Privacy Policy — Islands

What we collect

We collect the minimum personal information necessary to provide the App and improve the service. This includes:

• Account information: email address (via Supabase authentication), display name (if provided), and your user identifier.
• Study data: study sessions (course ID, start/end timestamps, descriptions), goals, island progress, XP/level data.
• Subscription metadata: subscription status and related metadata stored in our database (we store Stripe customer ID and Stripe subscription ID for reference). Payment card details are not collected or stored by us — see Third-party services below.
• Usage data & logs: non-identifying analytics and logs (e.g., feature usage, crash reports, timestamps) to maintain and improve the App.
• AI generation data: inputs sent to our image generation system (Retrodiffusion) and resulting pixel-art outputs used in the App.

How we use your data

We use personal information for the following purposes:

• To provide, maintain and operate the App and its features (accounts, progress tracking, unlocking islands, subscriptions).
• To process and manage subscriptions, billing metadata and free trials (billing handled by Stripe; we store non-sensitive identifiers).
• To communicate with you about your account, billing, updates, and support requests.
• To analyze and improve the App through aggregated analytics and usage data.
• To comply with legal obligations and protect our rights and users.

Third-party services & processors

We rely on a small set of third-party service providers to operate Islands. When we share data with these providers we require that they process your data only as necessary to provide their services and in accordance with their privacy/security obligations.

• Supabase — authentication and primary database storage (emails, user records, sessions, island and course data).
• Stripe — payment processing. We do not collect or store your full payment card details. Stripe handles card storage, charging and refunds according to Stripe's privacy and security practices.
• Retrodiffusion — AI pixel-art generation. Inputs used to generate images (for example prompts and/or configuration) are sent to the generator; generated images are stored and presented in the App.

We may use other service providers (e.g., hosting, logging) in the future and will update this policy accordingly.

Data retention

We retain personal information for as long as necessary to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account or request deletion, we will delete data in accordance with our deletion procedures and applicable law — note that some data may remain in backups for a limited period.

Security

We implement reasonable organisational, administrative and technical safeguards to protect your personal information (for example, access controls, encryption in transit, and secure hosting practices). However, no system is completely secure — we cannot guarantee absolute protection. If we become aware of a data breach affecting your personal information we will notify you and any regulator as required by applicable law.

Your rights

Depending on your jurisdiction and subject to applicable law, you may have rights including:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of your personal information.
• Portability: request a machine-readable copy of data you provided.
• Restriction/Objection: in some cases object to processing or request restriction.

To exercise these rights, contact us at contact@islands.study. We may require identity verification and will respond within a reasonable period required by law.

Children

Islands is not designed for children under 13. If you are under 18 you must have parental or guardian consent to use the App. If we learn we have collected personal information from a child under the applicable minimum age without verifiable parental consent, we will take steps to delete that information.

Cookies & analytics

We use minimal analytics to understand feature usage and improve Islands. These analytics are aggregated and do not identify individual users. We do not use invasive tracking technologies. You may opt out of non-essential analytics where the App provides such controls, or by contacting us.

AI-generated content

The App uses Retrodiffusion to produce pixel-art island visuals. Prompts or configuration you provide to generate images may be processed by the generator. Generated outputs are provided “as-is” for entertainment and motivational purposes. We do not guarantee uniqueness or absence of errors in AI outputs.

If AI-generated content raises any concerns (copyright, offensive outputs, etc.) please contact us at contact@islands.study so we can investigate and remove or modify content where appropriate.

Cross-border transfers

To operate the App we may transfer personal information to service providers located in other countries. When transfers occur we take reasonable steps to ensure your information remains protected, for example by using service providers with recognised security practices and contractual safeguards.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will post the new policy and update the “Last updated” date. Continued use of the App after updates constitutes acceptance of the revised policy.

Governing law

This Privacy Policy is governed by the laws of New South Wales, Australia. To the extent permitted by law, you agree to the exclusive jurisdiction of the courts in that jurisdiction.

Contact

For privacy inquiries, data access requests, deletion requests, or questions about this policy, contact:

contact@islands.study

If you have a complaint about our handling of your information you may also contact the Australian Information Commissioner or your local data protection authority.