Privacy Policy

1. Introduction

Dear Money ("the Service"), operated by Klimeck Media ("we", "us", "our"), respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our application.

We comply with the Brazilian General Data Protection Law (LGPD — Lei nº 13.709/2018) and the European General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

Account information: Email address, name, and password (hashed, never stored in plain text) when you create an account.

Practice data: Ritual configurations, practice history, streak data, and selected preferences. This data is used to personalize your experience and track your progress.

Payment information: Processed entirely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. We receive only a confirmation of payment status and subscription plan from Stripe.

Usage data: Pages visited, features used, device type, and browser information for analytics and improvement purposes.

3. How We Use Your Information

We use your information to: (a) provide and personalize the Service; (b) process payments and manage subscriptions; (c) send transactional emails (welcome, payment confirmation, password reset); (d) improve the Service based on usage patterns; (e) comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal Basis for Processing (LGPD/GDPR)

We process your data based on: (a) consent — when you create an account and accept these terms; (b) contract performance — to deliver the Service you subscribed to; (c) legitimate interest — to improve the Service and prevent abuse; (d) legal obligation — to comply with tax, accounting, and regulatory requirements.

5. Data Storage and Security

Your data is stored on secure servers. Passwords are hashed using bcrypt. All connections to the Service use HTTPS/TLS encryption.

Payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of security certification in the payments industry.

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, or destruction. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing (privacy policy)
• Analytics provider — usage analytics (privacy-focused, no personal data shared)
• Email provider — transactional emails only

7. Your Rights

Under LGPD and GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Revoke consent — withdraw consent at any time
• Object — object to processing based on legitimate interest

To exercise any of these rights, contact us at support@blissfulrich.com. We will respond within 15 days (LGPD) or 30 days (GDPR).

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax purposes, which we retain for 5 years).

Practice history and streak data are deleted along with your account.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. If we introduce analytics cookies in the future, we will request your consent before setting them.

10. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will delete it promptly.

11. International Transfers

Your data may be processed on servers located outside your country of residence. We ensure adequate protection through contractual safeguards and compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Your continued use of the Service after changes constitutes acceptance.

13. Contact & Data Protection Officer

For privacy-related inquiries:

Email: support@blissfulrich.com

Klimeck Media · Rio de Janeiro, RJ, Brazil