Your privacy is important to us. This policy explains how we handle your personal data.
Last Updated: April 6, 2026
ProgressHub ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it. By using the Service you agree to this policy.
We collect the following categories of personal data: • Account data: name, email address, password (hashed), and profile photo you choose to provide. • Usage data: goals, habits, journal entries, reflections, and other content you create within the Service. • Technical data: IP address, browser type, device identifiers, and log data collected automatically when you access the Service. • Payment data: billing information processed by our payment providers (Stripe, Paystack, and mobile money processors). We do not store full card numbers. • Preference data: currency, theme, notification time, and other settings.
We use your data to: • Provide and personalize the Service. • Process payments and manage subscriptions. • Send reminders and notifications you have opted into. • Improve the Service through aggregated analytics. • Comply with legal obligations. • Respond to support requests. We do not sell your personal data to third parties.
We process your data on the following legal bases: • Contract: to fulfil our service agreement with you. • Legitimate interests: to operate and improve the Service. • Consent: for optional features such as marketing communications and analytics opt-in. • Legal obligation: where required by law.
We share data only with trusted third parties necessary to operate the Service: • Neon (database hosting) • Firebase (authentication and transactional email) • Stripe, Paystack, and mobile money processors (payments) • OpenAI (AI coaching features — only anonymized, non-identifying content) All third parties are contractually bound to handle data securely and in compliance with applicable laws.
We retain your account and content data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.
Depending on your location, you may have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Request deletion of your data. • Object to or restrict processing. • Data portability (receive a copy of your data in a machine-readable format). • Withdraw consent at any time. To exercise any of these rights, contact us at [email protected].
We implement industry-standard security measures including encryption in transit (HTTPS/TLS), hashed passwords, and access controls. However, no system is completely secure. We encourage you to use a strong, unique password and to report any suspected security issues promptly.
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us personal data, please contact us and we will delete it.
Your data may be processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
For privacy-related questions or to exercise your rights: Email: [email protected] Address: DroitCloud Ltd, Bruce House, 11th Floor, Standard Street, P.O. Box 12124-00100, Nairobi, Kenya