Our approach to personal data
Frelumo is an educational self-care website designed for adults. We seek to minimise the personal information we collect. This draft notice applies to website visitors and account holders.
Information stored on our server
For accounts we collect email address, a salted password hash, account creation date and whether full access was purchased. We keep a payment reference for purchase verification. Daily plan selections and task completion dates are stored to manage the date-based plan. Payments are processed by the configured third-party provider, not directly on Frelumo's servers.
Private reflections and progress
Journal notes, mood check-ins and some standalone exercise notes remain in local browser storage and are not automatically synced between devices. The 30-day action-plan enrollment, completion dates and progress are stored on our server so your plan can continue when you sign in on another device. Anyone with access to the same browser or device could potentially see them. They do not sync between devices or survive deletion of browser data.
Optional public testimonials
If you choose to submit a review, we store your selected public first name, rating, review text, approval status and the account identifier needed to prevent repeat submissions. Reviews are checked before publication. By ticking the explicit consent checkbox, you allow the approved first name, rating and review text to appear publicly. You may ask support to remove your review.
Purpose and legal basis
We process account data to provide the service, manage purchases, maintain security and meet legal obligations. Depending on your location, applicable privacy laws may provide additional rights. A privacy specialist must validate the legal bases, any required special-category protections and applicable cross-border transfer measures before public launch.
Retention and deletion
You may delete your Frelumo account through Account Settings. Browser-based journals and check-ins must be erased on the device where they were created. Payment providers may retain financial records subject to their legal obligations. Server-level security and access logs may be retained by the hosting provider.
Cookies and technologies
Frelumo uses an essential secure-session cookie and a browser data store to provide the site. Frelumo currently loads optional web fonts from Google Fonts, which may receive connection information such as your IP address. We do not require advertising pixels or third-party behavioural profiling for basic use. Optional web analytics must be assessed and disclosed before installation.
Security
Production deployment requires HTTPS, protected configuration secrets, secure session cookies, backups, server access restrictions, verified payment flows and operational monitoring. No digital system offers absolute security.
Contact
For privacy requests, email support@example.com. Before launch, replace the placeholder address and provide the legal business name, postal contact details and a process for responding to regional privacy requests.