Privacy Notice

Last updated: April 2026

1. Who we are

RSVD at rsvdmethod.com is operated by an individual under the trading name "RSVDUNLMTD" ("we", "us"). RSVDUNLMTDis not a registered business entity — it is a sole individual operating in a personal capacity. That individual is the data controller for the personal data described in this notice. For any privacy or data protection request, contact us at support@rsvdmethod.com.

2. What we collect & why

• Account data — email, username, password hash, optional display name, bio, avatar, legal name. Used to create and maintain your account, sign you in, and personalize the Service. Legal basis: contract performance.
• App content — journal entries, planner notes, habits, budgets, workouts, customizations. Used to provide the Service to you. Legal basis: contract performance.
• Support messages — anything you send us. Used to respond to you. Legal basis: legitimate interests / contract performance.
• Device & usage data — IP address, browser type, request logs, basic telemetry. Used for security, fraud prevention, and improving the Service. Legal basis: legitimate interests.

Payment-related data (card details, billing address, tax IDs) is collected and processed directly by our payment processor, Stripe — we do not see or store your full card details. We receive only limited transaction metadata (e.g. last 4 digits, country, amount, receipt URL) needed to fulfil your order and provide receipts.

3. Who we share data with

• Service providers / subprocessors — hosting and database (Supabase), email delivery infrastructure, error logging.
• Stripe Payments — payment processing, fraud prevention, and receipt delivery. RSVDUNLMTD is the Merchant of Record; Stripe acts as our payment processor.
• Professional advisers — legal and accounting, where strictly necessary.
• Authorities — where required by law, court order, or to protect rights and safety.

We never sell your personal data.

4. International transfers

Some of our subprocessors may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account and content data for as long as your account is active. When you delete your account, your content is removed within 30 days, except where we are required to keep records (e.g. tax, accounting). Backups are rotated and overwritten on a rolling basis.

6. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. UK/EEA residents also have the right to complain to their local supervisory authority. We respond within one month.

To exercise any right, email support@rsvdmethod.com.

7. Security

We use appropriate technical and organisational measures including encryption in transit (HTTPS), encryption at rest for the database, hashed passwords, and access controls.

8. Cookies

We use only essential cookies / local storage to keep you signed in and remember your preferences. We do not use marketing or third-party tracking cookies.

9. Changes

If we make material changes, we'll notify you by email or in-app notice.

10. Contact

Email support@rsvdmethod.com with any privacy questions.