Privacy Policy

Overview

Mardonic is a personal life analysis platform. This policy explains what data we collect, how we use it, and how we protect it. We believe in plain language — not legalese designed to obscure what's actually happening with your data.

01

Data We Collect

We collect the following categories of information when you use Mardonic:

• Account information — your email address and hashed password when you create an account.
• Assessment responses — your daily check-in answers across the sectors you configure. These are the core data that power your chart.
• Sector allocations — the life areas you've defined and their relative weightings.
• Chart and analysis data — computed trendlines, patterns, candlestick values, and flags generated from your assessments.
• Session and usage data — timestamps, streak information, session counts, and behavioral events used to compute milestones and improve the product.
• Traffic and signup attribution — page paths, referring pages and source categories, UTM campaign tags, session IDs, and browser details. Some first-party page-view records also include a daily salted IP hash. Authenticated pageviews may be associated with an account, and referral and campaign details submitted during signup are stored with that account; these records are not necessarily anonymous or separate from account data.
• Payment information — processed by Stripe. We receive a confirmation of subscription status; we do not store your card number or full payment details.
• Communications — emails you send to our support address and email addresses used for delivery of check-in emails, milestone notifications, and product updates.
• Advertising measurement data — Meta Pixel sends a PageView event on pages where it loads, a Lead event after signup with Mardonic's internal user ID as its event ID, and a Purchase event after payment is verified. Meta Pixel may process browser and device identifiers with these events according to Meta's privacy policy.
• Product analytics — if you opt in on /app, HeyCatch receives page URLs and titles, page and interaction metadata, and IP, device, and browser data. Click text and element attributes are masked; form values and session recordings are not collected.

02

How We Use Your Data

Your data is used to provide and improve the Mardonic service. Specifically:

• Generating your personal life chart from assessment responses.
• Detecting technical patterns (candlestick patterns, trendlines, momentum signals) and surfacing them in your analysis.
• Delivering personalized coaching prompts and daily check-in emails.
• Tracking your streaks, milestones, and session history.
• Processing and managing your subscription via Stripe.
• Sending transactional emails (account verification, password reset, milestone notifications).
• Analyzing usage to improve the product and service.

Mardonic uses page paths, referring pages and source categories, UTM campaign tags, and related session and browser details to measure where visits and signups come from. Some first-party page-view records also include a daily salted IP hash. Authenticated pageviews and signup attribution may be associated with an account. We use these source and referral details to measure traffic and advertising, not to determine who a person is; that limited purpose does not make the records anonymous or detach them from account data. Meta Pixel separately receives page views, signup leads, and purchase events after payment is verified, and may process browser or device identifiers. If you opt in to product analytics on /app, HeyCatch helps us understand page visits and interactions. Click text and element attributes are masked; form values and session recordings are not collected. HeyCatch uses OpenRouter to summarize event streams for its analytics narratives. We do not sell your personal data or build advertising profiles from your life-tracking responses.

03

Privacy by Design

Your life data is keyed to a UUID that is stored separately from your email address. A profile record links your account to that UUID so Mardonic can retrieve the right chart. This separation describes how data is organized, not anonymity: Mardonic collects account, session, and other identifiers, and records may be associated with your account.

04

Third-Party Services

We use the following third-party providers to operate the service:

• Stripe — payment processing and subscription management. Your payment data is governed by Stripe's Privacy Policy.
• Twilio — SMS verification for account security (when applicable). Governed by Twilio's Privacy Policy.
• Email delivery — transactional emails are sent through our email proxy infrastructure. Your email address is transmitted to deliver messages to your inbox.
• Meta — Meta Pixel provides advertising measurement through PageView, signup Lead, and verified-payment Purchase events. The signup event ID is based on Mardonic's internal user ID. Meta Pixel may process browser or device identifiers for measurement. See Meta's Privacy Policy.
• HeyCatch — optional product analytics captures page URLs and titles, page and interaction metadata, and IP, device, and browser data. Click text and element attributes are masked; form values and session recordings are not collected. HeyCatch uses OpenRouter to summarize event streams for analytics narratives.
• Neon / PostgreSQL — database hosting for your account and assessment data.
• Render — application hosting infrastructure.

HeyCatch collects analytics only while our subscription is active and retains event data for two months after it ends, then deletes or irreversibly anonymizes it unless we reactivate or request earlier deletion. Other service providers set their own retention practices under their policies. We share information with the providers listed above as needed to operate the service, and we do not sell your personal data.

05

Data Retention

• Active accounts: Data is retained for the lifetime of your account.
• Cancelled accounts: Your data is retained for 30 days after cancellation, then permanently deleted. This gives you a window to reactivate without losing your history. After 30 days, deletion is permanent and cannot be reversed.
• Deletion requests: You can request immediate deletion of your account and all associated data at any time by contacting mardonic@polsia.app.

06

Cookies and Local Storage

We use the following client-side storage mechanisms:

• Authentication cookie — an httpOnly, secure JWT cookie that keeps you logged in for up to 30 days. It is not accessible to JavaScript; the server can use your signed-in status to associate page-view records with your account.
• localStorage — used to store your chart UUID, preserve preferences (e.g., chart view settings), remember your explicit HeyCatch analytics choice, and retain a first-party analytics session ID and UTM campaign tags for traffic measurement.
• sessionStorage — used briefly to pass referral codes and UTM tags through the signup flow and to prevent duplicate Meta Pixel purchase events when a payment-return page is refreshed or retried.
• HeyCatch analytics storage — after you opt in, the SDK stores device and session identifiers, referrer, first URL, and SDK metadata in a browser cookie and local storage.

HeyCatch does not initialize until the project is configured. Its analytics storage and event capture remain off until you opt in. You can reopen or change your analytics choice at any time with the Analytics preferences button in the app; essential authentication and product storage remain enabled.

07

Your Rights

Depending on your location, you may have rights under GDPR (EU/EEA), CCPA (California), or similar laws. Regardless of jurisdiction, we honor the following for all users:

• Access: You can request a copy of the data we hold about you.
• Correction: You can request correction of inaccurate data.
• Deletion: You can request deletion of your account and all associated data.
• Portability: You can request an export of your assessment data in a machine-readable format.
• Opt-out of emails: You can manage email preferences in your account settings, or unsubscribe via any email we send.

To exercise any of these rights, email mardonic@polsia.app. We will respond within 30 days.

08

Children's Privacy

Mardonic is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately at mardonic@polsia.app and we will delete it.

09

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the effective date at the top and notify active users via email. Continued use of the service after changes constitutes acceptance of the updated policy.

10

Contact

Questions, data requests, or concerns: mardonic@polsia.app

Mardonic is operated by Polsia, Inc.