Privacy Policy

Last updated: 20th March 2025

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the I Can App (the “Service”). It also tells you about your privacy rights and how the law protects you. We are committed to complying with applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and the Australian Privacy Principles (APPs) under Australia’s Privacy Act.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words with initial letters capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account: means a unique account created for you to access our Service or parts of our Service.
Affiliate: means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority.
Application: refers to “I Can”, the software program provided by the Company.
Company: (referred to as “the Company,” “We,” “Us,” or “Our” in this Agreement) refers to I Can App, located in Sydney, NSW, Australia.
Country: refers to Australia (specifically, New South Wales, Australia).
Device: means any device that can access the Service, such as a smartphone, tablet, or computer.
Personal Data: is any information that relates to an identified or identifiable individual.
Service: refers to the Application (the I Can mobile app) and any related services provided by the Company.
Service Provider: means any natural or legal person who processes data on behalf of the Company. This refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on the Company’s behalf, to perform services related to the Service, or to assist the Company in analysing how the Service is used.
Third-party Social Media Service: refers to any website or social network platform through which a user can log in or create an account to use the Service.
Usage Data: refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
You: means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. Personal Data may include, but is not limited to:

Contact Information: Email address, first name and last name, phone number, and mailing address (street, state/province, postal code, city).
Account Credentials: Username, password, and any profile information you choose to provide.
Subscription and Purchase Details: Information about your in-app purchases or subscriptions, such as whether you are a premium subscriber, your subscription plan, subscription start and renewal dates, and purchase transaction IDs.
Usage Data: (See below for more details) information on how you use the app.
Payment Information:If you make purchases, basic payment details necessary for processing (for example, payment method and billing information). Please note: We do not collect or store full credit card numbers or financial account details ourselves – payments are handled by secure third party processors (as described in the Payment Processing section).
Other Information You Provide: Any other information you voluntarily provide to us (such as when contacting customer support or providing feedback).

Profile Information and Media

Our app specifically collects the following personal data to enhance and personalise your experience:

Profile Photos and Camera Roll: We request access to your camera roll and photos solely to enable you to create, customize, and update your user profile. Photos uploaded are securely stored and used exclusively within your user profile on the app.
Profile Name: Your profile name is collected to personalise your experience. You may update your profile name anytime through the app settings. Email Address: Your email address is collected for account verification, account management, and direct account-related communication. Once created, your email address cannot be changed.
Data Storage and Security: Your personal data is securely stored and will not be shared with third parties unless explicitly authorized by you or required by law. Data Deletion: Upon deleting your account, all associated personal data, including your profile photos, profile name, and email address, will be permanently deleted from our servers
User Control and Rights: You have full control over your personal data. You can update your profile information, including your profile name and photos, anytime. You may also request account deletion directly within the app.

Usage Data

Usage Data is collected automatically when using the Service. This can include information such as:

Your Device’s Internet Protocol address (IP address)
Browser type and version (if using a web interface)
The pages or screens of our Service that you access, and the time and date of each visit
Time spent on those pages or screens, and other statistical data about your interactions
Unique device identifiers (for example, device ID or advertising ID) and device type
Your mobile operating system and version, and the type of mobile Internet browser you use
Other diagnostic data to help us improve the Service (such as error logs, crash reports, and performance metrics)

When you access the Service via a mobile device, we may collect certain information automatically, including the types of data listed above specific to your mobile use. For example, we may collect your mobile device type, device ID, mobile OS, and IP address, as well as how you interact with the mobile app.

We may also collect information that your browser sends whenever you visit our website or interact with the Service, if applicable.

Information from Third-Party Social Media Services

The Company may allow you to create an account and log in through Third-Party Social Media Services. If you choose to register or log in via services such as Google, Facebook, Instagram, Twitter, LinkedIn, Outlook, or Hotmail, we may receive Personal Data that is already associated with your third-party account. This can include your name, email address, and potentially other information or contacts associated with that account (if you authorize such access).

If you link your account with a Third-Party Social Media Service or otherwise grant us access to information from it, you consent to our collection, use, and retention of that information as governed by this Privacy Policy. We will handle all such third-party sourced personal data in accordance with this Policy.

Information Collected While Using the Application

In order to provide certain features, the I Can App may request access (with your permission) to specific information on your device:

Location Data: We may ask for access to your location (e.g., via GPS or network-based location) to deliver location-relevant content or ensure appropriate regional settings. We will only collect location information with your explicit consent.
Contacts: We might request access to your phone’s contacts (for example, if we introduce a referral feature or the ability to share content with friends). If you grant access, we could use your contacts only for the specific functionality (such as inviting friends to use the app) and not for any other purpose.
Photos/Media: We may request access to your device’s camera or photo library (for example, if the app allows you to upload a profile picture or share an inspirational image). This would only be used to enable those user-initiated features.

You are always in control of whether this information is shared. Such device permissions are opt-in. If you initially grant access to any of these and later change your mind, you can always disable the permission through your device settings. Disabling certain permissions may limit the functionality of some features, but the core Service can usually still be used.

