Privacy Policy

1. Who We Are

Ametra Labs (“we”, “us”, or “our”) is the data controller for the personal data collected through Èwáfy. This Privacy Notice explains how we collect, use, and protect your personal data.

2. Data We Collect

We collect the following categories of personal data:

• Identity & contact data: name, email address.
• Account data: login credentials, profile information, subscription status.
• Usage data: sprint data, goals, tactics, analytics, and feature interactions.
• Technical data: IP address, browser type, device identifiers, and cookies.
• Support data: messages and communications with our support team.

3. Purposes & Legal Basis

We process your personal data for the following purposes and legal bases:

• Providing the service: account creation, authentication, and sprint functionality (contract performance).
• Security & fraud prevention: detecting and preventing unauthorized access (legitimate interests and legal obligation).
• Product improvement: analyzing usage to improve features (legitimate interests).
• Customer support: responding to your inquiries (contract performance).
• Marketing: sending product updates (consent, where required).

4. Data Sharing

We share your personal data with the following categories of recipients:

• Service providers: hosting, analytics, and customer support tooling.
• Merchant of Record: Paddle processes payments, subscriptions, tax compliance, and invoicing on our behalf. Paddle acts as an independent controller for payment data.
• Professional advisers: legal and accounting professionals, when necessary.
• Authorities: where required by law or to protect our rights.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. When data is no longer required, we delete or anonymize it within a reasonable period. Backup copies may persist for a limited time in accordance with our data retention schedules.

6. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — request limitation on how we process your data.
• Portability — request transfer of your data to another controller.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent.
• Lodge a complaint — with a supervisory authority.

We aim to respond to all requests within one month. To exercise your rights, contact us at privacy@ewafy.com.

7. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews.

8. Cookies

We use cookies and similar technologies to operate the service, analyze usage, and support authentication. Essential cookies are required for the service to function. Analytics cookies help us improve the product. You can manage cookie preferences through your browser settings.

9. International Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction. Where this involves transfers from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to ensure an equivalent level of protection.

10. Updates

We may update this Privacy Notice from time to time. We will notify you of material changes via email or through the service.

11. Contact

If you have questions about this Privacy Notice, please contact us at privacy@ewafy.com.