Privacy notice

Who is responsible for your data

Henk Oelofse, trading as 90 Days in South Africa, is the data controller for 90 Days. For anything in this notice, write to hoelofse11@gmail.com.

What we collect

• Account data: your email address, your password in encrypted form, or your Google account identifier if you sign in that way.
• Profile data: the display name you choose, whether you want to stay anonymous, and whether you signed up to help others.
• Recovery data you enter: your daily marks, streak, completed exercises, check-in answers, the reasons and consequences you write down, and your private record entries. Some of this describes your sexual behaviour and is therefore sensitive; you decide what to write and you can leave any field empty.
• Community content: posts you make in the rooms, one-to-one chat messages, and reports you send about other members.
• Payment data: your subscription status, period dates, and the customer and subscription identifiers given to us by Paddle. We never see or store your card number.
• Technical data: basic logs and error reports needed to keep the app running.

Why we use it

To give you an account, run the 90-day program and your streak, show your posts to the members you post to, keep the rooms safe through moderation, take payment for Plus, and fix problems. Where the data is sensitive, we rely on your explicit consent, which you give by choosing to write it. You can withdraw it by deleting the entries or asking us to delete your account.

Who we share it with

• Paddle.com Market Ltd: our Merchant of Record and payment provider. Paddle receives your email address and purchase details in order to take payment, send receipts, handle refunds and meet tax obligations.
• Supabase: the hosted database and login service that stores your account and content.
• Lovable: hosting for the app itself, and the AI service that screens new community posts for explicit or unsafe content before they appear.
• Google: only if you choose to sign in with Google.
• Other members: only what you deliberately post or send in a chat, under the display name you chose.

We do not sell your data, and we do not use it for advertising. Some of these providers are outside South Africa, so your data may be processed abroad under standard contractual protections.

How long we keep it

Your account data and content are kept while your account is open. If you ask us to delete your account, we remove your profile, posts, chats and recovery data within 30 days. Payment records are kept by Paddle for as long as tax law requires.

Your choices

You can see and edit what you have written inside the app, download it from the Plus screen, delete individual posts, and ask us to correct or delete everything. Write to hoelofse11@gmail.com and we reply within 30 days. You may also complain to your local data protection authority.

Keeping it safe

Data is sent over encrypted connections and stored with access controls so that each account can only reach its own check-ins. Passwords are stored hashed, never in plain text. Community posts are screened before they appear, and one human moderator reviews reports. No system is perfect, but we take appropriate technical and organisational measures to protect what you write, and we will tell you if a breach affects you.

Storage on your device

The app keeps your streak and settings on your own device so it works offline, and uses a login token to keep you signed in. We do not use advertising or tracking cookies. The wider terms explain the rest of the service.