Privacy Policy

This policy covers the iizy website and mobile app. Kirabo Prosper Ruth, based in Uganda, is responsible for deciding how iizy processes personal information. Privacy and support requests: kiraboprosperofficial@gmail.com. Payment providers and external sites have their own policies.

We collect information you provide, information created when you use the service, limited technical information needed to operate and secure it, and purchase status supplied by Google Play, Paddle or RevenueCat.

• Account: email, username, display name, profile image and authentication identifiers.
• Age safety: private date of birth or age range, country/policy result, consent status and guardian email where permission is required.
• Planning: goals, habits, vision boards, focus sessions, check-ins and reflections.
• Social: posts, comments, reactions, connections, Circles, Messages, reports and blocks.
• Events: invitations, RSVPs, passes and attendance controls.
• Sensitive private tools: cycle/wellbeing entries and budget information.
• Technical: device/browser details, security events, errors and network information.
• Calling and notifications: microphone/camera streams when enabled, participants, call timing/status, device identifiers, push tokens and preferences.
• Billing: account/customer identifiers, product and subscription status and purchase/refund records. Payment-card details are entered with the provider, not stored in iizy user records.

We use information to provide and personalize iizy, authenticate accounts, apply privacy and age protections, deliver requested communications, process purchases, prevent abuse, respond to reports, maintain reliability and satisfy legal obligations. Private wellbeing, messages, budgets and Clarity content are not used to recommend public posts, people or advertising.

Requested account verification and password-reset emails help secure your account. Guardian email is used for the permission request and related safety communications, not optional reminders. Adult users may separately opt in to a one-time welcome and a weekly reminder in Settings → Notifications. Both are off by default. Weekly delivery uses your selected day, local hour and time zone; optional emails do not contain private goals, Messages, wellbeing or budget details. Brevo receives your account email, first name and the email content to deliver these messages. You can stop optional emails from the link in each email without signing in, change your choices in Settings, or contact support. Stopping optional emails does not cancel billing or requested security communications. Google Play or Paddle supplies purchase receipts and billing notices under its own policies.

We share information only with service providers acting for iizy, with other users according to your visibility choices, when required by law, to protect people and the service, or in a properly disclosed business transfer. Providers include Firebase/Google Cloud for hosting, authentication, storage, push and AI processing; Agora for calls; RevenueCat for subscription status; Google Play for Android purchases; Google AdMob for eligible Android advertising; Brevo for service email; and Paddle for browser purchases when web checkout is enabled. Paddle acts as merchant of record for its transactions and processes billing information under its own privacy policy. We do not give guardians automatic access to a young person’s private messages, goals, cycle entries or budget.

• Public content can be seen and reshared by others.
• Private service providers receive only what is needed for their role.
• We do not sell personal information or use guardian consent emails for marketing.

Calling uses device microphone/camera permissions and Agora to transmit live media to participants. iizy does not offer call recording; another participant may record outside iizy. Call history and metadata are separate from live media. Device settings and call controls let you manage permissions.

When you use Ask iizy, your prompt and relevant selected context may be processed by our AI provider to generate a response. Responses can be inaccurate; avoid entering information you do not want processed for that purpose. Processing supports requested services, consent choices, security and legal obligations.

Eligible adult users of the free Android app may see clearly labelled advertising supplied by Google AdMob. Google Mobile Ads may process device or advertising identifiers, approximate location derived from network information, app interactions and diagnostic information for advertising delivery, measurement, fraud prevention and service reliability. Where required, Google’s consent form is shown before ads are requested and advertising privacy choices remain available in Settings. Paid iizy+ accounts, minors and accounts without verified adult age do not receive ads.

• Private goals, habits, messages, budgets, wellbeing, cycle, journal and vision-board information is never sent to AdMob for targeting.
• Declining optional personalized advertising does not remove access to iizy’s core features.
• Advertising identifiers are not used to continue tracking an account after deletion.

We keep information only as long as needed for the service, safety, disputes and legal obligations. Account and private planning records are kept while needed for your account and chosen features. Retention also depends on deletion choices, safety investigations, payment disputes and legal obligations. Account deletion removes account and owned records; some shared group content may remain with identity removed. Providers may retain their own billing records, and limited backup or legal/safety records may have separate retention needs. Content others copied or reshared is outside our control. Deleting your account does not cancel a subscription. We use authentication, access rules, secret management, encryption in transit and restricted audit records, but no system is completely secure.

Settings lets you manage profile visibility, personalization, notifications, wellbeing data, export and account deletion. Depending on location, you may also have rights to access, correct, erase, restrict, object or complain to a regulator. Contact us to exercise a right. We may verify identity proportionately before acting. In Uganda, you can raise privacy complaints with the Personal Data Protection Office (pdpo.go.ug); you do not have to contact us first. Never send passwords or unnecessary sensitive documents.

iizy uses an age-aware experience. Unknown age is not treated as adult. Younger users receive private defaults and restricted social capabilities; guardian permission may be required under the configured policy. Age, country and consent state determine available capabilities. Features requiring permission remain restricted when permission is absent or withdrawn. Contact support if you believe a child’s information was collected without required permission.

Data may be processed where our providers operate, subject to appropriate safeguards. We will post material policy changes, update the effective date and request renewed consent where required.