Privacy Policy

1. What we collect

Account info

When you sign up, we collect your name, email address, and password (hashed, never stored in plain text). If you sign in with Google, we receive your name, email, and profile picture from Google.

Usage info

We log basic technical details — IP address, browser type, pages visited — to keep the Service running, debug issues, and prevent abuse.

Things you give us

If you email us, fill out a form, or save items to your dashboard, we store that content so the Service works.

2. What we don't collect

• We don't collect financial information. We don't process payments directly.
• We don't sell, rent, or trade your personal data — to anyone, for any reason.
• We don't run third-party ad networks that track you across the web.

3. How we use your info

To:

• Create and secure your account.
• Personalize your dashboard with scholarships, discounts, and tools.
• Send you transactional emails (confirmation, password reset, account updates).
• Send you the weekly newsletter — only if you opt in. You can unsubscribe any time.
• Improve the Service and fix bugs.

4. Who we share with

We share data only with service providers that help us operate the Service, under strict confidentiality:

• Hosting & database: Supabase (via Lovable Cloud) and Cloudflare.
• Authentication: Google (only if you choose Google sign-in).
• Email delivery: our transactional email provider.

We may also disclose information if required by law or to protect the rights and safety of our users.

5. Cookies

We use a small number of cookies to keep you signed in and to remember your preferences. We don't use advertising cookies. You can clear or block cookies in your browser, but parts of the Service won't work without them.

6. Your rights

You can:

• Access the data we hold about you.
• Correct anything inaccurate.
• Delete your account and associated data.
• Export a copy of your data.
• Opt out of marketing emails at any time.

To exercise any of these, email hello@dare.diy.

7. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to keep records longer.

8. Security

We use industry-standard practices to protect your data — encrypted transport (HTTPS), hashed passwords, row-level access controls. No system is perfectly secure, but we work hard to keep yours safe.

9. Kids

dare.diy isn't directed at children under 13. If we learn we've collected data from a child under 13 without parental consent, we'll delete it.

10. International users

We operate from the United States. By using the Service, you consent to your data being processed in the U.S. and other countries where our providers operate.

11. Changes to this policy

If we make material changes, we'll notify you by email or post a notice on the site before they take effect.

12. Contact

Questions, requests, or complaints? Email hello@dare.diy.