Back

Privacy Policy

Effective May 11, 2026

Gademshe Goldensun LLC ("we") respects your privacy. This Policy describes what we collect, why, how we use it, and your rights. It is designed to satisfy the disclosure requirements of Stripe, Meta (Facebook & Instagram), TikTok, and major advertising platforms, as well as applicable laws including GDPR, UK GDPR, CCPA/CPRA, and the Maryland Online Data Privacy Act.

1. Data we collect

  • Account data: email address, display name, password hash, sign-in provider.
  • Usage data: daily pulls, journal entries, reflections, favorites, streaks, XP, deck unlocks.
  • Billing data: Stripe customer ID, subscription status, last 4 of card, billing country. Full card details are stored by Stripe, not by us.
  • Device & log data: IP address, browser, OS, timestamps, error logs, approximate location derived from IP.
  • Marketing data (if you visit our marketing site): ad clicks, page views, conversion events shared with Meta, TikTok, and Google for measurement and retargeting.

2. How we use data

  • Provide and personalize the Service.
  • Process subscriptions and prevent fraud (legal basis: contract).
  • Send transactional emails — receipts, password resets, important account notices (legal basis: contract).
  • Send marketing emails only with your consent. You can unsubscribe at any time.
  • Measure and improve advertising performance, including conversion tracking on Meta, TikTok, and Google (legal basis: consent / legitimate interests).
  • Comply with legal obligations.

3. Sharing & processors

We share data only with vetted processors, under contract:

  • Supabase — database, authentication, file storage.
  • Stripe — payments, subscriptions, fraud prevention.
  • Lovable — hosting & email delivery.
  • Meta, TikTok, Google — only where you have consented to advertising cookies/pixels on our marketing pages; only hashed identifiers and event data.

4. Cookies & tracking

We use a small number of strictly necessary cookies for sign-in and security. Advertising and analytics cookies (e.g. Meta Pixel, TikTok Pixel, Google Analytics) are loaded only with your consent. See our Cookie Notice.

5. Retention

Account data is retained for the life of your account. When you request deletion, your account enters a 30-day grace period and is then permanently removed (except records we are legally required to keep, such as billing records for tax purposes — typically 7 years).

6. Your rights

Depending on where you live you may have the right to access, correct, port, restrict, or delete your data, withdraw consent, and lodge a complaint with a supervisory authority. California residents have additional rights under CCPA/CPRA including the right to opt out of "sharing" for cross-context behavioral advertising. To exercise any right, email support@lightpowr.com.

We do not sell your personal information.

7. International transfers

Data may be processed in the United States and other countries where our processors operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Children

The Service is not directed to children under 18. We do not knowingly collect data from children.

9. Security

We use encryption in transit (TLS), encrypted storage, row-level security on our database, and least-privilege access controls. No system is perfectly secure.

10. Changes

We will post updates here and, for material changes, notify you by email or in-app.

11. Contact

Gademshe Goldensun LLC
Email: support@lightpowr.com
Website: https://lightpowr.com