Privacy Policy
Effective May 11, 2026
Gademshe Goldensun LLC ("we") respects your privacy. This Policy describes what we collect, why, how we use it, and your rights. It is designed to satisfy the disclosure requirements of Stripe, Meta (Facebook & Instagram), TikTok, and major advertising platforms, as well as applicable laws including GDPR, UK GDPR, CCPA/CPRA, and the Maryland Online Data Privacy Act.
1. Data we collect
- Account data: email address, display name, password hash, sign-in provider.
- Usage data: daily pulls, journal entries, reflections, favorites, streaks, XP, deck unlocks.
- Billing data: Stripe customer ID, subscription status, last 4 of card, billing country. Full card details are stored by Stripe, not by us.
- Device & log data: IP address, browser, OS, timestamps, error logs, approximate location derived from IP.
- Marketing data (if you visit our marketing site): ad clicks, page views, conversion events shared with Meta, TikTok, and Google for measurement and retargeting.
2. How we use data
- Provide and personalize the Service.
- Process subscriptions and prevent fraud (legal basis: contract).
- Send transactional emails — receipts, password resets, important account notices (legal basis: contract).
- Send marketing emails only with your consent. You can unsubscribe at any time.
- Measure and improve advertising performance, including conversion tracking on Meta, TikTok, and Google (legal basis: consent / legitimate interests).
- Comply with legal obligations.
3. Sharing & processors
We share data only with vetted processors, under contract:
- Supabase — database, authentication, file storage.
- Stripe — payments, subscriptions, fraud prevention.
- Lovable — hosting & email delivery.
- Meta, TikTok, Google — only where you have consented to advertising cookies/pixels on our marketing pages; only hashed identifiers and event data.
4. Cookies & tracking
We use a small number of strictly necessary cookies for sign-in and security. Advertising and analytics cookies (e.g. Meta Pixel, TikTok Pixel, Google Analytics) are loaded only with your consent. See our Cookie Notice.
5. Retention
Account data is retained for the life of your account. When you request deletion, your account enters a 30-day grace period and is then permanently removed (except records we are legally required to keep, such as billing records for tax purposes — typically 7 years).
6. Your rights
Depending on where you live you may have the right to access, correct, port, restrict, or delete your data, withdraw consent, and lodge a complaint with a supervisory authority. California residents have additional rights under CCPA/CPRA including the right to opt out of "sharing" for cross-context behavioral advertising. To exercise any right, email support@lightpowr.com.
We do not sell your personal information.
7. International transfers
Data may be processed in the United States and other countries where our processors operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Children
The Service is not directed to children under 18. We do not knowingly collect data from children.
9. Security
We use encryption in transit (TLS), encrypted storage, row-level security on our database, and least-privilege access controls. No system is perfectly secure.
10. Changes
We will post updates here and, for material changes, notify you by email or in-app.
11. Contact
Gademshe Goldensun LLC
Email: support@lightpowr.com
Website: https://lightpowr.com