This Privacy Policy describes how Pact ("we," "us," "our") collects, uses, and shares information when you use our mobile application and related services (collectively, "the Service").
In Phase 1 (current version), no real payment card data is processed by Pact. Payment processing will be handled by Stripe in a future version. When Stripe is integrated, card data is collected and stored solely by Stripe — Pact never stores raw card numbers or CVVs. Refer to Stripe's Privacy Policy for details on how Stripe handles payment data.
Vault balance transactions (credits and debits) are recorded in our ledger.
We use the information we collect to:
We share data with third-party providers who operate under confidentiality obligations:
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Pact, our users, or the public.
If Pact is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. transaction records).
Listing and pact data may be retained in anonymised form for analytics and dispute resolution purposes.
We use industry-standard security measures including encrypted connections (TLS), row-level security on our database, and access controls on all stored data. However, no system is completely secure. We cannot guarantee the absolute security of your information and are not liable for unauthorised access resulting from circumstances beyond our control.
Push notification tokens are cleared from our database when you log out to prevent notifications being delivered to unintended devices.
In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.
Photos you upload — including profile photos and proof-of-completion images — may incidentally contain faces or other identifying features. Pact does not use any photos for facial recognition, biometric identification, or any form of biometric data processing. Photos are stored solely for the purpose of displaying your profile and facilitating the pact workflow (proof of completion, dispute evidence).
We do not collect, derive, or store biometric identifiers or biometric information as defined under any applicable biometric privacy law, including the Illinois Biometric Information Privacy Act (BIPA) or similar statutes.
Pact is not intended for users under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
Regardless of where you are located, you may at any time:
Contact us at support@sunexplode.com to exercise any of these rights.
If you are a California resident, you additionally have the right to:
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including:
Our lawful basis for processing your data is:
We are based in New Mexico, United States. By using the Service, you consent to your data being transferred to and processed in the United States, which may not provide the same level of data protection as your home country.
We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or in-app notice. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.
Privacy questions or requests: support@sunexplode.com
← Back to sunexplode.com