Dhurm Companion App

Privacy Policy

Effective date: 3 September 2026 · Version 1.0

What we collect. When you create an account: your first and last name, email address, city, state/province, and country, and (in future) your language preference. As you use the App: your journal entries, your progress, and your consent choices (Terms acceptance, newsletter, new-release notifications), each with a timestamp. Basic technical logs (IP address, browser type) are kept briefly for security. We use only essential cookies, those required for sign-in and session security; no advertising or tracking cookies.

What we use it for. To operate the App (accounts, saving and returning your journal to you), to send emails you have asked for, to respond when you contact us, and to keep the service secure. Nothing else. We do not sell or rent personal information, we do not share it with advertisers, and we do not use your journal entries to train AI models.

Your journal is private. Journal entries are visible only to your signed-in account. Administrators can see account details (name, email, location, subscription choices) to run the service, but cannot read journal entries or passwords.

Where your data lives. Data is stored with Supabase, our database provider, on cloud infrastructure that may be located outside your country (currently North America). Wherever it is processed, we apply the protections described in this policy. Passwords are stored only as cryptographic hashes; Google sign-in shares no password with us at all.

Emails and consent. Marketing email (monthly newsletter; one email per new book release) is sent only with your opt-in, recorded with a timestamp. Every marketing email has an unsubscribe link, and you can change your choices anytime on your account page.

Your rights. Wherever you live, you can: access what we hold about you, correct it (account page), export your journal (JSON download), and request deletion of your account and data (processed within 30 days and confirmed by email). Users in the EU/UK have these rights under the GDPR; Canadians under PIPEDA; others under their local law. We apply the same standard to everyone. To exercise any right: contact@dhurm.net or the in-App contact page.

Retention. We keep your data while your account exists. After a deletion request, personal data and journals are removed within 30 days, except minimal records we must keep by law (for example, proof a deletion was performed).

Children. The App is not directed at children under 16, and we do not knowingly collect their data; if we learn we have, we delete it.

Changes. We will post updates here and notify you of material changes by email or in the App.

Contact. Dhurm Inc., Ontario, Canada · contact@dhurm.net