Privacy Policy

Who We Are

HushClan ("we", "us", "our") is the data controller for personal data collected through the Service at hushclan.com. For privacy enquiries, contact support@hushclan.com.

Data We Collect

We collect the minimum data necessary to operate and improve HushClan:

We do not collect your full payment card number, CVV, or bank account details.

How We Use Your Data

• Provide, personalise, and improve the Service.
• Sync your data across your devices.
• Manage and fulfil subscription purchases.
• Send transactional emails (account, billing) and, where you have opted in, product updates.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.
• Produce anonymised, aggregated analytics to understand how the Service is used.

Legal Basis for Processing (GDPR & UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

• Contract performance — to provide the Service you signed up for.
• Legitimate interests — to improve the Service, prevent abuse, and ensure security, where these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws and regulations.
• Consent — for optional communications such as marketing emails. You may withdraw consent at any time.

Public Languages

Languages you intentionally mark as Public may be discovered and viewed by other users of the Service. Private languages and groups remain accessible only to members you explicitly authorise. Think carefully before making a language public, as it may be visible to all users.

Analytics

We use analytics tools to understand how users interact with HushClan and to improve the Service. Analytics data is collected in an anonymised or pseudonymised form where technically feasible. We do not sell analytics data to third parties.

Where we use third-party analytics providers, they are bound by data processing agreements that restrict them from using your data for their own purposes.

Payment Processing

All payments are handled by third-party providers. Depending on your platform, your payment is processed by Stripe, Paddle, Apple, or Google. Each provider acts as an independent data controller for payment data and their privacy policies apply:

• Stripe: stripe.com/privacy
• Paddle: paddle.com/legal/privacy
• Apple: apple.com/legal/privacy
• Google: policies.google.com/privacy

We receive only a transaction confirmation and subscription status; we never receive or store your full card number, CVV, or equivalent sensitive payment credentials.

Data Storage & Security

Your data is stored on cloud infrastructure using industry-standard security practices, including encryption at rest and in transit (TLS). Access to personal data is restricted to authorised personnel on a need-to-know basis.

No method of transmission over the internet is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security. In the event of a data breach that is likely to harm your rights, we will notify you and relevant authorities as required by applicable law.

Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Payment processors (Stripe, Paddle, Apple, Google) to fulfil your subscription.
• Cloud infrastructure providers that host the Service, under data processing agreements.
• Analytics providers under data processing agreements, using anonymised data.
• Legal requirements — where required by law, court order, or regulatory authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice provided to you.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time. Upon deletion we will remove or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes, typically 7 years).

Your Rights

Depending on your jurisdiction you may have the following rights regarding your personal data:

To exercise any of these rights, email us at support@hushclan.com. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.

Children's Privacy

HushClan is not directed at children under 13 (or the applicable minimum age in your country). We do not knowingly collect personal data from children below this age without verifiable parental consent. If you believe we have inadvertently collected such data, contact us at support@hushclan.com and we will delete it promptly.

International Data Transfers

Your data may be transferred to and processed in countries outside your own. When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by the relevant authority, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if provided) or by displaying a notice in the Service at least 14 days before the change takes effect. The updated policy will indicate the new effective date.

Contact & Data Controller

For privacy questions, data requests, or complaints, please contact us: