Privacy Policy

Δεν είσαι μόνος ("You're not alone") · Last updated: 13 August 2026

Δεν είσαι μόνος is a mental-wellness app. The nature of what you share with us — moods, journal entries, recovery progress — is deeply personal, and we treat it that way. This policy explains, in plain words, what we collect, why, and the rights you have over it.

The short version: we collect only what the app needs to work, we never sell your data, we run no ads, and we use no advertising or analytics trackers. Your wellbeing data is processed only with your explicit consent, and you can delete everything at any time.

1. Who we are

Techgetafrica, 179 Runda Drive, Nairobi, Kenya, is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and equivalent laws.

For anything in this policy, contact us at reaganprezzo@gmail.com.

2. The data we collect

Account data — your name, email address, and password (stored only as a secure hash) when you create an account, and a profile photo if you choose to add one.

Wellbeing data — data you choose to record in the app: mood check-ins, journal entries, recovery tracking, your onboarding wellbeing check-in, and meditation or breathing activity. This is health-related data and is treated as special-category data under Article 9 GDPR (see the next section).

Therapy requests — if you request a therapy session: the topic you select, your preferred times, and any note you write.

Purchase data — if you subscribe to Premium, our subscription provider processes an anonymous app user ID, your subscription status, and store receipt data. We never see or store your card or payment details; payment is handled entirely by Apple or Google.

Technical data — the minimum needed to run a secure service, such as authentication tokens and server logs.

What we do NOT collect: we run no advertising, no third-party analytics, and no tracking across other apps or websites. We do not collect your precise location, contacts, or browsing history, and we never sell personal data.

3. Your wellbeing data and explicit consent

Moods, journal entries, recovery progress, and therapy topics are health-related data. Under Article 9(2)(a) GDPR we process this data only with your explicit consent, which you give by choosing to record it in the app.

You can withdraw that consent at any time by deleting individual entries or your whole account, or by emailing reaganprezzo@gmail.com. Withdrawing consent doesn't affect the lawfulness of processing before withdrawal.

Your journal is private to you. Our team does not read your entries; access is restricted by row-level security so that only your signed-in account can retrieve them.

4. Why we process your data (legal bases)

• To provide the app — creating your account, syncing your entries, showing your history and progress. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To record your wellbeing data — legal basis: your explicit consent (Art. 6(1)(a) and 9(2)(a) GDPR).
• To arrange therapy sessions you request — legal basis: performance of a contract and your explicit consent.
• To manage subscriptions and entitlements — legal basis: performance of a contract.
• To keep the service secure and prevent abuse — legal basis: our legitimate interest in protecting the service and its users (Art. 6(1)(f) GDPR).
• To comply with legal obligations, such as tax and accounting rules — legal basis: legal obligation (Art. 6(1)(c) GDPR).

5. Who we share data with

We share data only with the service providers (processors) needed to run the app, under data-processing agreements:

• Supabase — hosts our database, authentication, and file storage (your account, entries, and profile photo).
• RevenueCat — manages subscription status. Receives an app user ID and store receipt data; never your name or journal.
• Apple App Store / Google Play — process payments under their own terms and privacy policies.
• Brevo — delivers the email notifying our care team when you request a therapy session.

If you book a therapy session, the details of your request are shared with our care team so a licensed professional can contact you.

We never sell personal data and never share it with advertisers or data brokers. We would disclose data to authorities only where the law requires it.

6. International transfers

Some of our providers process data outside the European Economic Area. Where that happens, transfers are protected by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework where the provider is certified) or by the Commission's Standard Contractual Clauses.

7. How long we keep your data

Your account data and everything you record stay until you delete them or delete your account. When you delete your account, your profile, photo, journal entries, moods, recovery data, and therapy requests are permanently removed from our systems, with residual copies purged from backups within 30 days.

Purchase records are kept as long as tax and accounting law requires. Server logs are kept briefly for security and then deleted.

8. Your rights

Wherever you live, and especially under the GDPR, you have the right to:

• Access the personal data we hold about you, and get a copy.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Receive your data in a portable, machine-readable format.
• Restrict or object to certain processing.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these, email reaganprezzo@gmail.com. We respond within one month, as the GDPR requires, and we will never treat you differently for exercising your rights.

You also have the right to lodge a complaint with your local data-protection supervisory authority. If you are in the EU or EEA, that is the authority of the country where you live.

9. Deleting your account

You can delete your account and all associated data at any time from Settings → Delete account inside the app, or by emailing reaganprezzo@gmail.com from your registered address. Deletion is permanent and cannot be undone.

10. Security

All data travels encrypted (TLS) and is stored encrypted at rest. Access to your entries is enforced by row-level security tied to your account. Passwords are stored only as secure hashes. No system is perfectly secure, but if a breach ever affects your data we will notify you and the supervisory authority as the GDPR requires.

11. Children

The app is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children under 16; if you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect and, where the change concerns your wellbeing data, ask for your consent again. The "last updated" date at the top always reflects the current version.

13. Contact

Techgetafrica
179 Runda Drive, Nairobi, Kenya
reaganprezzo@gmail.com