Use of Your Personal Data

The Company may use your Personal Data for the following purposes:

To Provide and Maintain our Service: We use data to deliver the core functionalities of the app and ensure it works correctly. This includes using data to personalise your experience and to monitor usage (for example, to ensure notifications are being delivered properly and the app is functioning as intended).
To Manage Your Account: We use your information to create and maintain your account, including any profile you set up, and to authenticate you when you log in. This lets you access personalized features and your saved preferences as a registered user.
For the Performance of a Contract: When you make a purchase (such as subscribing to premium features), we use your personal data to fulfill that transaction and provide the paid services. This includes processing payments (via our payment partners) and managing subscription status. It also includes any other contracts you enter with us through the Service (e.g., participating in a promotion or contest, if applicable).
To Contact You: We may use your contact information to communicate with you about important updates or notices related to the Service. This can include sending you emails, SMS messages, or push notifications within the app. For example, we might send you updates about new features, respond to a support request, or alert you to security or technical issues. We may also send push notifications with motivational quotes or content if you have enabled this feature. (You can control or disable push notifications in your device or app settings, but note that the app’s core purpose is delivering these inspirational notifications.)
To Provide News and Offers: With your consent (where required), we may send you newsletters, marketing or promotional materials, or information about products and services that we offer. These communications will be about offerings similar to the I Can App’s services or related content (for example, new features, special promotions, or relevant events). You can opt out of marketing communications at any time (each email will have an “unsubscribe” link, and you can also contact us to be removed from our marketing list).
To Manage Your Requests: If you contact us with inquiries, requests, or feedback (for example, customer support questions or feature requests), we will use your information to respond to and resolve your requests.
For Business Transfers: We may use your data as part of evaluating or executing a merger, acquisition, restructuring, or other business transaction. If we are involved in a merger or sale of assets, your Personal Data might be transferred to the new owner so that the Service can continue to operate. If that happens, we will ensure your data remains subject to protections at least as strict as those in this policy.
For Other Purposes (Improvement and Analysis):We use data for internal analysis to improve our products and services. For instance, we analyse usage trends and user preferences to make the app’s content more effective, to fix bugs, and to inform our development of new features. This includes determining the effectiveness of our notifications or marketing campaigns and tailoring the user experience to better suit our audience. Any additional purpose for using your data will be explained to you (and if required by law, we will obtain your consent) before such use.

Legal Basis for Processing Personal Data

(This section is particularly relevant to users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar laws.)

We only collect and process your Personal Data when we have a legal basis to do so under applicable law. The legal bases on which we rely include:

Consent: In certain cases, we ask for your consent to process your data. For example, we will seek consent before sending you marketing emails, accessing sensitive device information (like your contacts or precise location), or using tracking technologies for personalized advertising on iOS (per Apple’s App Tracking Transparency framework). Where we rely on consent, you have the right to withdraw it at any time.
Performance of a Contract: We process personal data as needed to fulfill our contract with you — namely, to provide the I Can App services you have requested. When you create an account, subscribe to premium features, or make an in-app purchase, we must use your data to provide those services (e.g., delivering content, processing payments, and managing your subscription). If you elect not to provide certain necessary data, we may not be able to deliver the requested service.
Legal Obligation: Some data processing is required for us to comply with our legal and regulatory obligations. For example, we retain transaction records to meet tax and accounting laws, and we may need to disclose information if compelled by law enforcement or court orders.
Legitimate Interests: We may process your data for purposes that are in our legitimate interests as a business, provided those are not overridden by your data protection rights. Our legitimate interests include improving and securing our Service, understanding how the app is used, communicating with users to promote engagement, and showing relevant (non-intrusive) advertising. When we rely on legitimate interests, we carefully consider and balance any potential impact on your rights. For instance, we use analytics to improve user experience (a legitimate interest) in a way that does not infringe on your privacy rights (we use aggregated data and provide opt-outs where feasible).

If you have questions about the legal basis on which we collect and use your personal information, please contact us (see the Contact Us section at the end of this policy).

Sharing Your Personal Information

We may share your personal information in the following situations and with the following parties, but only for the purposes described in this Privacy Policy:

With Service Providers: We share data with third-party companies and individuals that help us operate the Service or perform functions on our behalf. For example, service providers may assist us with analytics, email messaging, customer support, cloud storage, payment processing, or delivering notifications. These providers only receive the information necessary to carry out their specific services, and they are contractually obligated to protect your data and use it only for our purposes and under our instructions.
With Affiliates: If we are part of a corporate group in the future, we may share your information with our affiliates (such as a parent company, subsidiaries, joint ventures, or other companies under common control). If we do so, we will ensure that any Affiliate who receives your information will abide by this Privacy Policy.
With Business Partners: We might share certain information with partners with whom we co-offer a product or service, or with whom we run promotions. For instance, if in the future we collaborate on a wellness challenge or offer a co-branded feature, we might share relevant info with that partner (with your consent if required). These partners will be obligated to use your data only for the specified purposes and to protect it.
With Other Users: Certain social or interactive features of the Service (if available) may allow you to share information or content with other users. For example, if the app features public profiles, communities, or you post content like comments or testimonials, any information you voluntarily disclose in those areas can be seen by other users. Similarly, if you use a Third-Party Social Media Service to register and have friends who also use the app, they may see that you are using the Service and some basic info (like your name and profile picture) if you consent to such sharing. Please exercise caution when sharing personal data in public or community areas of the app.
For Business Transfers: As noted, if we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, or sale of company assets, your data may be transferred to a successor or affiliate as part of that transaction. We will provide notice if your Personal Data becomes subject to a different privacy policy as a result of a business transfer.
With Your Consent: Apart from the cases above, we will explicitly ask for your consent before sharing your personal information with third parties for purposes not covered by this Privacy Policy. You have the right to decline such requests or, if you change your mind, to withdraw consent later on.

We do not sell your personal information to third parties for their own marketing or commercial purposes. We may share certain information with third parties (like advertising or analytics partners) in ways that are intended to provide and improve the Service (see below), but this is done in compliance with applicable privacy laws and, where required, with your consent or ability to opt-out.

