Privacy Policy

Last Updated: January 10, 2026

TL;DR - The Short Version

🔒 Local-first: Your mood data stays on your device
📧 Minimal collection: Just email and subscription status
🚫 No tracking: We use privacy-respecting analytics
✨ Your control: Export or delete anytime

Introduction

Welcome to Strua ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle your information.

Strua is a self-help mental health toolkit that provides evidence-based techniques for building emotional resilience. We are NOT a medical service, therapy provider, or HIPAA-covered entity. We do not collect, store, or transmit Protected Health Information (PHI).

Contact Information:
Email: Dr.G@strua.app
Location: Florida, United States
Website: strua.app

Our Privacy Philosophy

We believe in data minimization and user control. We collect only what's necessary to provide our service, and we give you control over your data.

Key Principles:

We collect minimal personal information
Your progress tracking and tool usage data stays on YOUR device (we never see it)
We never sell your data
We use privacy-focused analytics (no invasive tracking)
You can delete your account and data anytime

What Information We Collect

1. Information You Provide Directly

Email Address (Required):

Used for account creation and login
Used to send service updates and important notices
Used for password reset functionality
Collected via Mailchimp during early access signup

Password (Required for app access):

Stored in encrypted (hashed) form
We cannot see your actual password
Used only for account authentication

Payment Information (for Pro/Lifetime subscriptions):

Processed securely by Stripe (our payment processor)
We do NOT store credit card numbers or payment details
Stripe provides us only with: payment status, subscription tier, and transaction date
See Stripe's Privacy Policy: https://stripe.com/privacy

Optional Information:

First name (for email personalization)
Any information you choose to include when contacting support

2. Information Collected Automatically

Website Analytics:

We use Plausible Analytics, a privacy-focused analytics service
Plausible does NOT use cookies
Plausible does NOT track you across websites
We collect only: page views, referral sources, and general location (country/state level)
Plausible is GDPR, CCPA, and PECR compliant
See Plausible's Privacy Policy: https://plausible.io/privacy

Essential Cookies:

Login session cookies (to keep you logged in)
Security cookies (to prevent fraud and protect your account)
These are necessary for the service to function

Device and Browser Information:

Device type (mobile, tablet, desktop)
Operating system
Browser type
This helps us optimize the app for different devices

3. Information We Do NOT Collect

We do NOT collect or store:

❌ Your tool usage data (which tools you use, when, or how often)
❌ Your mood tracking or "how are you feeling" entries
❌ Your progress data or statistics
❌ Content of your custom tools
❌ Your favorite tools
❌ Any health information
❌ Precise location data
❌ Browsing history outside our website/app
❌ Contacts, photos, or other device data

All of this information is stored ONLY on your device and never transmitted to our servers.

How We Use Your Information

We use your information only for the following purposes:

Account Management:

Create and maintain your account
Authenticate your login
Process password resets
Send account-related notifications

Service Delivery:

Provide access to tools and meditations based on your subscription tier
Process payments through Stripe
Provide customer support

Communication:

Send important service updates
Respond to your support requests
Send occasional product updates (you can unsubscribe anytime)

We do NOT use your information for:

❌ Targeted advertising
❌ Selling to third parties
❌ Profiling or automated decision-making
❌ Tracking your behavior across other websites

How Your Data Is Stored

Server-Side Storage (Our Database)

We store only:

Email address
Encrypted password
Account creation date
Subscription tier (Free/Pro/Lifetime)
Payment status (via Stripe)

Security Measures:

Data stored on secure servers
Encryption in transit (HTTPS/TLS)
Encryption at rest for sensitive data
Regular security audits
Limited employee access (need-to-know basis)

Device-Side Storage (Your Phone/Computer)

Stored locally on YOUR device only:

Tool usage history
Mood tracking entries
Custom tools you create
Favorite tools
Progress statistics
All "how are you feeling" data

Important Notes:

We never see this data
We never transmit it to our servers
If you delete the app or lose your device, this data is lost
Pro users can export this data as backup (CSV/PDF)

⚠️ Important: Local Data Not Backed Up

Your progress data is NOT backed up to our servers. If you lose your device, clear app data, or uninstall the app, this data cannot be recovered by us. We recommend using the export feature regularly to back up your progress.

Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information to third parties.

We share your information only with:

Service Providers (Data Processors)

Stripe (Payment Processing):

Processes subscription payments
Receives: Email address, payment information
Purpose: Process payments securely
Privacy Policy: https://stripe.com/privacy

Plausible Analytics:

Privacy-focused website analytics
Receives: Anonymous usage data (no personal information)
Purpose: Understand website traffic
Privacy Policy: https://plausible.io/privacy

Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal process (subpoena, court order)
Protection of our legal rights
Prevention of fraud or security threats
Protection of user safety

Your Data Rights

You have the following rights regarding your personal information:

Access:

You can request a copy of your personal data. Contact us at Dr.G@strua.app

Deletion:

You can delete your account anytime in app settings
We will delete your email, password, and account data within 30 days
Note: Device-stored data (progress, custom tools) is deleted immediately when you uninstall the app

Export (Pro Users):

Export your device-stored data (progress, custom tools) as CSV or PDF
This data is yours—take it with you anytime

Opt-Out of Marketing Emails:

Click "unsubscribe" in any marketing email
You'll still receive important account-related emails

Security

We take reasonable measures to protect your information:

Technical Safeguards:

HTTPS/TLS encryption for data in transit
Encrypted password storage (bcrypt hashing)
Secure server infrastructure
Regular security updates

What You Can Do:

Use a strong, unique password
Don't share your password with anyone
Log out when using shared devices
Enable two-factor authentication (when available)

Children's Privacy

Strua is not intended for children under 13 years of age.

We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at Dr.G@strua.app and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes in our practices
Changes in legal requirements
New features or services

How We Notify You:

Post updated policy on our website with new "Last Updated" date
Send email notification for material changes
Require acceptance of new terms on next login (for significant changes)

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: Dr.G@strua.app

Response Time: We aim to respond within 5 business days.

Disclaimers

Not Medical Advice:

Strua is a self-help tool, not a medical service. We do not provide therapy, diagnosis, or medical advice. If you are in crisis, please contact:

988 Suicide & Crisis Lifeline (call or text)
Crisis Text Line: Text HOME to 741741
911 for emergencies

No Therapist-Patient Relationship:

Use of Strua does not constitute psychological treatment or establish a privileged therapist-patient relationship.

Not HIPAA Covered:

We are not a HIPAA-covered entity. We do not collect or store Protected Health Information (PHI). Your usage data stays on your device.