Privacy Notice

Mukaji ("Mukaji", "we", "us", "our") is operated by Telma Fjelltveit, an individual seller doing business as Mukaji. For the personal data described in this Notice, Telma Fjelltveit acts as the data controller.

We collect:

• Account data — your name (or display name), email address, password (hashed), authentication identifiers.
• Profile & cycle data — life stage, cycle length, last period start, breastfeeding status — only the items you choose to enter.
• Journal data — daily check-ins, mood/energy/sleep/stress signals, pre- and post-trade reflections, intentions, and the emotional and behavioral tags you select.
• Learning progress — which lessons you've started or completed.
• Subscription data — subscription status, plan, billing period, Paddle customer and subscription IDs.
• Usage & device data — IP address, browser type, device identifiers, language, pages viewed, and error logs collected automatically when you use the Service.
• Support communications — any message you send us.

Payment details (card numbers, billing address) are collected and held by our payment provider, Paddle. We do not see or store full card numbers.

When you request a Premium report, your relevant journal entries and tracking data for the selected window are sent to our AI provider (Lovable AI Gateway, which routes to large-language-model providers such as Google) solely to generate that report. We do not use your data to train third-party models. Inputs and outputs are processed under the AI provider's terms.

• Paddle — our Merchant of Record for sales, subscription management, payments, tax compliance, invoicing, refunds, and customer billing support.
• Hosting & infrastructure providers — Lovable Cloud (Supabase) for database, authentication, and hosting; Cloudflare for content delivery and security.
• AI providers — Lovable AI Gateway and its underlying model providers (e.g. Google Gemini) for generating Premium reports.
• Analytics & monitoring providers — to understand usage and detect errors.
• Professional advisers — accountants and lawyers, where necessary.
• Authorities — when required by law, court order, or to protect rights.

We do not sell your personal data.

Your data may be transferred to and processed in countries outside your own, including outside the UK/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and the equivalent UK addendum, or an adequacy decision.

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (for example, billing and tax records held by Paddle) for legal or accounting purposes.

Subject to your local law (including UK GDPR and EU GDPR where applicable), you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure ("right to be forgotten");
• restrict or object to processing, including objecting to processing based on legitimate interests;
• data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data-protection supervisory authority.

We aim to respond within one month. To exercise any right, contact us through the Service.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, row-level security on the database, and audit logging. No system is perfectly secure; we encourage you to use a strong, unique password.

We use a small number of essential cookies and local storage items to keep you signed in and remember your preferences. We may use limited analytics to understand product usage. We do not use marketing cookies. You can control cookies through your browser settings; disabling essential cookies will break sign-in.

Mukaji is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Notice from time to time. We will post the new version here and update the "Last updated" date; material changes will be communicated through the Service.

Privacy questions: contact Telma Fjelltveit through the Service. Billing, refund, and invoice questions: handled by Paddle at paddle.net.