In-App Purchases and Subscriptions

The I Can App offers an optional Premium Subscription through in-app purchases, providing access to exclusive features, including:

Full Daily Push Notification Quotes – View the entire quote directly in notifications without opening the app.
Ad-Free Experience – Enjoy uninterrupted use of the app without advertisements.
Auto-Renewal for Convenience – Stay subscribed without interruptions.
Subscription Management – Restore, manage, or cancel subscriptions anytime via Apple or Google account settings.
3-Day Free Trial – Start with a free 3-day trial and experience all Premium features before committing. You will not be charged during the trial period. If you don’t cancel the subscription before the trial ends, you will be charged for the next billing cycle.

Privacy Policy Regarding the Free Trial

Trial Activation: Upon activating the free trial, your subscription will automatically begin once the trial period ends unless cancelled.
Data Usage During Trial: During the free trial, we will collect data as part of your use of Premium features. This data is handled according to our Privacy Policy. If you choose not to continue the subscription, your data will be deleted as per our data retention policy, unless required by law.

Subscription Billing: Premium subscriptions are billed on a monthly recurring basis. This means that once you subscribe, your chosen payment method will be charged each month automatically on a recurring cycle. Auto-Renewal is in effect for subscriptions by default to ensure uninterrupted service. Your subscription will renew each month on its renewal date unless you cancel it at least 24 hours before the end of the current billing period.

Managing or Cancelling Your Subscription: You have full control over your subscription and can manage or cancel it at any time. Subscription management is done through your app store platform:

If you subscribed via the Apple App Store (iOS), you can cancel or modify the subscription by going to your device’s Settings > [Your Name] > Subscriptions (for iOS 15 and later, or the equivalent path on your device) or by opening the App Store and viewing your Apple ID account subscriptions.
If you subscribed via the Google Play Store (Android), you can cancel or modify via the Google Play Store app > Menu > Payments & Subscriptions > Subscriptions.

Upon cancellation, you will continue to have access to premium features until the end of the current paid period. The subscription will not renew for the next period, and you will not be charged further. Downgrading from Premium to the free tier means ads may resume and daily notifications may be limited as per the free usage policy.

Refunds and Disputed Charges: All in-app purchases and subscriptions for the I Can App are processed through Apple or Google’s in-app purchase systems (depending on your device). This means billing, receipts, and refund policies are governed by Apple or Google, respectively.

If you believe you were charged incorrectly or if you experienced unauthorised charge, you should follow the refund request process of the platform you used. For Apple, you can request a refund via Apple’s support or reportaproblem.apple.com; for Google Play, you can use the refund request form or their support channels.
We do not process refunds directly because we do not have access to your payment information or the ability to issue refunds through the App Stores. The App Store or Play Store has to process the refund.
If you have trouble securing a refund through Apple or Google, you can contact our support at I-Can-App@outlook.com. We will do our best to assist you (for example, by providing information needed by Apple/Google support), but the final decision on refunds is made by the platform provider according to their policies.
Any promotional free trials (if offered) will clearly state their duration and the date on which you would be charged if you do not cancel before the trial ends. We encourage you to keep track of trial period dates to avoid unintended charges.

Payment Information: We want to reiterate that the I Can App itself does not receive or store your full payment card details when you subscribe. Payments are handled securely by Apple or Google’s systems (and/or by any payment processor they use, such as Stripe for Google in-app billing). These third-party payment processors are PCI DSS compliant, meaning they follow strict industry standards for protecting payment data. Please refer to Apple’s or Google’s payment and privacy terms for more information on how your financial data is handled by those companies. (See also Payment Processing in the Third-Party section below for more details.)

Use of AI and Personalisation

(This section describes how the app uses artificial intelligence to personalise content, and how that affects your data.)

AI-Generated Content: The I Can App uses advanced artificial intelligence technology to generate some of its inspirational and motivational quotes or other content. This helps create engaging and personalized material tailored to your interests and needs. For example, an AI system may combine different motivational messages or adapt quotes to better fit topics you care about.
Data Collection for Personalisation: To tailor the content to you, the app may use certain data you provide and interactions you make within the app. This can include the categories of quotes you subscribe to, your marked favourites, or general usage patterns (e.g., which notifications you open or which types of quotes resonate with you). Important: We use this data solely to enhance your personal experience in the app – e.g., to decide which quote to send you next – and for no other purpose. It is not sold or shared for marketing; it’s internally used to make sure you get relevant and uplifting content.
Personalized User Experience: Based on the above data, the app’s AI may select or generate quotes that align with your preferences. For instance, if you often engage with quotes about “perseverance” or “fitness,” the app will aim to show you more of those. The goal is to ensure each notification or piece of content feels meaningful and relevant to you, thereby maximizing its positive impact.
Accuracy and Authenticity of AI Content: We strive to ensure the AI generated quotes are accurate and valuable. However, please note that AI generated content might occasionally have imperfections. For example, an AI generated quote might be inspired by known sources or personalities, but it might not be an exact verbatim quote. We advise users to treat the AI content as sources of inspiration rather than exact quotations of real individuals, since there’s a small chance of misattribution or context loss by the AI. We appreciate your understanding of this aspect of the Service.
User Control: You remain in control of your experience. If you ever feel that the personalized content is not for you, you have the option to adjust your preferences. For example, you can change your chosen categories of interest in the app settings to influence the type of content you receive. If you wish to opt-out of AI-personalized content entirely, the primary way would be to discontinue use of the app (since the personalized content is a core feature of our Service). We do not currently offer a non-personalized version of the daily content, but you can limit personalisation by restricting what data you provide (for instance, not selecting specific topics, or disabling notifications altogether – though that will significantly limit the app’s functionality).
Feedback and Reporting: We welcome feedback! If you come across a quote or any content generated by the app’s AI that you find inappropriate, incorrect, or not useful, please let us know. There may be an in-app feedback option, or you can always contact us at our support email. User feedback helps us improve the AI algorithms and the quality of content over time.
Changes to AI Usage: As technology and our features evolve, we may update how we use AI in the app. We will update this Privacy Policy (and notify you, as described in the Changes to This Privacy Policy section) if any significant changes are made to how AI affects your personal data or experience. Continued use of the app after such updates will constitute your acceptance of the changes, but we will always give you a clear notice so you can make an informed decision.

