uPebbl ("we", "us", "our") is a calming emotional wellbeing app. We take your privacy seriously and only collect what we need to give you a gentle, supportive experience. This policy explains what we collect, why, and the choices you have. It is written for users in the UK and EU and is designed to comply with the UK GDPR, the Data Protection Act 2018, and the EU GDPR.
1. Who we are
uPebbl is a product of NSD Not So Different ("we", "us", "our"), operated from the United Kingdom. NSD Not So Different is the data controller for personal data processed through the app. For any data protection question, contact us at hello@upebbl.com.
2. Data we collect
- Account data: your first name (or chosen name), email address, password (hashed).
- Wellbeing preferences: bedtime signal time, ambient sound, reminder choices.
- Subscription data: plan, trial state, renewal date. Card details are handled by our payment processor (Stripe) — we never see or store them.
- Device & usage data: approximate region, browser type, crash logs, anonymous analytics to understand which calming features people use.
3. Why we use your data (lawful bases)
- Contract: to give you the app, your account, and any premium features you've paid for.
- Legitimate interests: to keep the app safe, prevent abuse, and gently improve it.
- Consent: for optional things like marketing emails or non-essential cookies — you can withdraw consent at any time.
- Legal obligation: to keep records HMRC and consumer law require us to keep.
4. Sharing
We never sell your data. We share only with carefully chosen processors and recipients who help us run the service:
- Cloud hosting (Supabase, Cloudflare)
- Paddle.com Market Limited — our Merchant of Record for all sales. Paddle processes payments, manages subscriptions, handles invoicing, tax compliance, and refunds. Paddle receives your name, email, billing address, and payment details directly — we never see or store your card details.
- Email delivery (Resend)
- Privacy-respecting analytics
- Professional advisers (legal, accounting) and authorities where required by law
5. International transfers
Some processors are based outside the UK/EEA. We rely on UK and EU Standard Contractual Clauses and the UK International Data Transfer Addendum to keep your data protected to the same standard.
6. How long we keep your data
Account data is kept until you delete your account. Anonymised usage data may be kept longer for product improvement. Billing records are kept for 7 years to meet UK tax law.
7. Your rights
You have the right to:
- Access a copy of your data
- Correct anything that's wrong
- Delete your account and your data
- Object to or restrict certain processing
- Withdraw consent at any time
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk
You can export or delete your data from Settings → Your data, or email hello@upebbl.com.
8. Children
uPebbl is intended for adults aged 16+. We do not knowingly collect data from anyone under 16.
9. Wellbeing notice
uPebbl is a wellbeing companion, not a medical service. It does not provide therapy, diagnosis, or crisis support. If you are in distress, please contact the Samaritans on 116 123 (UK), or your local emergency services.
10. Changes
We'll let you know in-app if we make material changes to this policy. The "last updated" date at the top shows when this version came into effect.