Privacy Policy

1. Introduction

Welcome to Hello Dear Diary ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

2. Information We Collect

We collect several types of information to provide and improve our Services:

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our diary services
• Account Management: To create and manage your account
• Personalization: To customize your experience and provide relevant features
• Communication: To send you updates, notifications, and support messages
• Security: To protect against unauthorized access and fraudulent activity
• Analytics: To understand usage patterns and improve our Services
• Legal Compliance: To comply with applicable laws and regulations
• Customer Support: To respond to your inquiries and provide assistance
• Feature Development: To develop new features and enhance existing ones

4. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls limit who can access your data
• Secure Storage: Data is stored on secure servers with regular backups
• Authentication: Multi-factor authentication options available
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Regular Audits: Periodic security audits and penetration testing

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active
• Diary Entries: Retained until you delete them or close your account
• Usage Data: Typically retained for 24 months for analytics purposes
• Backup Data: Retained for up to 90 days in secure backups

You may request deletion of your data at any time through your account settings or by contacting us.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: Third-party vendors who assist in providing our Services (cloud hosting, analytics, payment processing) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• With Your Consent: When you explicitly authorize us to share your information

We require all third parties to maintain the confidentiality and security of your information.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Export: Request a copy of your data in a portable format
• Opt-Out: Opt out of marketing communications
• Account Closure: Delete your account at any time
• Consent Withdrawal: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at privacy@hellodeardiary.com or use the account settings in the app.

8. Children's Privacy

Our Services are not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@hellodeardiary.com, and we will delete such information from our systems.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws, including:

• Standard Contractual Clauses (SCCs) approved by regulatory authorities
• Adequacy decisions by the European Commission or equivalent
• Other legally recognized transfer mechanisms

10. Third-Party Services

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Third-party services we may use include:

• Cloud storage providers
• Analytics services
• Payment processors
• Authentication services

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic functionality
• Performance Cookies: Help us understand how users interact with our Services
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us improve our Services

You can control cookies through your browser settings, but disabling certain cookies may limit functionality.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell your information)
• Right to Non-Discrimination: Not to be discriminated against for exercising your rights

To exercise these rights, contact us at privacy@hellodeardiary.com.

13. GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Access your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

Contact our Data Protection Officer at dpo@hellodeardiary.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy in the app
• Sending an email notification
• Displaying a prominent notice in the app

Your continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.