Privacy Policy

This Privacy Policy explains how Onward (“Onward”, “we”, “us”) collects, uses and protects your personal data when you use our website at goonward.app and the Onward application (together, the “Service”). We are the data controller for the personal data described below.

We are based in the United Kingdom and handle personal data in line with the UK GDPR and the Data Protection Act 2018.

Data we collect

We collect the following categories of personal data:

• Account data — your name, email address and password (stored only as a secure hash) when you create an account.
• Content you create — the tasks, habits, goals, targets and finance figures you enter into the Service. This is your data and is only ever used to provide the Service to you.
• Billing data — when you subscribe, payment is processed by Stripe. We do not store your card details; we retain only your subscription status and identifiers needed to manage billing.
• Technical data — basic information such as your IP address, browser type and session activity, used to keep the Service secure and working.

How we use your data

• To provide, maintain and secure the Service and your account.
• To process your subscription and handle billing.
• To send you essential service messages, such as email verification and password resets.
• To respond to your support requests.
• To comply with our legal obligations.

We do not sell your personal data, and we do not share the content you create with third parties for their own purposes.

Legal bases

We process your data to perform our contract with you (providing the Service), to comply with legal obligations, and where necessary for our legitimate interests in running and securing the Service.

Service providers

We rely on a small number of trusted providers who process data on our behalf:

• Neon — hosts the database that stores your account and content data.
• Vercel — hosts and serves the application.
• Stripe — processes subscription payments.

These providers are bound by contract to protect your data and may only process it on our instructions.

Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your content data, retaining only what we are legally required to keep (for example, billing records).

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at support@goonward.app. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is perfectly secure, but we work to keep your data safe.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to let you know.

Contact

If you have any questions about this policy or your data, email us at support@goonward.app.