SmartKit Labs

Privacy Policy

Last updated: August 27, 2026

1. Introduction

SmartKit Labs ("we", "us", "our") operates Digital Legacy Guard. This Privacy Policy explains what information we collect, how we use and share it, and your rights. By using the Service, you consent to the practices described here.

2. Information We Collect

Account information: When you create an account we collect your email address and, if you choose to provide it, your name and other profile details.

Plan information: The Service is designed to store the information you choose to document, which may include descriptions of your digital inventory, online accounts, financial accounts, digital assets, subscriptions, legacy decisions, emergency steps, and family or executor contacts. We do not require or intentionally store payment card numbers, passwords, PINs, seed phrases, private keys, or account recovery codes.

Payment information: Purchases are handled by Paddle. We receive limited payment information from Paddle, such as transaction identifiers, subscription status, and the email address used for the purchase. We do not receive or store your full payment card details.

Usage and technical information: We collect standard service logs and error information to maintain and improve the Service, and may use aggregated analytics about how the Service is used.

Communications: If you contact us for support, we keep a record of the correspondence.

3. How We Use Information

We use your information to provide, maintain, and improve the Service; to authenticate you; to process payments and entitlements; to send transactional emails such as account activation, password reset, and payment notifications; to respond to support requests; and to monitor the health and security of the Service.

4. How We Share Information

We do not sell your personal information. We share information only with service providers and partners necessary to operate the Service:

  • Paddle — payment processing, subscription management, and merchant-of-record services.
  • Lovable Cloud / Supabase — authentication, database hosting, and backend infrastructure for the Service.
  • Mailgun — delivery of transactional emails from our notification domain mail.notify.smartkitlabs.com.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights, property, or safety of SmartKit Labs, our users, or others.

5. Data Security

We protect access to the Service with authentication and database-level access controls (Row Level Security) so that users can generally access only their own data. We transmit data over encrypted connections (HTTPS/TLS). We do not store account passwords or sensitive credentials in plain text.

No security system is perfect. You are responsible for maintaining the confidentiality of your account credentials and for using the Service in accordance with our security guidance.

6. Data Retention

We retain your account and plan information for as long as your account is active or as needed to provide the Service. When you delete your account, or when your subscription has been cancelled for an extended period, we will delete or anonymize your personal information in accordance with our internal retention schedule and applicable law. Backup copies may persist for a limited period before being permanently removed.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information. You can update much of your information directly within the Service. For other requests, contact us at support@smartkitlabs.com. We will respond in accordance with applicable law.

8. Cookies and Tracking

The Service uses essential cookies and similar technologies to keep you signed in and to maintain the security of your session. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

The Service is not intended for use by children under the age of 13 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

10. International Users

The Service is hosted by infrastructure providers in the United States and may be accessed internationally. By using the Service, you understand that your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy in the Service and update the effective date. Continued use of the Service after changes means you accept the revised policy.

12. Contact

For privacy questions or data requests, contact SmartKit Labs at support@smartkitlabs.com.