By using the “I Can” application, you acknowledge and agree to the above terms regarding the use of AI and personalisation features in the app.

Retention of Your Personal Data

We will retain your Personal Data only for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. The length of time we keep information depends on the type of information and the purposes for which we collected it. We follow standard retention practices for different categories of data:

Account and Profile Data: We keep your account information (such as your name, email, account credentials, and profile details) for as long as you maintain an active account with us. If you choose to delete your account or request that we delete your personal information, we will do so, following the process described in Delete Your Personal Data below. (In some cases, we may retain certain limited information even after account deletion, if required for legal compliance or legitimate business purposes, as explained further below.)
Payment and Transaction Data: Records of your purchases, subscriptions, and transactions are retained as long as necessary for financial record keeping and compliance. This typically means we will retain this data for the duration required by tax laws, audit requirements, and applicable financial regulations. For example, we may retain invoicing or transaction history for a number of years as mandated by law (e.g., many jurisdictions require keeping records for 7 years for tax auditing). After the necessary retention period, we will securely delete or anonymise payment and transaction data.
Usage and Analytics Data: Usage data (logs, analytics metrics, and similar data) is retained for internal analysis and service improvement purposes. We generally keep raw usage data for a shorter period of time – just long enough to analyse trends and improve the app’s performance. Wherever feasible, we anonymise or aggregate this data after a set period (for instance, we might only keep detailed analytics logs for 12-24 months and retain only aggregated statistics beyond that). We may retain certain usage data longer if needed for security (e.g., investigating fraud or abuse) or if we are legally obligated to retain it.
Marketing and Communications Data: If you have given consent to receive marketing emails or newsletters, we will retain the information about your marketing preferences (and your contact details for marketing) until you opt out or unsubscribe from those communications. Once you opt out, we will stop sending you marketing messages and will keep your contact information only as needed to honour your opt-out (for example, we maintain a suppression list of email addresses of individuals who have unsubscribed, to ensure we don’t accidentally send you further emails). Similarly, if you’ve agreed to receive push notifications and later disable them, we will note that preference. We retain records of communications (like support emails you send us) as long as needed to manage our relationship with you and as required for our internal reporting and legal obligations.

In all cases, even if you request deletion of your data, we may retain certain minimal information if required to comply with legal obligations, resolve disputes, and enforce our agreements. For example, we might keep data to comply with a court order, tax law, or to resolve a dispute regarding a transaction. When we no longer have any legitimate need to retain your personal data, we will delete it or anonymise it so that it can no longer be associated with you.

Transfer of Your Personal Data

Your information, including Personal Data, may be processed at the Company’s operating offices and at servers and facilities located in other countries. In other words, the information we collect from you may be transferred to – and stored on – computers or servers outside of your state, province, or country (including outside of the European Economic Area or Australia). These other jurisdictions might have data protection laws that are different from those in your home jurisdiction.

However, we take steps to ensure your privacy remains protected:

When we transfer personal data internationally, we do so in accordance with applicable privacy laws. For example, if we transfer data from the European Economic Area (EEA) or UK to another country, we will ensure there are appropriate safeguards in place (such as Standard Contractual Clauses approved by the European Commission, or transferring to organizations under an adequacy decision) to protect that data.
We have measures in place to ensure any recipient of the data provides a level of protection equivalent to that provided under local law. We will not transfer your Personal Data to an organization or a country unless we are satisfied that adequate controls are in place, including the security of your data and other personal information.

Your use of the Service, or your submission of information to us, represents your consent to this transfer, storage, and processing of your information in countries outside your own. We understand that cross-border data transfers can carry additional risks, and we are committed to handling all personal data with the utmost care, no matter where it is processed.

Disclosure of Your Personal Data

You have the right to request deletion of the personal data we have collected about you, and we are committed to honouring such requests in accordance with applicable laws.

In-App Deletion: The I Can App may provide a feature (for example, in an account settings or privacy settings menu) that allows you to delete certain information directly. This could include the ability to delete your profile or specific data points you’ve provided. We will clarify in the app what data can be self-deleted and what the consequences are (for instance, deleting your account will typically remove your profile and data permanently from our active systems).
By Request: For any data you cannot delete yourself via the app, you may contact us to request deletion. The easiest way is to send us an email at I Can-App@outlook.com with your request. For example, you can request that we delete your account entirely and erase all personal data associated with it. We may need to verify your identity (to ensure that the person requesting deletion is actually the account owner) before processing the request. Once verified, we will work to promptly delete your data from our systems and will confirm with you when it’s done.
Partial Deletion: If you want to delete only some personal data (such as changing your mind about sharing a piece of info in your profile), you can usually update or remove that information via your account settings. You also have the right to ask us to correct or update any inaccurate personal data (see Your Rights below for more details on corrections and access).
Data That Cannot be Immediately Deleted: Please note that there are situations where we may not be able to fully comply with a deletion request— for example, if we are required to keep certain data for legal reasons or if it’s technically infeasible to remove it from backup systems immediately. If we must retain any data for legal compliance, we will isolate it from active use and ensure it’s only used for that legal purpose. Also, some data may remain in our archives or backups for a short period until those are cycled out (we have processes to eventually purge deleted data from backups, though not instantaneously).
Effect on Service: If you request deletion of essential data (like information needed to maintain your account), you may lose access to the Service or certain features. For instance, if you delete your account or required credentials, you will not be able to log in or receive notifications anymore.

