2. What Information We Collect

We may collect and process the following data about you:

• Identifiers / Contact Information: Name, username, email address, postal address, phone number, IP address, and unique device or platform IDs.
• Protected Characteristics: Age and gender.
• Commercial and Usage Data: Purchase history, usage preferences, and information about how you interact with our services.
• Billing Information: Payment details and shipping addresses, which are processed by our payment partners.
• Device and Technical Data: Device type, operating system, browser type, and language settings.
• Audio/Visual Information: Account photos, avatars, and audio information from chat features.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
• Sensitive Information: Precise location information (only if you allow it), account credentials, and the contents of communications via chat features.
• User-Generated Content: The text, images, and other content you save in your journal entries.

3. Legal Basis for Processing Your Information

We process your personal data only when we have a legal basis to do so under applicable law. Our legal bases include:

• Contract: Where processing is necessary for the performance of a contract with you, such as creating your account and processing payments.
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as analyzing usage data to improve our services and protect their security.
• Consent: Where you have given clear consent for us to process your data for a specific purpose, like signing up for a marketing newsletter.
• Legal Obligation: Where processing is necessary for us to comply with the law (e.g., for tax or legal reporting requirements).

4. Data Sharing and Disclosure

We do not sell or rent your personally identifiable information to third parties. We may share your information only with trusted service providers who perform services on our behalf (e.g., web hosting, payment processing), within our corporate group, for legal reasons, or with your explicit consent. If your journal entries are encrypted, we cannot unlock them and will provide them to authorities only in their encrypted state. We will share your data with your excplicit consent.

5. Your Data Rights and Choices

Depending on your location, you have comprehensive rights regarding your personal data. These may include:

• The Right to Access: The right to access the personal data we hold about you.
• The Right to Rectification: The right to request correction of inaccurate or incomplete data.
• The Right to Erasure: The right to request the deletion of your personal data ("right to be forgotten").
• The Right to Restrict Processing: The right to request that we limit the way we use your data.
• The Right to Data Portability: The right to request a copy of your data in a machine-readable format.
• The Right to Object: The right to object to our processing of your data, especially for direct marketing purposes.
• The Right to Withdraw Consent: The right to withdraw your consent at any time for any data processing that is based on consent.