Privacy Policy

We at Gratitude Aptitude are committed to protecting your privacy. This privacy policy applies to our browser extension (Gratitude Aptitude).

The information we gather or process is used solely for core functionality of Gratitude Aptitude and to improve the quality and security of our service. Your information isn’t and has never been sold to third parties.

What information is being store, or accessed?

Gratitude Aptitude account information

Your name, email, account settings, and extension data (such as gratitude entries) are transferred and stored securely, solely for your usage within our extension and not shared with any other third parties, except as specified in this policy.

Feature usage data

To improve the content, features and overall experience of the extension, we gather and log data on how our users access and use Gratitude Aptitude Dashboard. For example, we may log actions like clicking on a photo source, or completing a gratitude entry (not the content of the entry, just the action of completing it).

Some of this usage data is sent to Google Analytics. In these cases, we do not send any identifying information that could be correlated with your account. We also make use of their IP anonymization feature to prevent your IP from being associated with your usage data.

What vendors do we use?

Unsplash

Some photos/backgrounds are retrieved from Unsplash. A request is made from your IP address to download photos.

Google Cloud Platform

Used to host the API of our backend. Requests are sent to the server hosted on GCP to retrieve and post data such as diary entries.

MongoDB Atlas

Provide us with a cloud database to store your information so that you can access it from any device.

What are my rights in relation to my personal data?

By using Gratitude Aptitude Dashboard, you may exercise the following rights:

1. The right to refuse to provide your personal data The voluntary Personal Data you provide to us is an integral part of your use of Gratitude Aptitude Dashboard. You can choose to forego the provision of that data, but you will be restricted from using our services.
2. The right to access and modify your personal data Through your use of Gratitude Aptitude Dashboard, you can access and amend your own data at any time. This includes changing your email, name, and entries from your dashboard.
3. The right to be forgotten You can manually delete your account by contacting me at kolomiytsevs@googlemail.com. This will delete all your data. Please npte that deleting the extension alone will not delete your data.
4. The right to obtain your personal data Upon request, we will provide a data export of all your data stored in our system. If you wish to receive an export of your data, or have any problems deleting your account, please contact us at kolomiytsevs@googlemail.com.
5. The right to submit a complaint If you have a complaint about the way in which your Personal Data is handled, please contact me at kolomiytsevs@googlemail.com. After submitting a complaint, we will reply within five (5) business days to confirm that we have received your complaint. After receiving your complaint, we will investigate it and provide you with our response within two (2) weeks.
6. The right to submit a complaint with a data protection authority If you are a resident of the European Union, and you are not satisfied with the outcome of the complaint submitted to us, you have the right to lodge a complaint with your local data protection authority.

Is my data secure?

Data security is a priority at all times. We use a Tier 1 cloud provider to run our operations (Google Cloud Platform).

In Transit All data communication in transit to and from our servers is secured using HTTPS/TLS. All Gratitude Aptitude domains have HTTP Strict Transport Security (HSTS) enabled and are in the HSTS Preload list on the major browsers supporting this feature.

At Rest All data in our databases and their associated backups are encrypted at rest.