Privacy Policy

Last Updated: July 2026

Welcome to PRODU, operated by PRODU GROUP LIMITED ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use our mobile app and related web services (collectively, the "Services").

1. Data Controller and Contact

PRODU GROUP LIMITED is the data controller for the personal data described in this Privacy Policy.

• Support Email: support@produ.app
• Legal/Privacy Contact: support@produ.app (subject line: "Privacy Request")
• Company Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

2. Information We Collect

a. Information You Provide

• Account and Profile Data: Name, email address, authentication provider details, and account identifiers.
• Purchase and Subscription Data: Product/plan, transaction identifiers, entitlement status, and billing metadata from app stores, RevenueCat, and Stripe.
• User Content: Notes, projects, habits, nutrition logs, trips, AI prompts, and uploaded media.
• Communications: Information you submit when contacting support or sending feedback.

b. Information Collected Automatically

• Usage Data: Feature interactions, in-app events, timestamps, and diagnostic/error events.
• Device and Technical Data: Device model, OS version, app version, language/region, and network-related diagnostics.
• Security Signals: Signals used to prevent abuse, fraud, or unauthorized access (including App Check or similar controls).
• Biometric Unlock: Device-level biometric features (such as Face ID or Touch ID) may be used locally to unlock the app. We do not receive or store raw biometric templates.

3. How We Use Personal Data

We process personal data to:

• Provide, operate, secure, and improve the Services.
• Create and manage accounts, sync data, and maintain backups.
• Deliver subscriptions, credits, purchases, and account entitlements.
• Provide AI-powered functionality using third-party AI providers when requested by you.
• Respond to support requests and service communications.
• Detect, investigate, and prevent abuse, fraud, and policy violations.
• Comply with legal obligations and enforce our Terms.

4. Legal Bases for Processing (EEA/UK)

When EEA/UK data protection law applies, we process personal data under one or more of these legal bases:

• Contract: To provide the Services you request and fulfill our Terms.
• Legitimate Interests: To improve reliability, prevent abuse, maintain security, and operate our business responsibly.
• Legal Obligation: To comply with legal, tax, accounting, and regulatory duties.
• Consent: Where required by law (for example, certain optional communications or cookie technologies).

5. How We Share Information

We do not sell personal data. We share data only as needed to provide the Services:

• Infrastructure and Storage: Google Firebase (Authentication, Firestore, Storage, security and operations tooling).
• Payments and Subscriptions: Apple App Store, Google Play, RevenueCat, and Stripe.
• AI Processing: Google Gemini, OpenAI, and Grok (xAI), only for requested AI generation features.
• Professional and Compliance Providers: Auditors, legal advisors, and similar vendors under confidentiality obligations.
• Legal/Safety Requests: Where required by law, court order, or to protect rights, safety, and platform integrity.
• Corporate Transaction: In the event of merger, acquisition, restructuring, or sale, subject to lawful safeguards.

6. International Data Transfers

Your data may be processed outside your country of residence. Where required, we use lawful transfer safeguards, such as standard contractual clauses and contractual security commitments with providers.

7. Data Retention

We keep personal data only as long as needed for the purposes described above, including legal, accounting, and security requirements. Typical retention approach:

• Account Data: Kept while your account is active and for a limited period after closure to support recovery, compliance, and fraud prevention.
• User Content: Kept until deleted by you or removed according to product controls and retention rules.
• Billing and Transaction Data: Retained for tax/accounting and dispute handling obligations.
• Diagnostics and Security Logs: Retained for limited periods for reliability and abuse prevention.

8. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing activities.

• You can request account deletion and related data deletion from app settings where available.
• You can submit rights requests by emailing support@produ.app with subject line "Privacy Request".
• We may need to verify identity before fulfilling requests and may apply lawful exceptions.
• For EEA/UK requests, we aim to respond within one month unless an extension is lawfully required.

9. Regional Notices

EEA/UK

If you are in the EEA or UK, you may lodge a complaint with your local data protection authority.

California and Other U.S. State Privacy Laws

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as defined by applicable law.

Canada and Other Regions

We handle personal data in accordance with applicable local law and provide rights mechanisms described in this policy where required.

10. Cookies and Similar Technologies

Our websites and services may use cookies or similar technologies for essential operation, security, analytics, and performance. Where required by law, we request consent before setting non-essential technologies.

11. Children's Privacy

The Services are not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal data from children below the applicable age threshold. If you believe a child provided personal data to us, contact support@produ.app and we will investigate and take appropriate action.

12. Security

We use technical and organizational safeguards designed to protect personal data, including encryption in transit and at rest where appropriate, access controls, and monitoring. No system can be guaranteed 100% secure.

13. Automated Decision-Making

We do not use solely automated decision-making that produces legal or similarly significant effects in relation to users.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last Updated" date. Material changes may also be communicated in-app where appropriate.

15. Contact Us

For questions about this Privacy Policy or your personal data, contact support@produ.app.