Privacy Policy

1. Who we are

WERC ("we", "us", or "our") is a binaural audio and Pomodoro focus platform. We are committed to protecting your personal information and your right to privacy. If you have any questions about this policy, please contact us at privacy@werc.app.

2. Information we collect

We collect information you provide directly and information generated by your use of the service:

• Account data: your email address and hashed password when you create an account.
• Profile data: display name and optional profile photo you choose to provide.
• Focus session data: session duration, label, notes, soundscape used, completion status, and timestamps. Logged whenever you run a focus timer.
• Usage data: pages visited, features used, and interactions within the app, used to improve the product.
• Payment data: if you subscribe to WERC Pro, payment is processed by our payment provider (Stripe). We do not store your full card number or billing details. Only a subscription status flag and customer identifier.

3. How we use your information

• To provide and operate the WERC service, including saving your focus history and preferences.
• To personalise your experience (e.g. remembering your theme, soundscape settings).
• To send transactional emails such as password reset links. We do not send marketing email without your explicit opt-in.
• To enforce our Terms of Service and prevent abuse.
• To analyse aggregate usage patterns and improve the product. Analytics data is not tied to individually identifiable users where avoidable.

4. Sharing your information

We do not sell your personal data. We share information only in these limited circumstances:

• Infrastructure providers: WERC runs on Replit infrastructure. Your data is stored on servers operated by Replit, Inc. Replit's own privacy policy governs their handling of that infrastructure.
• Email delivery: We use Resend to send transactional email. They process your email address solely to deliver messages we request.
• Payment processing: Stripe processes Pro subscription payments. Stripe's privacy policy governs the payment data they collect.
• Legal requirements: We may disclose data when required by law or to protect the rights and safety of our users.

5. Data storage and security

Your data is stored in a PostgreSQL database hosted on Replit infrastructure. Passwords are stored as bcrypt hashes — your plaintext password is never stored. Password reset tokens are stored as SHA-256 hashes and expire after one hour. We use industry-standard TLS for all data in transit. While we take reasonable precautions, no system is perfectly secure, and we cannot guarantee absolute security.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to update inaccurate or incomplete data.
• Deletion: request deletion of your account and associated personal data. We will fulfil deletion requests within 30 days, subject to any legal obligations to retain data.
• Portability: request your focus session history in a machine-readable format.
• Opt-out (CCPA): California residents may request that we not sell their personal information. We do not sell personal information.

To exercise any of these rights, email privacy@werc.app.

7. Cookies and local storage

WERC uses browser local storage (not cookies) to keep you signed in and to remember your preferences such as theme and soundscape settings. No third-party tracking cookies are set. We do not use advertising trackers.

8. Children's privacy

WERC is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at privacy@werc.app and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) and update the effective date above. Continued use of WERC after any changes constitutes your acceptance of the new policy.

10. Contact

Privacy questions or requests: privacy@werc.app