Privacy Policy

1. What We Collect

We collect only what is necessary to run the service:

• Account information: your name, email address, and hashed password
• Profile data: financial information you voluntarily enter (assets, debts, income, skills, commitments)
• Collective data: plans, scenarios, and documents created within your collectives
• Usage data: basic server logs (IP address, timestamps) for security and debugging

We do not collect payment card details, government IDs, or any biometric data. We do not use tracking pixels, advertising cookies, or behavioural analytics.

2. How We Use Your Data

• To provide the Natural Life Style planning tools
• To authenticate your account securely
• To share data with other members of your collectives (only the data you choose to include)
• To generate the calculations and outputs you request
• To send transactional emails (account verification, password reset, collective invitations)

We do not use your data to train machine learning models. We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. What Other Members Can See

Natural Life Style is designed so that individual financial details are never shared with other members. Other members of your collective see only:

• Your name and display name
• Your collective-level committed capital (total only, not breakdown)
• Your skills and whether you are prepared to contribute them
• Your monthly contribution amount
• Your collective role (admin / member / observer)

They do not see your total net worth, individual assets and debts, personal income sources, or any data you have not explicitly committed to a collective.

4. Data Storage and Security

Your data is stored on a private server. Passwords are hashed using bcrypt (cost factor 12) and never stored in plain text. All connections use HTTPS. Session tokens are signed JWTs that expire and are not stored in the database (stateless JWT strategy).

Despite these precautions, no system is 100% secure. We encourage you not to store highly sensitive documents on any web platform.

5. Your Rights

You have the right to:

• Access — export all your data at any time via Settings → Export Data
• Rectification — edit any data you have entered
• Erasure — delete your account and all associated data via Settings → Delete Account
• Portability — export your data in JSON or CSV format
• Object — contact us to object to any processing

To exercise any of these rights, use the Settings section of your account or email us at the address below.

6. Cookies

We use only one cookie: a session authentication cookie set by NextAuth. This cookie is HttpOnly, Secure, and SameSite=Lax. It contains a signed JWT and is used only to keep you logged in. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently deleted from our database within 30 days. Server logs (IP, timestamps) are retained for up to 90 days for security purposes and then deleted.

8. Children

Natural Life Style is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us and we will delete the account.

9. Changes to This Policy

If we make material changes to this policy, we will notify you by email at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or data requests, contact us at: info@mezquita.life