Privacy Policy

Gentleward is an independently operated, United States-based service (“Gentleward,” “we,” “us”). This policy covers gentleward.com, my.gentleward.com, the Gentleward applications, API, and related support. Contact us at hello@gentleward.com.

Information we collect

Account and security data: email address, chosen name and username, timezone, avatar, passkey public credentials, API-key metadata, sign-in dates, IP address, browser/device information, and active-session records. Gentleward does not store passwords or passkey private keys.

Content and wellness data: check-ins and autonomic state, journal and reflection text, gratitude and forgiveness entries, glimmers and triggers, practices, focus sessions, tasks, habits, gardens, reminders, photos and files, optional location coordinates attached to a check-in, and information you intentionally share through a connection.

Transactions and operations: plan status and Stripe customer/subscription identifiers; support messages; notification tokens; API usage counts; and security, availability, and error logs. Stripe receives payment details directly; Gentleward does not store complete payment-card numbers.

How we use information

We use information to provide and personalize requested features; authenticate accounts and secure sessions; synchronize devices; deliver opted-in reminders; process subscriptions; provide support; prevent abuse; maintain, debug, and improve reliability; comply with law; and protect users and the service. We do not use personal information for targeted advertising, sell it, or build advertising profiles.

When information is disclosed

We disclose only what is needed to service providers listed on our Subprocessors page; to people you deliberately connect or share with; during a business transfer; or when reasonably necessary to comply with law, enforce our terms, or protect safety and rights. AI features are not currently user-accessible. Their configured processing stack is a Gentleward-managed Ollama runtime using the open-weight Meta Llama 3.1 8B model. Prompts are processed within Gentleward-controlled infrastructure rather than sent to Ollama, Meta, or a hosted AI API.

Storage and retention

The application and production database run on a DigitalOcean Droplet administered by Gentleward; DigitalOcean provides the underlying cloud infrastructure. User uploads and rotating encrypted database backups use Cloudflare R2.

Confirmed-account content is kept while the account is active or until you delete it. Unconfirmed accounts are removed after 14 days. Authentication sessions expire after 60 days unless renewed. Operational and security logs are kept only as reasonably needed for security and reliability. Production maintains up to 10 rotating encrypted database backups; deleted data may remain in those isolated backups until rotation, and is not restored except for disaster recovery. Legal, tax, fraud-prevention, chargeback, and transaction records may be retained as required.

Your choices and rights

You can edit profile and sharing settings, revoke connections, location and notifications, download a JSON copy of your account, and permanently delete your account from Account Settings. You may also email us to request access, correction, deletion, portability, or withdrawal of consent. We will verify requests using the signed-in account or its email address and respond as required by applicable law. You may appeal a denied consumer-health-data request by replying “Appeal” to our decision.

Gentleward does not sell or share personal information for cross-context behavioral advertising, so no “Do Not Sell or Share” link is required. At present Gentleward does not meet the California Consumer Privacy Act’s business thresholds, but California residents still receive the disclosures and controls described here. We do not discriminate for exercising a privacy right.

Tracking, security, and transfers

We do not track activity across unrelated services and do not use advertising analytics. Accordingly, browser Global Privacy Control and Do Not Track signals do not change our behavior. We use encryption in transit, access controls, hashed or encrypted credentials, short-lived file links, backups, and monitoring; no system can be guaranteed perfectly secure.

Gentleward is currently offered only to adults located in the United States. Information may be processed in the United States. The service is not directed to children or anyone under 18.

Changes

We will post revisions here and change the effective date. Material changes will also be announced in the service or by email when appropriate. When renewed agreement, acknowledgment, or consent is appropriate, the application will ask before ordinary continued use while preserving access to account export, deletion, privacy requests, and sign-out.