1.1 Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds as defined by Article 6 of the GDPR:

• Consent (Article 6(1)(a)): Processing based on your explicit consent for specific purposes (e.g., marketing communications, non-essential cookies).
• Performance of a Contract (Article 6(1)(b)): Processing necessary to fulfill our contractual obligations to you (e.g., providing the note-taking service, processing payments).
• Compliance with Legal Obligations (Article 6(1)(c)): Processing required to comply with our legal obligations (e.g., tax and accounting requirements).
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, provided these do not override your privacy rights and freedoms. Our legitimate interests include:
  • Improving and maintaining our Platform
  • Preventing fraud and ensuring security
  • Analyzing usage patterns to enhance user experience
  • Managing our business operations
• Protection of Vital Interests (Article 6(1)(d)): Processing necessary to protect someone's life or vital interests (rarely applicable to our services).

We will provide you with specific information about the legal basis for processing at the time we collect your personal data, where appropriate. You have the right to object to processing based on legitimate interests, as outlined in Section 6.

1.2 Cookie Policy (GDPR/CCPA Compliance)

We use cookies and similar tracking technologies (collectively "cookies") to enhance your experience on our Platform. Below is our cookie policy:

Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies cannot be disabled as they are required for basic functionality (e.g., authentication, session management).
• Analytics Cookies: Help us understand how users interact with our Platform, allowing us to improve performance and user experience (e.g., Google Analytics).
• Functional Cookies: Enable enhanced functionality and personalization (e.g., remembering your preferences).
• Advertising/Targeting Cookies: Used to deliver relevant advertisements and measure the effectiveness of marketing campaigns (only with your consent).

Your Cookie Choices

You can manage your cookie preferences at any time:

• Using the cookie consent banner displayed on your first visit
• Adjusting your browser settings to block or delete cookies
• Visiting the "Cookie Settings" page in your account dashboard

Please note that disabling essential cookies may affect the functionality of the Platform. Non-essential cookies will only be activated with your explicit consent.

2. Information We Collect

We collect different types of information to provide and improve our Service to you. The information we collect falls into two primary categories: Personal Information (information that identifies you personally) and Non-Personal Information (information that does not identify you individually).

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Create an account (name, email address, password, and optional profile information)
• Subscribe to our premium services (billing information, payment details)
• Contact our customer support team (communication history, support inquiries)
• Participate in surveys, promotions, or feedback forms (responses, preferences)
• Share feedback or submit content to the Platform (notes, comments, uploaded files)

2.2 Automatically Collected Information

When you use our Platform, we may automatically collect certain information about your device and usage patterns, including:

• Device information (device type, operating system, unique device identifiers, browser type)
• Usage data (pages visited, features used, time spent on the Platform, interaction patterns)
• Location information (approximate geographic location based on IP address, if permitted)
• Log data (IP address, access times, referral URLs, crash reports)

2.3 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you sign in using social media credentials)
• Payment processors (transaction details for premium subscriptions)
• Analytics providers (usage and performance data)
• Business partners (with your consent or as permitted by law)

3. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

• To provide and maintain the Service: To create and manage your account, process transactions, deliver the note-taking features you request, and ensure the Platform functions properly.
• To improve our Service: To analyze usage patterns, identify areas for improvement, develop new features, and enhance the overall user experience.
• To communicate with you: To respond to your inquiries, provide customer support, send important updates about your account, and deliver administrative messages (such as security alerts).
• To personalize your experience: To tailor content, recommendations, and features to your preferences and usage history.
• To ensure security and prevent fraud: To detect and prevent unauthorized access, fraudulent activities, and violations of our Terms of Use.
• To comply with legal obligations: To meet our legal and regulatory requirements, respond to lawful requests from authorities, and protect our rights and interests.
• With your consent: For any other purpose for which we have obtained your explicit consent.

We will not use your personal information for purposes that are unrelated to the above without first notifying you and obtaining your consent, where required by law. We do not sell your personal information to third parties for commercial purposes.

4. Information Sharing and Disclosure

We do not share your personal information with third parties except in the following limited circumstances:

• With service providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as payment processing, data storage, analytics, customer support, and marketing assistance. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
• With business partners: We may share non-personal information (or personal information with your consent) with business partners for joint products or services.
• In case of a business transfer: If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
• For legal reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas). We may also disclose information to protect our rights, privacy, safety, or property, or that of our users or the public.
• With your consent: We may share your information with third parties when you give us explicit permission to do so.