We will respond to your deletion request within the timeframe required by law (for example, under GDPR we generally have one month to respond, under CCPA we aim to confirm receipt within 10 business days and fulfill within 45 days).

Delete Your Personal Data

We may disclose your personal data under certain circumstances as outlined below. Whenever we disclose data, we do so only as permitted by law and with appropriate safeguards.

Business Transactions

If the Company is involved in a merger, acquisition, investment, or asset sale, your Personal Data may be transferred to another company as part of that deal. In such cases, we will ensure that the new owner is contractually obligated to respect the terms of this Privacy Policy (or you will be provided with an updated privacy policy if the purposes for which your data will be used change). We will notify you (for example, via email or a prominent notice in the app) before your personal data is transferred and becomes subject to a different privacy policy.

Law enforcement

Under certain circumstances, we may be required to disclose your Personal Data if required by law or in response to valid requests by public authorities. This means that if we receive a lawful subpoena, court order, or similar legal demand, we may need to provide the requested data. We will only do so after evaluating the request and ensuring it has a proper legal basis. If allowed, we may attempt to notify you of such requests (however, in some cases we might be legally prohibited from notifying you).

Other legal requirements

We may disclose your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation (e.g., responding to lawful government requests or tax authorities).
Protect and defend the rights or property of the Company (for example, to enforce our Terms of Service or investigate potential violations).
Prevent or investigate possible wrongdoing in connection with the Service (such as fraud, abuse, security incidents, or technical issues).
Protect the personal safety of Users of the Service or the public. For instance, if we suspect someone’s safety is at risk, we might notify authorities or individuals to prevent harm.
Protect against legal liability. This includes using data to defend ourselves in legal proceedings or to pursue remedies available to us (for example, disclosing information to our legal counsel and insurers).

In all such cases, we will only share the minimum information necessary and will ensure any third parties involved are obligated to keep your information confidential.

Security of Your Personal Data

We take the security of your personal data very seriously and implement a range of administrative, technical, and physical safeguards to protect it:

Encryption: All communication between your app and our servers is protected by encryption protocols such as HTTPS/TLS. This means that data transmitted to us (for example, when you register or log in, or when data is sent from the app to our servers) is encrypted in transit and cannot be easily intercepted by third parties. For sensitive information, we also use encryption at rest (storage encryption) on our databases or servers, adding another layer of protection.
Secure Payment Processing: As noted, we do not process payments ourselves – we rely on reputable third-party payment providers (Apple, Google, PayPal, Stripe, etc.) which are PCI DSS compliant. These providers are experts in handling payment data securely. We transmit payment-related information to them through secure channels and never store full credit card numbers on our systems.
Access Controls: Access to personal data within our organization is restricted on a need-to-know basis. Only authorized personnel (for example, a customer support agent assisting you, or a developer troubleshooting an issue) can access personal data, and even then, only the minimum necessary data. Our staff are bound by confidentiality obligations and trained on data privacy and security practices.
Security Testing and Updates: We regularly update our application and backend systems with security patches and improvements. We employ industry-standard security measures such as firewalls, intrusion detection systems, and anti-virus scanning. We also periodically review our security procedures and may engage in penetration testing or security audits to identify and address potential vulnerabilities.
Data Minimization: We strive to collect only the data that we need. By minimizing the amount of personal data stored, we reduce the risk associated with a potential breach. For example, if certain information is no longer needed, we anonymise or delete it as described in the retention section above.
Incident Response: In the unlikely event of a data breach or security incident, we have an incident response plan in place. This plan includes notifying affected users and relevant authorities (such as privacy regulators) as required by law, and taking immediate steps to mitigate the breach and prevent future occurrences. We also maintain logs and monitoring so that we can detect unusual activity quickly.

While we employ robust security measures, it’s important to understand that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. However, we constantly work to protect your data and to update our security practices in line with the latest threats and technologies. We also encourage you to use a strong unique password for your account and to keep your login credentials confidential to help keep your own data safe.

If you have reason to believe that your interaction with us is no longer secure (for example, if you suspect that your account has been compromised), please contact us immediately so we can assist.

Third-Party Data Sharing and Processing

To provide the I Can App’s services efficiently, we rely on certain third-party services and partners who process data on our behalf. We want to be transparent about who these third parties are and what they do:

Analytics and Data Optimization

We utilize analytics services (such as Google Analytics and similar tools) to collect and analyse data about how users use our app. These analytics providers help us understand usage patterns so we can improve functionality and user experience.

Data Processed for Analytics may include:

Usage Statistics: e.g., which screens or features are most popular, how often users open the app, and typical session lengths.
Interaction Data: e.g., buttons tapped, settings toggled, or any other actions within the app. This helps us figure out which features are used and how.
Device Information: e.g., device model, operating system version, unique device identifiers, and crash logs. This helps us diagnose issues (for instance, if a particular model has a bug) and optimize performance for common device types.

