Privacy policy

Who we are

Code Men (“we”, “us”) is the data controller for personal data processed through this service. Our registered business details and a contact address for privacy requests will be published here before launch.

What we collect

• Account details: your email address, the display name you choose, an optional profile photo, your country, and confirmation that you are 18 or over.
• Preferences: your relationship stage, goal and preferred reply tone.
• Decodes: the text you paste, the context you add, and the result. The text you paste is encrypted at rest.
• Screenshots: processed in memory to extract the conversation, then discarded. We never store screenshot images.
• Cases and notes: the nicknames, notes and outcomes you add.
• Billing: your subscription status. Card and bank details are handled by our payment providers and never reach our servers.
• Usage and diagnostics: basic product events and error reports. The content you paste is never included in analytics.

Why we use it (lawful basis)

• To provide the service you asked for: performance of a contract.
• To keep the service secure and prevent abuse: legitimate interests.
• To meet tax, accounting and legal duties: legal obligation.
• Optional analytics cookies and marketing emails: your consent, which you can withdraw.

AI processing

Your decode content is sent to an AI model provider to generate your read. We only use providers whose terms state that your content is not used to train their models, and we will link those terms here before launch. We do not use your content to train any model.

Who processes data for us

We share data only with service providers that help us run Code Men:

• Supabase: database, authentication and profile photo storage.
• Vercel: hosting and the AI gateway.
• Our AI model provider: generating decodes.
• Stripe and Paystack: payments.
• Resend: sign-in and account emails.
• Sentry: error monitoring.
• PostHog: product analytics, without any decode content.

Some providers process data outside Nigeria and the UK or EU. Where they do, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

• Decodes, cases and notes: until you delete them or your account.
• You can also choose to auto-delete decodes older than a set number of days in Settings.
• Billing records: as long as tax law requires.
• Deleted accounts: removed from our live systems straight away and from backups within their rotation period.

Your rights

Under the Nigeria Data Protection Act 2023, the UK GDPR and the EU GDPR, you can access, correct, export and delete your data, object to or restrict some processing, and withdraw consent. Most of this you can do yourself in Settings: export your data as a file, delete individual decodes, or delete your whole account. You can also complain to the Nigeria Data Protection Commission or your local data protection authority.

Cookies

We use essential cookies to keep you signed in and remember your theme. Non-essential analytics cookies are off unless you turn them on.

Age

Code Men is only for adults aged 18 and over. We do not knowingly collect data from anyone younger.

Changes

If we make meaningful changes to this policy, we will tell you in the app or by email before they take effect.