Privacy Policy

1. Who we are

Buddy app, MB ("Buddy", "we", "us", or "our") is a mažoji bendrija registered in the Republic of Lithuania, with its registered office at Pylimėlių g. 8-11, LT-10229 Vilnius, Lithuania. Buddy designs and operates mobile applications focused on productivity, habits, and everyday self-improvement, along with this website.

For the purposes of EU data protection law, Buddy app, MB is the data controller for the personal data described in this policy.

2. Scope of this policy

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit this website or use any mobile application published by Buddy app, MB (each, an "App"). It applies regardless of the device you use to access our Apps or this site.

Some Apps may include a supplementary, app-specific privacy notice inside the App itself. Where that's the case, the in-app notice and this policy should be read together; if they conflict on a specific point, the in-app notice governs for that App.

3. Information we collect

We collect the following categories of information, depending on which App or part of our website you use:

• Account information — your name, email address, and a securely hashed password, or details provided by a third-party sign-in option you choose to use (such as Apple or Google sign-in).
• Content you provide — habit logs, goals, notes, journal entries, ratings, or similar information you choose to enter into an App. Some of this content may relate to your mood, routines, or general wellbeing.
• Usage data — how you interact with our Apps, including features used, session length, in-app actions, and crash or performance reports.
• Device data — device model, operating system and version, language and region settings, time zone, and identifiers such as an advertising or device ID.
• Purchase information — if you buy a subscription or in-app purchase, the App Store or Google Play processes your payment directly. We receive confirmation that a purchase was made (and details like plan type and renewal date), but never your full card number or banking details.
• Communications — anything you send us directly, for example through a support email or a contact form on this website.

Where content you provide relates to your health, mood, or wellbeing, it may qualify as a special category of personal data under Article 9 of the GDPR. We only process this kind of data on the basis of your explicit consent, given when you choose to enter it into an App.

4. How we use this information

We use the information described above to:

• create and maintain your account and provide the core features of an App;
• save your progress, habits, and preferences so they're there the next time you open the App;
• send service-related messages, such as reminders you've turned on or notices about your subscription;
• understand how our Apps are used so we can fix problems and improve them;
• detect, investigate, and prevent fraud, abuse, or security incidents; and
• comply with our legal and tax obligations.

5. Our legal basis for processing

If you're located in the European Economic Area or the UK, we rely on one or more of the following legal bases:

• Performance of a contract — to provide the App or service you've signed up for.
• Consent — for optional features, marketing communications, and any special category data you choose to share with us. You can withdraw consent at any time.
• Legitimate interests — to maintain and improve our products, keep them secure, and understand general usage trends, balanced against your right to privacy.
• Legal obligation — where we need to retain or disclose information to meet a legal requirement.

6. Sharing your information

We don't sell your personal data. We share information only in the following circumstances:

• Service providers who help us run our business — for example, cloud hosting, crash reporting, analytics, customer support tools, and subscription management. These providers may only use your data to perform services for us and are bound by data processing agreements.
• App platforms such as Apple's App Store or Google Play, which process purchases and subscriptions on our behalf.
• Legal and safety reasons — if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Buddy, our users, or others.
• Business transfers — if Buddy app, MB is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.

7. International data transfers

Some of our service providers may process data outside the European Economic Area. Where that happens, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses, to ensure your information continues to receive a comparable level of protection.

8. Data retention

We keep your personal data for as long as your account is active, and for a limited period afterward if needed to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. When that period ends, we delete or anonymize the data so it can no longer be linked back to you.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to certain processing;
• receive a copy of your data in a portable format; and
• withdraw consent at any time, where processing is based on consent.

You can exercise most of these rights directly from within an App's settings, or by writing to us at the email address below. If you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority — in Lithuania, this is the State Data Protection Inspectorate.

10. Children's privacy

Our Apps are not directed at children and are not intended for use by anyone under the age of 16. We don't knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we'll take steps to delete it.

11. Security

We use reasonable technical and organizational measures — including encryption in transit, access controls, and routine review of our systems — to protect your information. No method of transmission or storage is ever completely secure, so we can't guarantee absolute security.

12. Cookies and similar technologies

This website may use a small number of cookies or similar technologies to remember basic preferences and understand general traffic patterns. You can control or disable cookies through your browser settings; doing so shouldn't affect your ability to read this site, though some optional features may not work as intended.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We'll update the "last updated" date above, and where a change is significant, we'll let you know through the App or by email before it takes effect.

14. Contact us

If you have a question about this policy or want to exercise any of your rights, you can reach us at:

Buddy app, MB
Pylimėlių g. 8-11
LT-10229 Vilnius, Lithuania
Email: hi@buddyapp.lt