Information we collect
Prosperity is local-first. Most data stays on your device unless you enable cloud sync. We collect three categories:
- You provide. Email, display name, habits, agenda entries, nutrition logs, training sessions, focus sessions, photos you upload.
- Collected automatically. Device basics (OS, app version), error logs, authentication tokens. We do not collect advertising identifiers.
- From third parties. If you sign in with Google, we receive name, email, and (with consent) calendar events.
How we use your information
- To operate the app and the system health engine.
- To synchronise your data across devices when cloud sync is enabled.
- To power the AI assistant when you use it.
- To process subscriptions and entitlements through Paddle and RevenueCat.
- To deliver service notifications and respond to support requests.
- To diagnose crashes and improve reliability via Sentry.
We do not sell your data, use it for advertising, or profile you for marketing.
Legal basis for processing
- Art. 6(1)(b) — performance of a contract. For delivering features you signed up for.
- Art. 6(1)(a) — consent. For optional features such as the AI assistant, Google Calendar sync, and push notifications.
- Art. 6(1)(f) — legitimate interests. For security, fraud prevention, and crash diagnostics.
- Art. 6(1)(c) — legal obligation. For consumer, tax, and accounting law compliance.
For special-category data (health-related fields you log), we additionally rely on Article 9(2)(a) — your explicit consent.
Data retention
Local data persists on your device until you uninstall. Cloud data persists in Supabase until you delete your account or specific records. Deleted records are removed from active systems within 30 days and from backups within 90 days. Crash logs are retained for 12 months. Billing records are retained for the period required by Spanish tax law.
Sharing and disclosure
We share data only with processors bound by data-processing agreements:
- Supabase — database, authentication, storage (cloud sync only).
- Paddle — payment processing and merchant of record for web purchases. Paddle receives the data needed to charge you (name, email, billing address, payment method).
- RevenueCat — subscription state and entitlement management across platforms.
- Apple and Google — billing on their respective stores; OAuth provider when you sign in with Google.
- Groq — AI inference provider, only when you use the assistant. Prompts are routed via our edge function and not used to train third-party models.
- Sentry — crash and error diagnostics.
We may also disclose data when required by law, court order, or to protect our legal rights.
Your rights under GDPR
- Access (Art. 15) — request a copy of your data.
- Rectification (Art. 16) — correct inaccurate data.
- Erasure (Art. 17) — delete your account and cloud data.
- Restriction (Art. 18) — limit processing.
- Portability (Art. 20) — export your data.
- Objection (Art. 21) — object to legitimate-interests processing.
- Withdraw consent — at any time, without affecting prior processing.
Exercise any right by emailing team@prosperityapp.es. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Transfers outside the EU
Some processors are based outside the EEA, including in the United States. Where data is transferred outside the EEA we rely on Commission adequacy decisions, Standard Contractual Clauses (SCCs), and supplementary measures such as encryption in transit and at rest.
Children
Prosperity is not directed at children. The minimum age is 16 under the Spanish implementation of GDPR (Article 8 of the LOPDGDD). We do not knowingly collect data from children below the applicable age. If we learn that we have, we will delete it without delay.
Cookies
The website uses essential cookies only (authentication, session). We do not use third-party advertising or analytics trackers. Paddle’s checkout overlay may set its own cookies during a purchase; see Paddle’s cookie policy.
Changes
We update the “Last updated” date when this policy changes materially. Where required, we will request fresh consent.
Contact and data controller
Data controller: Prosperity, Madrid, Spain.
Privacy email: team@prosperityapp.es
Postal address: available on request.