Privacy Policy

1. Introduction

Welcome to BioBuddy! We're committed to protecting your privacy and being transparent about how we collect and use your data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

BioBuddy is operated by Arya Wicaksono, based in the United Kingdom. By using BioBuddy, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account with BioBuddy, we collect:

• Email address (used for authentication and account management)
• Authentication credentials (securely stored via Supabase)
• Account creation date and last login information

2.2 Usage Data

To provide and improve our service, we collect information about how you use BioBuddy:

• Topics you generate concept maps for
• Number of concept maps created
• Interaction with features (regenerations, edits, saves)
• Subscription tier and usage limits
• Content you create and save within the platform

2.3 Technical Data

We automatically collect certain technical information when you use BioBuddy:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies

2.4 Payment Information

Payment information is processed securely by Lemon Squeezy, our payment processor. We do not store your full credit card details on our servers. We receive only transaction confirmation data and order information necessary to activate your subscription.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To create your account, generate AI-powered concept maps, and deliver the core functionality of BioBuddy
• Process Payments: To manage subscriptions, process payments, and handle billing inquiries
• Improve User Experience: To understand how you use BioBuddy and optimize features, fix bugs, and enhance performance
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues
• Send Updates: To send important service announcements, account notifications, and updates about new features (you can opt-out of promotional emails)
• Enforce Terms: To monitor for violations of our Terms of Service and prevent abuse of the platform
• Legal Compliance: To comply with legal obligations and protect our rights

4. Data Sharing and Third-Party Services

We work with trusted third-party service providers to deliver BioBuddy. Your data may be shared with:

4.1 Supabase (Data Storage & Authentication)

We use Supabase to securely store your account information, authentication data, and generated content. Supabase provides enterprise-grade security and encryption. Learn more at supabase.com/privacy.

4.2 Anthropic API (AI Processing)

When you generate a concept map, your topic query is sent to Anthropic's Claude API to create the AI-powered content. Anthropic does not use this data to train their models. Learn more at anthropic.com/privacy.

4.3 Lemon Squeezy (Payment Processing)

All payments are processed through Lemon Squeezy, a secure payment platform. They handle your payment information according to PCI-DSS standards. Learn more at lemonsqueezy.com/privacy.

4.4 Vercel (Hosting & Analytics)

BioBuddy is hosted on Vercel, which may collect basic analytics data to ensure service reliability and performance. Learn more at vercel.com/legal/privacy-policy.

We do not sell your personal data to third parties. We only share data with the service providers listed above who help us operate BioBuddy, and they are contractually obligated to protect your information.

5. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption: All data is encrypted in transit using HTTPS/TLS and at rest in our databases
• Secure Storage: Your data is stored on secure servers provided by Supabase with regular backups
• Access Control: Access to user data is restricted to authorized personnel only
• Authentication: We use secure authentication methods to protect your account
• Regular Updates: We keep our systems updated with the latest security patches

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal data:

6.1 Access Your Data

You can view and access most of your data through your BioBuddy dashboard. For a complete copy of your data, email us at faliqwicaksono21@gmail.com.

6.2 Delete Your Account

You can request account deletion at any time by emailing faliqwicaksono21@gmail.com. We will permanently delete your account and associated data within 30 days, except where we're required to retain certain information for legal compliance (such as transaction records).

6.3 Export Your Data

You can request a copy of your data in a portable format by emailing faliqwicaksono21@gmail.com. We'll provide your data within 30 days.

6.4 Correct Inaccurate Data

If any of your personal information is inaccurate or incomplete, you can update it through your account settings or contact us for assistance.

6.5 Opt-Out of Communications

You can unsubscribe from promotional emails using the link in any email we send. Note that you'll still receive essential service-related emails (like password resets and billing notifications).

6.6 Rights for EU/UK Users (GDPR)

If you're located in the European Union or United Kingdom, you have additional rights under GDPR:

• Right to object to data processing
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

6.7 Rights for California Users (CCPA)

If you're a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the sale of personal information (note: we do not sell personal data)
• Non-discrimination for exercising your privacy rights

7. Cookies and Tracking Technologies

BioBuddy uses cookies and similar tracking technologies to improve your experience:

7.1 Essential Cookies

These cookies are necessary for BioBuddy to function properly. They enable core features like:

• Authentication and keeping you logged in
• Security and fraud prevention
• Remembering your preferences (like dark mode)

7.2 Analytics Cookies

We may use analytics cookies to understand how users interact with BioBuddy. This helps us improve the service and fix bugs. These cookies collect anonymized data about page views, feature usage, and performance metrics.

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling essential cookies may prevent you from using certain features of BioBuddy.

8. Data Retention

We retain your personal data for as long as necessary to provide BioBuddy's services and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: We retain your data while your account is active
• Inactive Accounts: If you stop using BioBuddy but don't delete your account, we may retain your data for up to 2 years
• Deleted Accounts: After account deletion, we permanently remove your personal data within 30 days
• Legal Requirements: We may retain certain data longer if required by law (e.g., transaction records for tax purposes)
• Backups: Deleted data may persist in backup systems for up to 90 days

9. Children's Privacy

BioBuddy is designed for university students and is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at faliqwicaksono21@gmail.com. We will take steps to delete such information from our systems.

10. International Data Transfers

BioBuddy is operated from the United Kingdom. If you access our service from outside the UK, your data may be transferred to, stored, and processed in the UK and other countries where our service providers operate.

We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection through standard contractual clauses or other appropriate safeguards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

• We'll update the "Last updated" date at the top of this page
• For significant changes, we'll notify you via email or through a prominent notice on BioBuddy
• Your continued use of BioBuddy after changes take effect constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

We aim to respond to all privacy-related inquiries within 7 business days. For data access, deletion, or export requests, we'll respond within 30 days as required by law.