Privacy Policy

selfsmith.app — operated by Super Ailand ehf

We take your privacy seriously. This policy explains what data we collect, why, and how we handle it. We aim to collect only what we need and to be transparent about everything.

1. What Data We Collect

Data	Why we collect it
Email address	Account creation, login, and essential communications
Questionnaire answers	Generating your personalized visualization audio
Usage data (streaks, completions, listening history)	Powering app features like streak tracking, and improving the service

2. What We Do NOT Collect

Payment information: All payments are processed by Paddle, our third-party payment provider. We never see, store, or have access to your credit card number or payment details. Paddle has its own privacy policy.
Tracking cookies: We do not use advertising or analytics tracking cookies.

3. How We Use Your Data

Generate your visualization audio: Your questionnaire answers are sent to our AI pipeline (Gemini for script generation, Qwen3-TTS for voice synthesis) to create personalized content for you.
Track your usage: Streaks, completion status, and listening data power the app features you see in your dashboard.
Improve the service: We may analyze aggregated, anonymized usage patterns to make SelfSmith better for everyone.
Communicate with you: Essential emails about your account, subscription, or significant service changes.

4. Where Your Data Is Stored

Your data is stored on secure servers in Germany (EU), hosted by Hetzner. This means your data is protected under EU data protection regulations. We use encryption in transit (HTTPS/TLS) and follow security best practices for data at rest.

5. Third Parties

We share data with a limited number of third parties, only as necessary to operate the service:

Paddle — payment processing (receives your email and payment info)
Hetzner — server hosting (data stored on their infrastructure)
Google (Gemini API) — your questionnaire answers are processed to generate visualization scripts
Qwen3-TTS — generated scripts are synthesized into audio

We do not sell your personal data to third parties. Ever.

6. Cookies & Local Storage

SelfSmith uses minimal browser storage:

A JWT authentication token stored in localStorage to keep you logged in.
No advertising cookies. No third-party tracking cookies. No analytics cookies.

7. Your Rights (GDPR)

SelfSmith is operated from Iceland (EEA) and stores data in Germany (EU). Under the GDPR, you have the right to:

Access your personal data — ask us what we have.
Correct inaccurate data.
Delete your data — request full account and data deletion.
Export your data in a portable format.
Object to certain types of processing.

To exercise any of these rights, email us at hello@superailand.com. We will respond within 30 days.

8. Data Retention

We keep your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain certain records.

9. Children

SelfSmith is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that a user is under 18, we will delete their account and data promptly.

10. Changes to This Policy

If we make significant changes to this privacy policy, we will notify you via email or through the app before the changes take effect.

11. Contact

Questions or concerns about your privacy? Get in touch:

Super Ailand ehf
Email: hello@superailand.com