Privacy Policy
Last updated: September 2026
1. Introduction
This Privacy Policy explains how 90 Points Life ("we", "the Service") collects, uses, and protects your personal data. We are committed to protecting your privacy and complying with applicable data protection laws including the GDPR and CCPA.
2. Information We Collect
Account data: your email address and authentication information. Journal data: the entries you create, including titles, categories, descriptions, lessons, mood tags, dates, and any images you upload. Usage data: basic technical information such as sign-in times, used to operate and secure the Service.
3. How We Use Your Data
We use your data to: provide and maintain the journaling features; authenticate your account; display your personal dashboard, timeline, and reminders; secure the Service against abuse; and communicate essential service notices. We do not sell your personal data.
4. Data Storage & Security
Your data is stored with our cloud infrastructure provider (Supabase), using encryption in transit (TLS) and industry-standard access controls. Each user's entries are isolated by row-level security so that only you can access your own content. Uploaded images are stored in secured cloud storage.
5. Data Sharing
We do not share your personal data with third parties except: service providers who help us operate (e.g., hosting and authentication), who are bound by confidentiality obligations; or when required by law. We do not use your journal content for advertising.
6. Your Rights (GDPR / CCPA)
You have the right to: access your personal data; correct inaccurate data; export your data (available in-app as JSON or Markdown); delete your account and all associated data (available in Settings); and withdraw consent. To exercise these rights, contact [email protected].
7. Account & Data Deletion
You can permanently delete your account at any time from Settings. Deletion immediately removes your journal entries and uploaded images from our active systems. Backups are purged on a routine cycle. This cannot be undone.
8. Cookies & Local Storage
We use essential local storage and session tokens to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
9. Children's Privacy
The Service is not directed to individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. International Data Transfers
As the Service is offered to international users, your data may be processed in data centers outside your country. We take steps to ensure appropriate safeguards for such transfers.
11. Changes to This Policy
We may update this Privacy Policy. Material changes will be communicated via email or in-app notice, and the "Last updated" date will be revised.
12. Contact
For privacy questions or data requests, contact us at [email protected].