Privacy Notice
1. Who we are
Nehemiah Foundation ("we", "us", "our") operates Legacy OS. We are the data controller for the personal data we collect about you through the Service. You can reach us about privacy matters at ebikake@gmail.com or for general support at ebikake@gmail.com.
2. What we collect and why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account data | Name, email, password hash, profile preferences | Create your account, authenticate you, provide the Service | Contract |
| Content you create | Prayer journals, fasts, plans, family entries, church records | Provide the Service and sync your data across devices | Contract |
| Usage & device data | IP address, browser type, pages visited, error logs | Security, fraud prevention, debugging, improving the Service | Legitimate interests |
| Support communications | Messages you send to support | Respond to your requests | Legitimate interests |
| Marketing (optional) | Email if you opt in to newsletters | Send product updates and announcements | Consent |
Payment data (card number, billing address, tax details) is collected directly by our payment provider, Paddle, and is not stored by us.
3. Who we share data with
- Hosting and infrastructure providers — to operate the Service (cloud hosting, databases, email delivery, error monitoring).
- Paddle.com Market Ltd — our Merchant of Record, who handles payments, subscription management, invoicing and tax compliance. See Paddle's Privacy Notice.
- Professional advisers — lawyers, accountants and auditors where strictly necessary.
- Authorities — where required by law, court order or to protect our rights.
We do not sell your personal data.
4. International transfers
Some of our service providers process data outside the UK and the EEA. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
5. How long we keep your data
We keep your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to keep it for legal, accounting or fraud-prevention reasons.
6. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data ("right to be forgotten");
- restrict or object to certain processing;
- request a copy of your data in a portable format;
- withdraw consent at any time (where processing is based on consent);
- lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).
To exercise any of these rights, email ebikake@gmail.com. We aim to respond within one month.
7. Security
We use industry-standard technical and organisational measures to protect your data — including encryption in transit, encryption of secrets at rest, role-based access controls and regular review of our security practices. No system is perfectly secure; please tell us promptly if you suspect any compromise of your account.
8. Cookies
We use a small number of essential cookies and similar technologies to keep you signed in and to remember your preferences. We do not currently use advertising cookies. If we introduce optional analytics or marketing cookies in future, we will ask for your consent first.
9. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us personal data, please contact us and we will delete it.
10. Changes to this notice
We may update this Privacy Notice from time to time. The "last updated" date below will reflect the most recent revision. Material changes will be highlighted in the Service or by email.