Privacy Policy

Last updated: September 28, 2026

This policy describes how Secondary handles personal information when you use the Secondary app and this website. Secondary is operated by Vincent Seguin. Vincent Seguin, operating Secondary, is the controller for the personal data described in this policy.

Information we hold

When you create an account, Secondary stores:

• your email address
• your display name
• the user identifier created by the authentication service

The app also keeps the authentication and session information needed to keep you signed in.

If you use the app, Secondary may store:

• nudges you mark as completed
• an optional reflection you write with a saved moment
• Community nudges you join
• Community reactions you choose

Reflections stay private to your account. Community participation and reactions are stored with your account. Other people see anonymous totals, not who joined or reacted.

Some choices stay on your device only. For example, saying “Not today” can be remembered locally on that device and is not sent to Secondary’s servers as a saved moment.

Sharing a moment creates an image on your device and opens your phone’s share sheet. Secondary does not currently keep those shared images in its own database. Secondary also does not currently store photos or other files you upload, because the app does not offer that.

Secondary does not sell personal information, show advertising, build advertising profiles, track your location, or read your contacts.

If you email us, we receive the address you write from, your message, and anything you choose to include.

This website does not use cookies, analytics, or forms. Visiting it does not create a Secondary account.

Why we use it

We use this information to:

• create and authenticate your account
• provide Today, Explore, Journal, and Community
• save completed nudges and reflections
• keep Community participation and reactions working
• protect the service and respond to support requests
• operate and improve the beta

Where the GDPR applies, we rely on the basis that fits the activity: performing the service you asked for, our legitimate interests in keeping the service secure and operating, and consent only where we actually ask for it. We do not describe ordinary account, Journal, or Community use as consent-based.

Who helps us

These providers process some information so Secondary can run. They do not each receive every category of information above.

• Supabase provides authentication, the application database, and the server-side account deletion used by the app. It processes application customer data for Secondary.
• Apple distributes the beta through TestFlight. Apple may also receive diagnostics or feedback if you choose to use those Apple features.
• Cloudflare provides the domain, DNS, and hosting for this website.
• Proton provides the email service we use for support and privacy messages.

International transfers

Some service providers used to operate Secondary may process personal data in countries outside the European Economic Area. Where applicable, Secondary relies on the safeguards required under applicable data-protection law for such transfers, which may include adequacy decisions or contractual safeguards.

How long we keep it

Account and app information is kept while your account exists, or for as long as it is needed to provide the service. You can delete your account in the app: Journal → Account → Delete account. That deletion removes the live application data tied to the account.

Infrastructure providers may keep limited logs or backups for periods set by their own operations and legal duties. We do not publish a fixed backup timetable here. Support emails may be kept for as long as needed to handle the request.

Your choices and rights

In the app you can edit your display name and delete your account.

Where data-protection law gives you these rights, you may ask for access, correction, deletion, restriction, objection, or a portable copy of your information. Where a particular use depends on consent, you can withdraw that consent. You can also complain to the data protection authority where you live or where you think a problem happened.

Privacy requests: privacy@getsecondary.app

Security

Secondary uses reasonable technical and organisational measures to protect personal information. No service can guarantee absolute security.

Children

Secondary is not designed specifically for children. If you believe a child has provided personal information to Secondary inappropriately, contact us at privacy@getsecondary.app.

Changes

We may update this policy. When we do, we will change the “Last updated” date at the top of this page.

Contact

Vincent Seguin, operating Secondary
privacy@getsecondary.app