We configure our analytics tools to aggregate and anonymise data wherever possible. For example, we look at overall trends (like “10% of users use feature X”) rather than focusing on individual user behaviour. Google Analytics may use cookies or mobile identifiers to do its job. We have settings in place to avoid collecting any unnecessary data through analytics (such as not recording precise location or any sensitive personal info in analytics).

All analytics data is handled in accordance with this Privacy Policy and the privacy policies of the analytics providers. Google’s ability to use and share information collected by Google Analytics about your visits to the app is restricted by the Google Analytics Terms of Use and Google’s Privacy Policy. You can opt-out of Google Analytics data collection in some cases by using tools like the Google Analytics Opt out Browser Add-on for web, or by enabling “Limit Ad Tracking” / “Opt out of Ads Personalisation” on your mobile device which can reduce the information Google Analytics collects on mobile.

Marketing and Communication

We sometimes send out emails and notifications to our users (for example, a newsletter with motivational tips, or a product update announcement). To manage these communications, we use third-party email service providers. Currently, we might use services such as Microsoft Outlook (and related services) for direct email and may use an email marketing platform (for example, Mailchimp or similar) for newsletters or bulk communications.

Data Processed for Communications:

Email Address and Name: We use your email to send you the communications you signed up for. If you gave us your name, we might personalise the email with your name.
Engagement Metrics: Our email tools often provide metrics like whether you opened an email, or clicked on a link inside it. We use these metrics to gauge the effectiveness of our communications and to improve content. For example, if few people open a certain type of email, we’ll learn to send it at a different time or adjust the content.
Unsubscribe Management: If you unsubscribe from our mailing list, these services help ensure you don’t receive further emails. They manage an “opt out” list which we honour.

We include an “unsubscribe” link in every marketing or newsletter email we send. If you don’t want to receive these emails, you can click that link or contact us to be removed. Transactional or service-related emails (like an email confirming you changed your password, or responses from support) may still be sent as needed, since those aren’t promotional in nature.

We may also communicate with you through push notifications in the app for marketing or promotional purposes, but only if you have given permission. You can always opt out of promotional push notifications by adjusting the in-app settings or your device notification settings for the I Can App.

Payment Processing

As mentioned earlier, we partner with trusted third-party payment processors to handle any transactions (such as subscription payments or other in-app purchases). These include:

Apple App Store In-App Payments (for iOS users)
Google Play Store In-App Payments (for Android users)
PayPal (if we ever offer an option to pay via PayPal for certain services)
Stripe or other payment gateways (for processing credit/debit card payments outside of the app stores, if applicable)
Standard credit card networks like Visa and Mastercard (operated through the above processors)

When you make a purchase in the I Can App, the payment transaction is routed through these third parties. They are responsible for processing your payment information securely.

Data Processed for Payments can include:

Payment Card Details: such as your card’s number, expiration date, and security code, if you enter a card. (For in-app purchases via Apple/Google, you typically do not enter card details directly into our app; you use the payment method stored in your Apple or Google account.)
Transaction Details: like the amount charged, the date and time of the transaction, a description of the purchase (e.g., “1-Month I Can App Premium Subscription”), and an order or transaction ID.
Billing Information: such as the billing name and address linked to the payment method, which might be used to verify the transaction and for receipt generation.
Fraud Prevention Data: Payment processors may use additional data (like device information or transaction history) to detect and prevent fraud.

These payment partners are PCI-DSS compliant and specialize in secure payment handling. The I Can App itself does not see or store your full financial account numbers. For example, when you purchase a subscription on iOS, Apple provides us a confirmation that payment was made, but we never see your actual credit card number. We might see some limited info such as the card type and last 4 digits (for reference on receipts) or a tokenized transaction ID, but that’s it.

Please review the privacy policies of Apple, Google, PayPal, Stripe, or any relevant payment provider you use, for details on how they handle your payment data. If you have questions about payment security, those providers’ documentation is the best resource, as they are the ones processing the information.

If you suspect any unauthorised transaction or issue with billing, contact us and/or the relevant payment provider immediately so we can help investigate (see Subscriptions and In-App Purchases above for more on handling disputes).

Advertising Services

We want to keep the basic version of the I Can App free and accessible, and one way we do that is by showing advertisements to non-subscribers. We work with advertising partners such as Google Ads/AdMob and possibly others to display ads in the app. These partners help us deliver ads that are relevant to users, and in return we may earn revenue that supports the app’s development.

Data Processed for Advertising may include:

Ad Identifiers: Mobile advertising ID (such as Google’s Advertising ID on Android or Apple’s Identifier for Advertisers (IDFA) on iOS). This is a unique, resettable number assigned by your device for advertising purposes. We (and ad partners) use this ID to ensure you don’t see the same ad too many times, and to enable certain ad features like frequency capping, aggregated ad reporting, or fraud detection.
Preferences and Profiles: General information about your interests as inferred from your usage of our app or others. For example, if you often view content about fitness, you might see more fitness-related ads. Our advertising partners might also have their own profile of your interests based on websites or apps you’ve used (if you have allowed tracking – see below on how you can control this).
Location (General): We do not give advertisers your precise location. However, ads may be targeted roughly by your general location (such as city or country) based on your IP address or device settings, in order to show content relevant to your region (for example, not showing an ad in Spanish if your device language and location are set to English in Australia). If our app ever explicitly asks for location access for some feature, we will not share precise GPS location with advertising partners without your clear permission.
Ad Engagement Info: Data on how you interact with ads in our app. For instance, if you tap an advertisement or watch a video ad, that event is logged. This helps advertisers measure the effectiveness of their campaigns and helps us get paid (e.g., some advertisers pay per click or view). It also helps in not showing you ads you’ve already seen or interacted with frequently.

