PRIVACYPOLICY.

This Privacy Policy explains how NRTHSTR handles personal information through its websites, applications, and related services. In this draft, “NRTHSTR”, “we”, “us”, and “our” refer to [INSERT LEGAL ENTITY NAME].

This is a development placeholder. The final policy must accurately describe the production product, every material data flow, the countries in which NRTHSTR is offered, and the legal entity responsible for the information.

The information NRTHSTR handles depends on the features you use and the choices you make.

• Account information, such as your name, email address, profile details, account identifiers, and authentication-provider information.
• Content you create, such as goals, projects, tasks, notes, labels, schedules, attachments, preferences, and completion history.
• Technical and usage information, such as device type, app version, operating system, language, approximate region, timestamps, diagnostics, crash data, security events, and interactions with features.
• Communications, such as support requests, feedback, survey responses, and messages you send to us.
• Transaction information if paid features are introduced, while complete payment-card details are generally handled by the relevant payment provider rather than NRTHSTR.
• Information received from connected services when you choose to sign in with or connect a third-party provider.

We use personal information only for legitimate product, security, support, and legal purposes described in the final policy.

• Provide accounts, authentication, synchronisation, reminders, backups, and the features you request.
• Maintain, troubleshoot, test, secure, and improve NRTHSTR.
• Personalise settings and restore your preferred experience across supported devices.
• Respond to support requests, feedback, and administrative communications.
• Detect, investigate, and prevent fraud, abuse, unauthorised access, and technical harm.
• Comply with legal obligations, enforce agreements, and protect rights, safety, and property.
• Measure product performance and understand feature usage using appropriately limited analytics.

Your goals, tasks, projects, and notes are treated as private account content unless you deliberately use a sharing or collaboration feature.

The current product intention is not to sell private task content or use it for third-party targeted advertising. Confirm this statement against the final business model before publication.

If NRTHSTR introduces AI-assisted features, the final policy must explain what content is sent to model providers, why it is sent, available controls, retention settings, whether content is used for model training, and any human-review process.

We may disclose information only as reasonably necessary to operate NRTHSTR, follow your instructions, protect the service, or meet legal obligations.

• To service providers that support hosting, storage, authentication, email, notifications, analytics, customer support, security, or payments under appropriate contractual restrictions.
• To third-party services you ask us to connect with or send information to.
• To professional advisers, auditors, insurers, and corporate transaction participants where confidentiality protections apply.
• To regulators, courts, law-enforcement bodies, or other parties when required by law or reasonably necessary to protect rights, safety, and security.
• To another entity as part of a merger, acquisition, financing, reorganisation, or sale of assets, subject to applicable notice and privacy obligations.
• With your consent or at your direction.

NRTHSTR may use service providers located in different countries. As a result, information may be stored or processed outside the country where you live.

The final policy must name or categorise the important providers, identify relevant storage regions where practical, and describe the safeguards used for international transfers where required.

We retain personal information only for as long as reasonably necessary for the purposes described in the final policy, including providing the service, maintaining security and backups, resolving disputes, and meeting legal obligations.

When an account or content is deleted, removal from active systems may not be immediate, and limited copies may remain temporarily in backups or where retention is legally required. The final policy should publish realistic deletion and backup timelines.

We use administrative, technical, and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

No system is completely secure. You should protect your devices and sign-in methods, use strong authentication where available, and contact us promptly if you suspect unauthorised account activity.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain uses of your personal information, withdraw consent, or complain to a privacy regulator.

NRTHSTR should provide practical in-product controls for profile changes, connected accounts, notification preferences, export, and account deletion wherever those features apply. We may need to verify your identity before completing a privacy request.

Until a dedicated request flow is available, contact [INSERT LEGAL CONTACT EMAIL].

NRTHSTR is not intended for children below the minimum age stated in the final policy. We do not knowingly collect personal information from children in circumstances where parental consent is required but has not been obtained.

If we learn that information was collected contrary to the final age requirements, we will take reasonable steps to delete it or obtain any required authorisation.

NRTHSTR websites may use cookies, local storage, or similar technologies for essential functions such as authentication, security, preferences, and session continuity.

If non-essential analytics, advertising, or marketing technologies are introduced, the final policy and consent controls must describe them and provide the choices required in the regions where NRTHSTR operates.

We may update the final Privacy Policy as NRTHSTR, its providers, or legal obligations change. The published policy should show its effective date and explain how users will be notified of material changes.

Privacy questions, requests, and complaints should be sent to [INSERT LEGAL CONTACT EMAIL].

The final policy should also identify the responsible privacy contact, a postal address where required, and the relevant escalation or regulator information for supported regions.