Privacy Policy

1. Information We Collect

Account Data: When you create an account, we collect your email address. We use magic-link authentication — we do not store passwords.

Conversation Storage: We store the conversations and messages you have with Ask Rumi in Supabase. This data is used to provide conversation continuity and improve the Service.

Usage Data: We collect information about how you use the Service, including pages visited, features used, and credit usage.

Referral Tracking: If you participate in our referral program, we track referral links, clicks, and account creation events associated with your referral code.

Payment Processing: When you purchase credits, payment data is processed by Stripe. We do not store your payment card details.

Cookies: We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns.

Analytics: We may use analytics services to understand how users interact with the Service. This may include aggregated, anonymized usage data.

Legal Acceptance Records: We record when you accept our Terms of Service and Privacy Policy, including the version accepted and the date and time of acceptance.

2. How We Use Your Information

• To provide and maintain the Service
• To process your account and manage credits
• To send transactional emails (magic links, receipts)
• To process payments through Stripe
• To track referral rewards and prevent fraud
• To improve the Service through analytics
• To comply with legal obligations
• To record and verify acceptance of our legal terms

3. Use of Submitted Content

When you submit content through Ask Rumi — including questions, prompts, reflections, feedback, and other input — that content may be used by Dada Group LLC in the following ways, consistent with the rights granted in our Terms of Service:

• Storage and Processing: Your submitted content is stored and processed to deliver the Service and provide conversation continuity.
• Analysis and Improvement: Content may be analyzed to improve the quality, relevance, and safety of the Service.
• Summarization and Transformation: Content may be summarized, adapted, or transformed for use within platform features.
• Anonymization: Content may be anonymized and incorporated into wisdom collections, reflection archives, quote cards, featured reflections, and related platform experiences.
• Platform Features: Anonymized or transformed content may appear in the Wisdom Library, Public Reflection Collections, Featured Reflections, Social Media Content, Promotional Materials, and future Ask Rumi platform features.

You should not submit confidential, proprietary, sensitive, personal, or identifying information you do not wish to be stored, processed, analyzed, displayed, published, or otherwise used by the Service.

Dada Group LLC may, but is not obligated to, remove, redact, anonymize, summarize, edit, or transform submitted content prior to its use within the Service.

If you delete your account, Dada Group LLC may retain and continue using anonymized, aggregated, transformed, derivative, archived, or previously published content where legally permitted. Content that has already been incorporated into platform features, collections, or published materials prior to account deletion may not be removed.

This section is consistent with and governed by the User Content License in our Terms of Service.

4. Administrator Access to Conversations

Authorized administrators of Dada Group LLC may access user conversations for the following purposes:

• Customer support and issue resolution
• Security monitoring and fraud prevention
• Content moderation and safety enforcement
• Platform analytics and service improvement
• Legal compliance and law enforcement requests

Administrator access is role-based and logged. We do not sell or share conversation content with third parties for advertising purposes.

5. Third-Party Services

Supabase: We use Supabase for authentication, database storage, and backend infrastructure. Your account data and conversation history are stored on Supabase's servers.

OpenAI: Conversations are processed by OpenAI's API to generate Rumi's responses. Your conversation content is sent to OpenAI for processing. Please review OpenAI's privacy policy at openai.com/privacy.

Stripe Integration: Payment processing is handled by Stripe. We do not store your payment card details. Stripe's privacy policy applies to payment data. Please review stripe.com/privacy.

Analytics: We may use analytics services to understand how users interact with the Service. This may include aggregated, anonymized usage data.

6. Data Retention

We retain your account data and conversation history for as long as your account is active. You may request deletion of your account and associated data by contacting us at support@rumi.blog. We will process deletion requests within 30 days, subject to legal retention requirements.

Notwithstanding account deletion, we may retain anonymized, aggregated, transformed, or previously published content as described in Section 3 above.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest through Supabase's infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at support@rumi.blog.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

10. Changes to This Policy

Dada Group LLC may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the revised policy. If we update the Privacy Policy version, users may be required to re-accept the updated policy before continuing to use the Service.

11. Contact

For privacy-related questions or requests, contact Dada Group LLC at support@rumi.blog. We aim to respond within 5 business days.