PRIVACY POLICY

Last updated: April 30, 2026

Undonly ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit undonly.com, purchase and use the 3-Minute Mind Reset program, or participate in our Circle community (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

  1. INFORMATION WE COLLECT

a) Information You Provide Directly
• Name and email address
• Billing and payment information processed by Shopify, Stripe, or PayPal (we do not store full card details)
• Circle community profile data (display name, avatar, bio)
• Messages sent to support@undonly.com
• Testimonials, comments, or content you voluntarily share

b) Information Collected Automatically
• Device and browser information
• IP address and approximate location
• Pages visited, time spent, and interactions
• Email engagement data such as opens and clicks
• Cookies and similar technologies
• Analytics and advertising pixel data, if used

c) Information from Third Parties
We may receive limited information from Shopify, Stripe, PayPal, Circle, and social media platforms when you interact with the Service.

We do not purchase personal data from third-party data brokers.

d) Gift Purchases
If you purchase a gift, you may provide another person's name and email. By doing so, you confirm you have permission.

We use this information only to send the invitation and deliver the Service if accepted. If not accepted, the data is deleted within 30 days.

  1. HOW WE USE YOUR INFORMATION

We use your information to:
• Process purchases and deliver the program
• Send daily emails and program content
• Provide access to the community
• Respond to support requests
• Improve and develop the Service
• Send optional updates and offers (you may opt out)
• Prevent fraud, abuse, and chargebacks
• Measure marketing effectiveness
• Comply with legal obligations

We do not sell your personal data or use it to build advertising profiles.

  1. LEGAL BASES FOR PROCESSING

For users in the EEA, UK, and Switzerland, we rely on:
• Contract performance to deliver the Service
• Consent for marketing and non-essential cookies
• Legitimate interest for improving the Service and preventing fraud
• Legal obligations where required

You may withdraw consent at any time.

  1. HOW WE SHARE YOUR INFORMATION

We share data only when necessary:
• Service providers such as Shopify, Stripe, PayPal, Circle, and email platforms
• Analytics and advertising tools, if used
• Legal authorities when required
• In case of business transfer
• With your explicit consent

We do not sell or trade your data.

  1. DATA RETENTION

We retain data only as long as necessary:
• Purchase data for legal and accounting requirements
• Email engagement data up to 24 months
• Community content while the community exists
• Support messages up to 24 months
• Gift recipient data deleted within 14 days if unused

Data is deleted or anonymized when no longer needed.

  1. COOKIES AND TRACKING

We use:
• Essential cookies for site functionality
• Analytics cookies to improve performance
• Marketing cookies if campaigns are active

For EEA and UK users, non-essential cookies require consent via a cookie banner.

You can manage cookies through your browser settings.

We do not respond to Do Not Track signals due to lack of standardization.

  1. YOUR RIGHTS

Depending on your location, you may request:
• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent
• Opt-out of marketing

To exercise rights, contact support@undonly.com. Identity verification may be required.

California residents have rights under CCPA/CPRA. We do not sell or share personal data as defined by those laws.

EEA/UK users may lodge complaints with data protection authorities.

Australian and New Zealand users may contact relevant privacy regulators if needed.

  1. DATA SECURITY

We implement reasonable safeguards including encryption, access controls, and monitoring.

No system is completely secure. If a breach occurs, we will notify you and relevant authorities where required by law.

  1. INTERNATIONAL TRANSFERS

Your data may be processed in the United States or other countries.

Where required, we use safeguards such as Standard Contractual Clauses or other lawful mechanisms.

  1. CHILDREN'S PRIVACY

The Service is not intended for individuals under 18.

If we discover data from a minor, it will be deleted promptly.

  1. CHANGES

We may update this Privacy Policy.

If changes are significant, we will notify you. Continued use means acceptance.

  1. CONTACT

Email: support@undonly.com

For EEA/UK users, you may contact your local authority if needed.