Privacy Policy
This policy explains what personal data Rayledge collects, why, who helps us process it, how long we keep it and the rights you have. It covers the Rayledge app at app.rayledge.com and this website.
Who is responsible
Rayledge is operated by Diki Bagastama, an individual based in Indonesia ("we", "us"). We are the data controller for the personal data described here. Contact us about privacy at hello@rayledge.com.
What we collect
- Account details: your email address. If you sign in with Google, Google also shares your name and profile picture, which our sign-in provider stores with your account.
- What you put into Rayledge: your timezone and daily cutoff time, your habits and their schedules, the amount each commitment is worth, which commitments you checked off and when, and your savings and discount history.
- Billing information: payments are handled by Polar (see below). We receive your subscription status, the amounts charged and the discounts applied. We never see or store your card details.
- Notifications: if you allow push notifications, your browser gives us a push address and encryption keys for that device. We email reminders to you if push is unavailable.
- How you found us: if you arrive through a link with campaign tags (such as utm_source), we store those tags with your account.
- Usage events: simple records of steps in the app, such as starting the free week, finishing it, subscribing or turning on reminders, with amounts saved but no personal details, so we can see whether Rayledge works for people.
- Technical logs: our hosting provider keeps short-lived request logs (such as IP address, browser type and time) for security and to fix errors.
Why we use it and our legal basis
- To provide Rayledge (performance of our contract with you): running your account, tracking commitments, calculating savings and discounts, billing through Polar, and sending sign-in codes, reminders and account emails such as your pre-renewal summary.
- Push notifications (your consent, given through your browser's permission prompt). You can withdraw it anytime in your browser or device settings.
- Understanding and improving Rayledge (our legitimate interest): usage events and campaign tags, measured in aggregate. You can object by emailing us.
- Keeping the service secure (our legitimate interest): technical logs and preventing abuse.
- Legal obligations: keeping records the law requires, for example for tax.
Your email address and the information you enter are needed to provide the service. Without them we can't run your account.
Google sign-in
When you sign in with Google we receive your name, email address and profile picture through Google's standard sign-in permissions (openid, email and profile). We use them only to create and secure your account and to contact you about it. We don't use Google user data for advertising, we don't sell it, and we share it only with the service providers listed below that run Rayledge. Our use of information received from Google APIs follows the Google API Services User Data Policy.
Waitlist
If you join the waitlist on this website, we keep your email address, the campaign tags of the link you arrived through (such as utm_source) and the page you signed up on. We use them to email you when Rayledge opens and with a few launch updates, to invite some people to try Rayledge early and ask for their feedback, and to see which links bring people to Rayledge. Our legal basis is your consent, given when you join.
The list is stored with Resend, our email provider. Every email has an unsubscribe link, and you can also ask us to delete your address by emailing hello@rayledge.com. We keep it until you unsubscribe or ask us to delete it. Joining the waitlist doesn't create an account.
Who we share it with
We don't sell personal data and we don't show ads. These providers process data so Rayledge can run:
- Supabase: database and sign-in, hosted in the EU (Frankfurt, Germany).
- Cloudflare: hosting and network delivery of the app and this website.
- Polar Software, Inc.: our online reseller and merchant of record. Polar processes your payment and billing details under its own privacy policy.
- Resend: delivery of sign-in codes, reminders and account emails, and storing the waitlist and sending its emails.
- Hostinger: stores emails you send to hello@rayledge.com.
- Google: Sign in with Google, if you choose it.
- Browser push services (from Google, Mozilla or Apple, depending on your browser): deliver encrypted notifications to your device.
We may also disclose data if the law requires it.
International transfers
Your account data is stored in the EU. Some providers above process data in other countries, including the United States, and we operate Rayledge from Indonesia. Where data leaves the EU, we rely on our providers' data processing terms, including the European Commission's Standard Contractual Clauses where required.
How long we keep it
- Account data and everything you entered: until you delete your account. We then erase it within 30 days.
- Usage events (for example, that a free week started or a month was saved): when you delete your account, we keep these without anything that links them to you, so our overall numbers stay right.
- Billing records: kept by Polar as tax and accounting law requires.
- Waitlist: until you unsubscribe or ask us to delete your address.
- Emails you send to hello@rayledge.com: kept as long as needed to answer and follow up.
- Push addresses: removed when they stop working, when you turn notifications off, or when you delete your account.
- Technical logs: kept by our hosting provider for a short period, typically days.
Your rights
Depending on where you live, including under the EU and UK GDPR and Indonesia's Personal Data Protection Law, you can ask to access your data, get a copy in a portable format, correct it, delete it, restrict or object to how we use it, and withdraw consent where we rely on it. You can delete your account yourself in the app (Account, then Delete my account). For anything else, email hello@rayledge.com. We reply within the time the law sets, and within 3 days for access and correction requests.
You can also complain to the data protection authority where you live. We'd appreciate the chance to sort it out with you first.
Cookies and local storage
We don't use advertising or tracking cookies. The app keeps your sign-in session in your browser's local storage so you stay signed in. If you arrive at the app through a link with campaign tags (such as utm_source), the app keeps those tags in your browser's session storage so they can be saved with your account when you sign up. Your browser clears session storage when you close the tab. This website doesn't set cookies or store anything on your device.
Age
Rayledge is for people aged 18 and over. We don't knowingly collect data from anyone younger.
Security
Data is encrypted in transit, access is limited to what running Rayledge needs, and payment details stay with Polar. If a breach affects your data, we'll tell you and the relevant authorities within the time the law requires.
Changes to this policy
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect. The date at the top shows the latest version.