripe.
• Maintain the security and integrity of the App.
• Comply with legal obligations.

6. Payment Processing

Payments are processed by Stripe, Inc. When you make a payment, you provide your payment details directly to Stripe — we do not store or have access to your full card details. Stripe’s privacy policy is available at stripe.com/privacy. We receive from Stripe only the information necessary to confirm your subscription status.

7. Data Storage and Transfers

Your data is stored on servers provided by Supabase, Inc. Some data may be transferred to countries outside the European Economic Area (EEA). Where such transfers occur, they are subject to appropriate safeguards in accordance with GDPR (such as Standard Contractual Clauses).

We retain your personal data for as long as your account is active. If you delete your account or request erasure, your personal data will be deleted within 30 days, unless we are required to retain it for legal reasons.

8. Your Rights Under GDPR

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data (“right to be forgotten”).
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at aurorasdizaini@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and secure authentication.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice in the App. The “Effective date” at the top of this document will always reflect the latest version.

11. Contact

For any questions or requests, contact us at aurorasdizaini@gmail.com — SIA “AE Lux”, Ezera iela 5, Talsi, Talsu nov., LV-3201, Latvia.