Privacy Notice

This notice explains how The LaFoi Group ("we", "us"), operating My Daily Devotional & Journal, handles personal data. This page is maintained by The LaFoi Group to answer common privacy questions about the app; it is not an independent certification or audit.

1. Who we are

The LaFoi Group is the data controller for the personal data described here. Contact us at info@thelafoigroup.com.

2. What we collect and why

• Account data (email address, login credentials, sign-in provider such as Google), to create and secure your account and let you sign in. Legal basis: performance of our contract with you.
• Journal content you write (reflections, gratitude notes, mood, takeaways, favorites, completion marks), to provide the journal feature and show your entries back to you. Legal basis: performance of our contract.
• Support messages, to answer your questions. Legal basis: legitimate interests in supporting our users.
• Technical and usage data (IP address, device and browser information, error logs, basic usage events), to keep the Service secure, prevent fraud and abuse, and improve the product. Legal basis: legitimate interests.
• Marketing emails, if you opt in. Legal basis: your consent, which you may withdraw at any time.

Your journal entries are private to your account and are not read by us for any purpose other than operating, securing and supporting the Service. We do not sell personal data.

3. Who we share data with

• Service providers and subprocessors that host our application, database, authentication and email delivery, acting on our instructions.
• Paddle.com, our Merchant of Record, for the sale of memberships, subscription management, payments, tax compliance and invoicing. Paddle collects payment details directly; we do not receive or store your card number.
• Notion, the source of the devotional content we display (read-only; your personal data is not sent there).
• Professional advisers such as legal and accounting providers, where necessary.
• Authorities or third parties where required by law, or to protect our rights and users' safety.

4. International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep your account and journal data for as long as your account is active, and for up to 30 days after you close it so you can request an export. Records we must keep for legal, tax or accounting reasons are retained for the period required by law. Technical logs are typically retained for a short period and then deleted or anonymised.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You may also complain to your local data protection authority (for UK/EEA residents). Email us and we will respond within one month.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, managed authentication, and per-user access rules at the database level so one account cannot read another account's journal entries. No system is perfectly secure, but we work to protect your data and to respond promptly to any incident. Report a security concern to info@thelafoigroup.com.

8. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and to run the checkout. These are required for the Service to work. If we add analytics or marketing cookies in future, we will ask for your consent first and provide a way to manage your preferences.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data.

10. Changes

We may update this notice; the "last updated" date above will change and material updates will be communicated in the app or by email.