Our ad partners may use cookies or similar tracking technologies to collect this information within our app (cookies in a mobile app context might be an SDK doing similar tracking). All our advertising practices are intended to comply with Google Play and Apple App Store policies. This means, for example, on iOS devices we honour Apple’s App Tracking Transparency (ATT) requirements: if our app engages in what Apple defines as “tracking” (linking user or device data collected from our app with data collected from other companies’ apps/websites for targeted advertising), we will present the iOS permission prompt to ask for your consent. If you decline, we will not allow advertising SDKs to track you across other apps and will serve only contextual ads (or no targeted ads) as per Apple’s guidelines.

Your Choices for Advertising: You have control over how ads are personalized to you:

On Android: You can opt out of personalized advertising by going to Google settings on your device and selecting “Opt out of Ads Personalisation.” You can also reset your Advertising ID from time to time. Our app respects this setting – if you opt out, our ad providers will not use your data to target ads based on your profile. You may still see ads, but they may be less relevant to your interests.
On iOS: If you give permission for tracking, our ad partners may use data from other apps to personalise ads for you. If you deny permission, our ad partners are informed not to track you for targeted ads. You can also disable tracking for all apps by going to Settings > Privacy > Tracking on your iPhone and toggling off “Allow Apps to Request to Track.” Additionally, iOS has an “Reset Advertising Identifier” option and a “Limit Ad Tracking” (older iOS versions) which we also honour.
In-App Preferences: If our app provides a setting to turn off personalized ads or an in-app “Do Not Sell/Share My Personal Info” link (for California residents, for instance), you can use that as well to register your preference. We currently do not “sell” personal data in the traditional sense, but the sharing of your data with ad networks for targeted advertising could be considered a “share” under some laws like the CPRA. If you opt out via an in app option or by contacting us, we will ensure that your data is not used for targeted advertising to the best of our ability.

We carefully choose our advertising partners to ensure they have strong data privacy and security practices. We also contractually require that any data they collect through our app is used in accordance with applicable privacy laws and solely for the purposes of providing their services to us (e.g., serving and analysing ads). We do not share information that directly identifies you (such as your name or email) with advertisers without your consent. Advertisers see advertising IDs, not your personal contact info.

Lastly, we aim to ensure that the ads shown in I Can App are appropriate for our audience. We do not knowingly allow ads with inappropriate content (such as explicit, violent, or misleading ads), and our partners usually have content filters in place. If you ever see an ad that is offensive or seems out of place, please take a screenshot if possible and notify us so we can address it with the ad provider.

Remarketing

In addition to in-app ads, we may use remarketing (retargeting) services. Remarketing means we (or third parties on our behalf) could show you ads for the I Can App on other websites or apps after you’ve used our Service. For example, if you visit our website or use the app, you might later see an ad for I Can App on a social media feed or another website. This is a common advertising practice to reach people who have shown interest in our Service.

How this works: A small piece of code (often a cookie or pixel) from the remarketing service is used to note that you visited or interacted with us. Then, if you visit another site or app that is part of the same ad network, the network recognizes the cookie/identifier and can serve our ad to you. We might use platforms like Google Ads or Facebook Ads for this purpose.

Privacy considerations: Remarketing services typically use cookies or mobile ad IDs. They do not know your name or who you are; they just know that a device with your identifier showed interest in our app. If you don’t want to see retargeted ads from us, you can disable ad tracking as described above (which covers this scenario too). You can also clear your cookies or use browser settings/plugins to block third party cookies (for web), which will limit remarketing. Many ad networks also allow you to opt out of retargeting specifically – for example, Google has Google Ads Settings where you can opt out of personalized ads, and the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA) have opt-out pages for member companies.

We only use remarketing in accordance with legal requirements. For instance, some jurisdictions require us to get consent for the use of certain cookies or trackers – we will do so if applicable.

Push Notification Services

(This is not explicitly in the original third-party list, but we add it to clarify how push notifications are delivered.)

The core function of the I Can App is to send you motivational quotes and reminders via push notifications. To deliver these notifications, we rely on device operating system services and potentially third-party services:

On iOS (Apple) devices, we use Apple’s APNs (Apple Push Notification service). When you install the app and agree to receive notifications, Apple’s service helps route our messages to your device. We have to register your device’s “push token” (an anonymous identifier) with Apple to send notifications. This token is just a code; it doesn’t reveal personal info to us beyond what we already know (like we know it’s tied to your account or installation).
On Android devices, we may use Firebase Cloud Messaging (FCM) or the relevant Google push service. Similar to Apple, it uses a token to deliver messages to your device.

These notification services are considered third-party in that Apple or Google’s servers are involved in delivering the message. However, they do not access the content of your notifications beyond what is needed to route them. The content of notifications in I Can App is generally not sensitive (they are motivational quotes or simple messages you configured).

We do not currently use any analytics specifically tied to push notifications (for example, we are not tracking at an individual level whether you opened a particular notification or not, aside from basic counts for improving the service). In the future, if we decide to analyse push notification delivery or open rates in detail, we will update this policy and likely treat any such data as part of “Usage Data” subject to the same protections.

