Darth Panda Pty Ltd ("Darth Panda," "we," "us," or "our") operates mobile applications including Consistly and other applications we may offer (collectively, the "Apps"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Apps and related services (the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.
1. Information We Collect
1.1 Information You Provide
When you create an account or use our Services, you may provide us with:
- Account information: email address, display name, and password.
- Profile information: profile photo, bio, interests, and preferences.
- User content: habits you create, goals, journal entries, chat messages, posts, comments, and other content you submit through the Apps.
- AI interactions: messages you send to our AI coaching features, which are processed to provide personalised responses.
- Payment information: subscriptions are processed through Apple App Store or Google Play Store. We do not directly collect or store your payment card details.
- Support communications: information you provide when contacting our support team.
1.2 Information Collected Automatically
When you use our Apps, we may automatically collect:
- Device information: device type, operating system version, unique device identifiers.
- Usage data: features used, actions taken, timestamps, session duration.
- Crash and performance data: error logs and diagnostic information to improve app stability.
1.3 Information We Do NOT Collect
- We do not collect precise location data unless you explicitly grant permission (relevant to apps with location-based features).
- We do not access your contacts, camera, microphone, or other device sensors without your explicit consent.
- We do not track you across other apps or websites.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services.
- Process your AI coaching requests and deliver personalised responses (Consistly).
- Facilitate social and community features where applicable.
- Send you notifications related to your habits, events, or account activity.
- Process subscription transactions through the relevant app store.
- Respond to your support requests and communications.
- Detect, prevent, and address technical issues, fraud, and abuse.
- Comply with legal obligations.
3. AI Features and Data Processing
Our Apps use artificial intelligence services provided by third-party AI providers (currently Anthropic) to power coaching and personalisation features.
- Messages you send to AI features are transmitted to our secure server-side functions, which then communicate with the AI provider.
- AI conversations are associated with your account to provide context-aware responses.
- We do not sell your AI conversation data to third parties.
- The AI provider processes your messages according to their own privacy and data handling policies. We encourage you to review Anthropic's privacy policy.
- You can delete your AI conversation history at any time through your account settings.
4. Data Sharing and Disclosure
We do not sell your personal data. We may share information only in the following circumstances:
- Service providers: We use third-party services (hosting, analytics, AI processing, payment processing) that may access your data solely to perform services on our behalf. These include Supabase (database and authentication), RevenueCat (subscription management), and Anthropic (AI processing).
- Legal requirements: We may disclose information if required to do so by law or in response to valid legal requests by public authorities.
- Safety: We may disclose information to protect the safety, rights, or property of Darth Panda, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL.
- Secure server-side processing for AI features (API keys never exposed to client devices).
- Row-level security policies on our database to ensure users can only access their own data.
- Regular security reviews of our infrastructure and code.
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our Services. You may request deletion of your account and associated data at any time by contacting us at . Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Portability: Request a copy of your data in a structured, machine-readable format.
- Objection: Object to certain types of data processing.
- Restriction: Request restriction of processing of your personal data.
To exercise any of these rights, contact us at .
Australian Privacy Act
If you are an Australian resident, you have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We comply with the APPs in our handling of your personal information. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the APPs.
GDPR (European Economic Area)
If you are located in the European Economic Area, we process your data based on legitimate interests, consent, or contractual necessity as applicable. You have additional rights under the GDPR as outlined above.
8. Children's Privacy
Our Services are not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under these age thresholds, we will promptly delete that information. If you believe a child has provided us with personal data, please contact us at .
9. Third-Party Links and Services
Our Apps may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in our Apps and updating the "Last updated" date at the top of this page. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.
11. App-Specific Information
Consistly
- Habit tracking data is stored securely in your account and is not shared with other users.
- AI coaching conversations are processed server-side and associated with your account for personalisation.
- Push notification tokens are collected solely for delivering habit reminders you configure.
Future Apps
- As we launch additional apps, this policy will be updated with app-specific information about data collection and usage.
- Material changes will be communicated through the relevant app and on this page.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Darth Panda Pty Ltd
Sydney, NSW, Australia