Privacy Policy

1. Introduction

April ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

2. Information We Collect

We collect the following types of information:

• Account information — name, email address, and profile picture provided when you sign in via Google, GitHub, or a passkey.
• Wallet information — Ethereum wallet address if you choose to link one to your account.
• Usage data — pages visited, features used, and interaction logs for improving the Service.
• Payment data — billing details processed and stored securely by Stripe. We do not store raw card numbers.
• Preferences — theme, appearance, and layout settings stored to provide a consistent experience across devices.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate you and manage your account sessions.
• Process payments and send billing-related communications.
• Respond to support requests and inquiries.
• Detect and prevent fraudulent or unauthorized activity.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share data with trusted third-party service providers who assist us in operating the Service, including:

• Stripe — payment processing.
• Cloudflare R2 — file storage for avatars and uploads.
• Google / GitHub — OAuth authentication providers.

Each provider is contractually bound to handle your data in accordance with applicable privacy laws.

5. Cookies and Storage

We use cookies and local storage to maintain your session, store appearance preferences, and provide a seamless experience. You can configure your browser to refuse cookies, but some parts of the Service may not function properly as a result.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

7. Security

We implement industry-standard security measures including HTTPS, encrypted storage, and one-time-use nonce validation for wallet sign-in. No system is completely secure, and we cannot guarantee absolute security of your data.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Data portability where technically feasible.

To exercise any of these rights, please contact us at the address below.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date above. Your continued use of the Service after changes are posted constitutes your acceptance.