Privacy Policy

1. Introduction

VIMAYA (we, us, our) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

2.1 Account Information

• Username: Your chosen display name
• Email address: Used for account recovery and notifications
• Password: Stored securely using industry-standard hashing (never in plain text)

2.2 User-Generated Content

• Tasks: Task titles, descriptions, due dates, and completion status
• Time Blocks: Schedule entries including titles, dates, times, and focus mode settings
• Templates: Saved schedule templates you create
• Daily Statistics: Your focus time and productivity metrics

2.3 Social Features

• Friend Connections: Relationships with other users you connect with
• Shared Progress: Information you choose to share with friends

2.4 Information We Do NOT Collect

• We do NOT collect your location data
• We do NOT access your contacts, photos, or files
• We do NOT use third-party analytics or advertising trackers
• We do NOT sell your personal information

3. How We Use Your Information

• Provide, maintain, and improve our Services
• Create and manage your account
• Sync your data across devices
• Enable social features (friend connections, shared progress)
• Respond to your support requests
• Protect against fraud and unauthorized access

4. Data Security

• Encryption in Transit: All data uses TLS 1.2+ encryption (HTTPS)
• Secure Authentication: JWT tokens with cryptographic signing
• Password Protection: Passwords are hashed using PBKDF2
• Secure Token Storage: Stored in iOS Keychain or Android Keystore
• Account Protection: Automatic lockout after 5 failed login attempts

5. Data Sharing

We do NOT sell, rent, or trade your personal information. We may share information only:

• With your consent (e.g., with friends you connect with)
• With service providers bound by confidentiality agreements
• When required by law or court order

6. Data Retention

• Data is retained while your account is active
• Upon deletion request, data is removed within 30 days

7. Your Rights

• Access a copy of your personal data
• Correct inaccurate information
• Delete your account and data
• Export your data in a portable format

Contact: privacy@vimaya.app

8. Children

VIMAYA is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect data from children.

9. International Transfers

Your information may be transferred internationally with appropriate safeguards.

10. Changes

We may update this policy and will notify you by updating the date.

11. Contact

Email: privacy@vimaya.app

12. California Residents (CCPA)

You have the right to know what data we collect and request deletion. We do not sell personal information.

13. European Users (GDPR)

You have rights under GDPR including access, rectification, erasure, and data portability.