Privacy Policy

1. Introduction

Welcome to 10 to Win ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using 10 to Win, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not use the Service.

2. Information We Collect

2.1 Information Stored Locally on Your Device

The following data is stored only on your device and is never transmitted to our servers:

• Tasks, to-do items, and their details (titles, descriptions, due dates, priorities)
• Habit tracking data and streak information
• App preferences and settings
• Categories and task modes you create

2.2 Information We Collect When You Create an Account

If you choose to create an account for premium features, we collect:

• Email Address: Used for account identification, password recovery, and important service communications
• Name: Used to personalize your experience (optional)
• Password: Stored securely using industry-standard encryption (we cannot see your password)

2.3 Information Collected Automatically

When you use our Service, we may automatically collect:

• Device Information: Device type, operating system version, unique device identifiers (for push notifications)
• Usage Data: App version, feature usage patterns, crash reports
• IP Address: For security purposes and approximate geographic location

2.4 Payment Information

If you purchase a subscription or add-on:

• Payment processing is handled by Stripe (web) or Apple/Google (in-app purchases)
• We do not store your full credit card numbers
• We receive confirmation of successful payments and subscription status

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send you notifications you've opted into (reminders, updates)
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: With third parties that help us operate our Service (payment processors, email services, hosting providers)
• Legal Requirements: If required by law or in response to valid legal requests
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

4.1 Third-Party Services We Use

• Stripe: Payment processing - Privacy Policy
• Apple App Store / Google Play: In-app purchases and subscriptions
• Expo: Push notifications - Privacy Policy
• Resend: Email communications - Privacy Policy

5. Data Security

We implement appropriate security measures to protect your information:

• All data transmitted between the app and our servers is encrypted using TLS/SSL
• Passwords are hashed using industry-standard algorithms
• Sensitive data stored locally can be encrypted with AES-256
• We regularly review and update our security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time.

• Account Data: Retained until you delete your account
• Payment Records: Retained for 7 years for tax and legal compliance
• Support Communications: Retained for 2 years

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Export: Request a portable copy of your data
• Opt-Out: Unsubscribe from marketing emails or disable push notifications

8. Children's Privacy

10 to Win is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our servers are located in the United States (Google Cloud Platform). By using our Service, you consent to the transfer of your information to the United States and other jurisdictions.

10. Push Notifications

If you enable push notifications:

• We collect a device token to send you notifications
• Notifications may include task reminders, streak alerts, and app updates
• You can disable notifications at any time in your device settings or app preferences
• Enterprise users may receive company-wide announcements from their organization

11. Todoist Integration

If you choose to connect your Todoist account:

• We access your Todoist tasks using OAuth authentication
• We only access data you explicitly grant permission for
• Your Todoist credentials are never stored on our servers
• You can disconnect Todoist at any time in Settings

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes (if you have an account)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed and to whom
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to request deletion of personal information
• Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data includes: performance of contract, legitimate interests, and your consent.