We do not sell, rent, or lease your personal information to third parties for their marketing purposes without your explicit consent. We may share aggregated, anonymized data (which cannot be used to identify you) with third parties for research, analytics, or marketing purposes.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• End-to-end encryption for all note content stored on our Platform
• Secure socket layer (SSL) encryption for data transmitted between your device and our servers
• Access controls and authentication mechanisms to restrict access to personal information
• Regular security audits and vulnerability assessments
• Employee training on data protection and security best practices
• Secure data storage and backup procedures

Despite our best efforts, no security system is completely impenetrable. We cannot guarantee the absolute security of your information, and you use the Platform at your own risk. If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities as required by law and take reasonable steps to mitigate the impact of the breach.

6. User Rights

6.1 Rights Under GDPR (EEA Users)

If you are a resident of the European Economic Area (EEA), you have the following rights under the GDPR:

• Right to access: You have the right to request a copy of the personal information we hold about you, including details about how we process it and who we share it with.
• Right to correction: You have the right to request correction of inaccurate or incomplete personal information without undue delay.
• Right to deletion (Right to be forgotten): You have the right to request deletion of your personal information where:
  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw your consent (and no other legal basis exists for processing)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been processed unlawfully
  • Deletion is required to comply with legal obligations
• Right to restriction: You have the right to request restriction of processing of your personal information in certain circumstances (e.g., while we verify the accuracy of data, or if you object to processing).
• Right to data portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller without hindrance.
• Right to withdraw consent: If you have given consent for processing, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
• Right to object: You have the right to object to processing of your personal information for direct marketing purposes (including profiling) or based on our legitimate interests (we will stop processing unless we can demonstrate compelling legitimate grounds).
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe our processing violates the GDPR.

6.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., if we need to retain it to comply with legal obligations).
• Right to opt-out: You have the right to opt out of the sale of your personal information (we do not sell your personal information, but you may still request confirmation of this).
• Right to non-discrimination: You have the right to not receive discriminatory treatment for exercising your CCPA rights.
• Right to correct: You have the right to request correction of inaccurate personal information.

6.3 How to Exercise Your Rights

To exercise these rights, please contact our Data Protection Officer using the information provided in Section 9 ("Contact Us"). We will respond to your request:

• Within one month for GDPR requests (may be extended by two additional months for complex requests)
• Within 45 days for CCPA requests (may be extended by an additional 45 days if necessary)

We may ask you to verify your identity before processing your request to ensure the security of your information. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

For California residents, you may designate an authorized agent to submit requests on your behalf. The authorized agent must provide proof of written authorization to act on your behalf.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period for your personal information will depend on the type of information and the purpose for which it was collected.

Specific retention periods include:

• Account information: Retained for as long as your account is active, and for a reasonable period thereafter (typically 12 months) to allow you to reactivate your account and retrieve your data.
• Note content: Retained for as long as your account is active, or until you delete the content or your account.
• Transaction information: Retained for the period required by tax and accounting laws (typically 7 years).
• Customer support records: Retained for 2 years after the resolution of your inquiry.
• Usage data: Retained in aggregated, anonymized form for analytical purposes indefinitely, while personally identifiable usage data is retained for 12 months.

When we no longer need your personal information, we will securely delete or anonymize it to prevent unauthorized access or use.

8. International Data Transfers

Our servers are located in the United States, and your personal information may be transferred to, processed, and stored in countries outside your country of residence, including the United States. These countries may have different data protection laws than your country.

For EEA users, we ensure that international transfers comply with the GDPR by using one or more of the following safeguards:

• European Commission's adequacy decisions for certain countries
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (BCRs) for intra-group transfers
• Your explicit consent for specific transfers

We will ensure that any international transfer of your personal data is protected by appropriate safeguards to ensure the same level of protection as required by applicable data protection laws.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Data Protection Officer Email: dpo@Pocketlegends
• Postal address:
• Privacy Request Form: Submit a privacy request

We will respond to your privacy inquiries and requests in a timely manner and work with you to resolve any privacy-related concerns you may have. For privacy rights requests, please include sufficient information to verify your identity and clearly state the nature of your request.