Privacy Policy

Introduction

At Hayflick, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

Personal Information

When you create an account, we collect:

• Email address (via Google or Apple OAuth)
• Name and profile information from your OAuth provider
• Project and journey data you create within the platform

Usage Data

We automatically collect:

• Log data (IP address, browser type, device information)
• Usage patterns and feature interactions
• Session duration and navigation paths

Cookies and Tracking

We use essential cookies for authentication and session management. You can control cookie preferences through our cookie consent banner.

How We Use Your Information

• Provide and maintain our services
• Authenticate your identity and maintain your session
• Save your project progress and preferences
• Improve our platform based on usage analytics
• Communicate important updates and changes
• Ensure security and prevent fraud

Data Protection & Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security (RLS) to isolate tenant data
• Secure authentication via OAuth 2.0 with Google and Apple
• Regular security audits and vulnerability assessments
• Access controls and audit logging for all data access

Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Request deletion of your data (right to be forgotten)
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent at any time

Data Retention

We retain your personal information only as long as necessary to provide our services or as required by law. You may request deletion of your account and associated data at any time.

Third-Party Services

We use the following third-party services:

• Google OAuth for authentication
• Apple Sign-In for authentication
• Vercel for hosting and infrastructure
• Neon for database services

These services have their own privacy policies governing their collection and use of your information.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Children's Privacy

Hayflick is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through our contact page.