Privacy Policy
1. Who we are
SayNO is a digital-commitment application operated by its founder ("we", "us", or "SayNO"). Our website is at saynoapp.imbtm.workers.dev. For privacy inquiries, contact privacy@saynoapp.imbtm.workers.dev.
2. What data we collect
We collect the minimum data required to operate the waitlist and the eventual product:
- Name — provided voluntarily when joining the waitlist. Used to address you in communications.
- Email address — optional at waitlist signup. Used exclusively to notify you when your waitlist access opens and for transactional product updates you have opted into. Never used for marketing to third parties.
- Account credentials — if you register an account (via email/password or Google Sign-In), Firebase Authentication handles this securely. We store a user ID and display name in Firestore. Passwords are never stored by SayNO — Firebase handles hashing.
- Usage data — at present (pre-launch), the web app does not collect analytics or usage telemetry beyond what Cloudflare logs automatically (IP address, timestamp, request path) for operational purposes.
3. How we use data
- To send you your waitlist notification email when early access opens.
- To deduplicate waitlist entries (by email, if provided).
- To secure your account (if you register).
- To debug and improve the service (server logs, not linked to individual accounts).
We do not use your data for advertising, profiling, or sale to third parties.
4. Data storage and retention
Waitlist data is stored in Google Cloud Firestore (Firebase), hosted in the United States. Server access logs are retained by Cloudflare for up to 30 days. Account data is retained for as long as your account is active, plus up to 30 days after deletion request processing.
Waitlist entries without an account are retained until the waitlist programme ends, after which they are deleted within 90 days.
5. Third-party services
- Firebase / Google Cloud — authentication and Firestore database. Firebase Privacy.
- Cloudflare Workers — edge hosting and CDN. Cloudflare Privacy.
- Google Fonts — typography. Fonts are loaded from Google's CDN, which may log your IP. Google Privacy.
6. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing.
To exercise any of these rights, email privacy@saynoapp.imbtm.workers.dev. We will respond within 30 days.
7. Cookies
The SayNO website does not use tracking cookies or analytics cookies. Firebase Authentication may set a session cookie if you are logged in. No third-party advertising cookies are used.
8. Children's privacy
SayNO is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted their data, contact us at privacy@saynoapp.imbtm.workers.dev for immediate deletion.
9. Changes to this policy
We may update this privacy policy as the product evolves. Material changes will be noted on this page with an updated "last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact
Privacy questions: privacy@saynoapp.imbtm.workers.dev
General contact: /contact