This draft explains what Ugly First, a DBA of The Mindful Startup LLC collects to run Ugly First. A lawyer has not signed it yet.
We collect an email address, timezone, discipline, timer and reminder settings, the writing and photos you submit, and billing status from Stripe. We store the time you confirmed you are 18. We do not store the birth year you typed. We do not collect your name, phone number, contacts, precise location, or an advertising identifier.
On Camera uses the camera and microphone in your browser, on that device. The recording stays there: in memory while you take it, and in browser storage if you keep it so you can download it later. We do not receive, upload, or store the video or audio. We never see it. The server stores the exercise id, whether the camera was on, how many seconds the take ran, whether you finished it, and the time. Your video stays on your phone. Deleting the account removes that metadata. It does not reach into the phone and delete a file you already downloaded.
We do not sell personal information and we do not share it for cross-context behavioral advertising. A Global Privacy Control signal is honored because we have no sale or share to turn off. If ad pixels are added later, that change waits for a lawyer and a consent mechanism.
Cookies are limited to what the app needs: a session, an age-gate result, a first-touch campaign note, and a record that the pricing page was already shown this visit. Plausible, if configured, is cookieless. There is no advertising cookie.
Processors: Supabase (database, auth, and file storage for photos you attach to visual exercises), Vercel (hosting), Stripe (payments and tax), Resend (email), Plausible (optional traffic counts), and Sentry (optional error reports, without session replay). Supabase file storage does not hold On Camera recordings. We sign DPAs and rely on SCCs or the Data Privacy Framework for transfers where those vendors need them.
Staff do not open submission content except when you ask for help, when there is a credible abuse or illegal-content report, or when the law requires it. Those openings are written to an access log.
You can export your work, correct your email and settings, and delete the account. We aim to answer access, correction, deletion, and objection requests within 30 days. Deletion cancels a subscription immediately, then purges the profile, submissions, and files within 7 days. Event rows are detached from your id. Stripe keeps payment records where the law requires a record.
Lawful bases for people in the EU and UK are contract (running the practice app) and consent (optional reminders). Contact privacy@uglyfirst.app.