Privacy Notice
Last updated: July 19, 2026
1. Who we are
Rekomit is operated as a sole trader by Abiodun Akorede Salami, based in Canada ("Rekomit", "we", "us"). We are the data controller for the personal data described in this Notice. You can reach us at support@rekomit.app.
2. Personal data we collect
- Account data: name/display name, email, hashed password or OAuth identifier (Google/Apple).
- Product data you enter: your mission, ideas, habits, focus sessions, and settings.
- Support communications: messages you send us.
- Device & usage data: device type, browser, operating system, IP address, log timestamps, feature usage.
- Push notification tokens: if you opt in to notifications.
- Payment metadata: subscription status, plan, renewal dates. Card and billing details are collected and processed by Paddle, not by us.
3. How we use it and legal basis
- Creating your account and providing the Service — performance of a contract.
- Sending transactional emails, receipts and opt-in nudges — contract / consent.
- Security, fraud prevention, abuse detection, and enforcing our Terms — legitimate interests.
- Improving the product and diagnosing bugs — legitimate interests.
- Complying with legal obligations (tax, accounting, lawful requests) — legal obligation.
4. Who we share data with
- Paddle — our Merchant of Record for all sales. Paddle handles checkout, payment processing, subscription management, invoicing, tax compliance, refunds and related customer service. See Paddle's Privacy Policy.
- Infrastructure providers — cloud hosting, database, authentication, and email delivery vendors that process data on our behalf.
- Push provider — Google Firebase Cloud Messaging, if you enable notifications.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law or to protect our rights.
5. International transfers
Our providers may process data outside your country of residence, including in the United States and the European Union. Where such transfers occur from the UK/EEA or Canada, we rely on appropriate safeguards such as Standard Contractual Clauses or provider adequacy commitments.
6. Retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax and accounting obligations. You can request deletion at any time from Settings → Danger zone, or by emailing us. Backups are cycled out on a rolling basis.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You can exercise most of these directly in the app, or by emailing support@rekomit.app. You also have the right to complain to your local data protection authority (in Canada, the Office of the Privacy Commissioner of Canada).
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege database policies (row-level security) — to protect your personal data. No system is perfectly secure, but we take this seriously.
9. Cookies and similar technologies
We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. We do not use advertising cookies. If we add analytics in the future, we will update this Notice and, where required, ask for your consent.
10. Children
Rekomit is not directed at children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect data from children.
11. Changes
We may update this Notice from time to time. Material changes will be communicated in-app or by email.