Privacy Policy

1. Information We Collect

Information you give us:

• Account data: name, email address, password (stored hashed by our auth provider), phone or WhatsApp number if you add one.
• Business and site content: pages, products, photos, posts, orders, bookings, leads and other records you create.
• Billing data: plan, invoices and payment references. Card details are handled by the payment provider, not stored by us.
• Support data: messages, screenshots, screen recordings and voice notes you send to support.

Information collected automatically:

• Usage and diagnostics: features used, pages visited, error and crash reports (to find and fix bugs).
• Device data for the app: device model, Android version, app version and a push notification token.
• Essential cookies for sign-in on the web.

2. The Passive Coder Admin App

The app is a way to manage your sites from your phone. It uses these permissions only when you use the related feature:

• Camera: take product or media photos and scan barcodes. Photos are uploaded only when you choose to save them.
• Photos and media: pick existing images to upload to your site or attach to a support message.
• Notifications: alerts about new orders, bookings, leads, support replies and billing. You can turn each type off in the app settings.
• Biometrics / screen lock: optional app lock and confirming sensitive actions. Fingerprint or face data never leaves your phone; the app only receives a yes/no from Android.

The app does not collect your location, contacts, call logs or SMS, and it shows no ads.

3. How We Use Your Information

To run and improve the platform, host your sites, process payments, send service and security notifications, provide support, and prevent abuse. We do not sell your personal data and do not use it for advertising.

4. Sharing

We share data only with service providers that help us run the service, under their own security terms:

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• Expo and Google Firebase Cloud Messaging (push notifications for the app)
• Sentry (crash and error reports, when enabled)
• Resend (transactional email), and the payment provider you pay with

We may disclose data if the law requires it.

5. Data Storage & Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our providers. Access is limited to authorised staff, and administrative actions are recorded in an audit log.

6. Retention

We keep account data while your account is active. Support screen recordings and voice notes are deleted after 7 days. Backups roll over within 30 days. Invoices and payment records are kept as long as tax and accounting law requires, without your name or email once your account is deleted.

7. Deleting Your Account and Data

You can delete your account yourself in the Passive Coder Admin app (Account > Delete my account) or on the web dashboard (Profile > Delete account). Full steps, what is deleted and what is kept: passivecoder.com/delete-account. Deletion happens 14 days after the request; signing in again before then cancels it.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. Children

Passive Coder is a business tool for adults. It is not directed at children under 18 and we do not knowingly collect their data.

10. Your Rights

You can access, correct, export or delete your personal data at any time. Most of it is editable in the dashboard; for anything else contact us or email contact@passivecoder.com.

11. Changes

We will post changes here and update the date above. Significant changes are announced by email or in the dashboard.

12. Contact

Questions about this policy? Email contact@passivecoder.com or use our contact page.