Privacy Policy

Effective Date: 29/03/2026

Welcome to Bonsai Nikki. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

BonsaiNikki
Email: contact@bonsainikki.io

2. Information We Collect

• Account Information: Email, username, authentication data
• Content Data: Journal entries and user-generated content
• Usage Data: App interactions and feature usage
• Device Information: Browser, OS, and device type

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract: To provide and maintain the service
• Consent: For optional features such as AI insights or analytics
• Legitimate Interests: To improve performance, security, and user experience
• Legal Obligation: Where required by law

4. How We Use Your Data

• Provide and maintain Bonsai Nikki
• Authenticate users and secure accounts
• Generate insights or AI-driven features
• Improve functionality and performance
• Communicate updates and important notices

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers (e.g., hosting, authentication)
• Legal authorities if required

6. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

7. Data Retention

We retain personal data only as long as necessary to provide our services or comply with legal obligations.

8. Your GDPR Rights

Under GDPR, you have the following rights:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

9. Data Security

We implement appropriate technical and organizational measures to protect your data.

10. Children's Privacy

This service is not intended for children under 13, and we do not knowingly collect data from them.

11. Third-Party Services

We may use third-party providers (e.g., Supabase, analytics services) to process data on our behalf under strict data protection agreements.

12. Complaints

You have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission (DPC).

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page.

14. Contact Us

If you have any questions or wish to exercise your rights, contact us:

Email: contact@bonsainikki.io