Remember, you can disable push notifications at any time in your device settings for our app. If you do so, our notification service providers will stop delivering messages to you. Disabling notifications may significantly reduce the utility of the app (since sending you inspiring notifications is a primary feature), but it’s your choice. If you keep notifications enabled, you can rest assured that we treat the data involved (like your push token) with care and only use it to send you the notifications you signed up for.

Children’s Privacy

Not Intended for Young Children: Our Service is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13 years old. If you are under 13, please do not use the app or provide any information about yourself to us. If we learn that we have inadvertently gathered personal data from a child under 13 without proper consent, we will take steps to delete that information promptly.

For users in certain regions, the age threshold may be higher (for example, 16 under the GDPR in some EU countries, or as defined by local laws for child data). We aim to apply the stricter age limit if required by those jurisdictions.

Parental Consent:In the event that the I Can App offers features that could be used by children (13 or older in the US, or the relevant minimum age in other jurisdictions) with parental oversight, we will follow applicable laws such as the U.S. Children’s Online Privacy Protection Act (COPPA). This means if a user identified as under 13 (or under the applicable age) tries to register, we will require verifiable parental consent before any personal data is collected or processed.

Verifiable parental consent could involve steps such as: the parent/guardian contacting us via a specific process, providing a form of identification or payment (as allowed under COPPA to verify identity), or other reasonable means to ensure consent is coming from a parent or legal guardian. We will explain at that time what information we intend to collect from the child and how we will use it, so the parent can make an informed decision.

Parental Rights:If you are a parent or guardian and you become aware that your child under 13 (or under the relevant age of consent) has provided us with Personal Data without your consent, please contact us. As a parent/guardian, you have the right to review the personal information we have collected from your child, request deletion of that information, and refuse to allow further collection or use of the child’s information. We will assist you in these requests. For example, you can email us at I-Can-App@outlook.com to ask what information we have about your child (if any) and to request that we delete it.

We do not require a child to disclose more information than is reasonably necessary to use the app. Typically, since our app is about providing motivational content, a child user might only need to provide an email (with parental approval) to create an account. We won’t use children’s data for marketing or publicity.

Encouragement of Parental Guidance: We strongly encourage parents and guardians to supervise their children’s use of apps and to educate their kids about online privacy and safety. If you have any questions or concerns about our Children’s Privacy practices, you can reach out via the contact information at the end of this policy.

Links to Other Websites

Our Service may contain links to third-party websites or services that are not operated by us. For example, the app might occasionally have content with a link to an external site, or our website might link to partners or social media pages.

If you click on a third-party link, you will be directed to that third party’s site or application. We want to emphasize that this Privacy Policy does not apply to third-party websites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly advise you to review the Privacy Policy of every external site or service you visit. Those sites will have their own policies about how they collect and use data, and they may use their own cookies or other tracking technologies.

For example, if you follow a link to a news article or to a social media page from our app, any data those sites collect from you is governed by their policies, not ours. If you interact with a social media feature (like a “Share on Facebook” button), the interaction may allow that social media platform to collect some data (such as the fact that you shared something from our app).

Nonetheless, we try to be careful with what we link to. We won’t knowingly link to malicious or untrustworthy sites. If something we link to is found to be unsafe or misusing user data, we will remove that link as soon as possible.

Compliance with Global Privacy Laws

We value the privacy rights of all our users worldwide and strive to comply with major privacy regulations. This section outlines how we address key laws:

California Online Privacy Protection Act (CalOPPA): We comply with CalOPPA by posting this Privacy Policy, which discloses the categories of personal data we collect and with whom we share it. We also honour Do-Not Track signals as described below. We do not distribute personal information to third parties for direct marketing without consent.
EU General Data Protection Regulation (GDPR): For our users in the European Union (and EEA), we abide by the GDPR’s requirements. This means we have a lawful basis for processing your data (as described above), we uphold your rights to access, correct, delete, or port your data, and we have implemented appropriate data protection measures and contractual agreements (like Data Processing Addendums with our vendors) to safeguard your information.
California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA): For California residents, we extend all rights provided under CCPA and CPRA. We do not sell personal information as defined under CCPA. We disclose the categories of personal information we collect and the purposes (as done in this Privacy Policy), and you have the right to opt-out of any “sale” or “sharing” of your data, the right to know what is collected and to delete it (with certain exceptions), the right to correct inaccurate information, and the right to equal service and price even if you exercise your privacy rights (no discrimination). See the California Privacy Rights section below for more details on how to exercise these rights.
Australian Privacy Act & Australian Privacy Principles (APPs): As an Australian-based company, we adhere to the APPs which include principles such as open and transparent management of personal information, anonymity options, collection of solicited personal information, dealing with unsolicited information, notification of collection, use and disclosure (including cross-border disclosure), data quality and security, access and correction rights. In practice, this means you can contact us to find out what personal information we hold about you and request access or corrections. We will take reasonable steps to secure personal data and will not use or disclose it for purposes other than those stated at collection (unless an exception under the APPs applies). If you have a privacy concern, you can contact us and we will address it; if you’re not satisfied, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

(We also comply with other relevant laws in other jurisdictions to the extent they apply, even if not listed here. If you have a question about a specific law, feel free to ask us.)

Your Privacy Rights – Region Specific

Depending on your residency, you may have certain privacy rights. Below, we summarize key rights under GDPR for EU users and under CCPA/CPRA for California users. We extend similar courtesy to all users where feasible, so even if you’re not in one of these regions, you can still contact us to inquire about your data.

Rights Under the GDPR (EU/EEA Users)

If you are located in the European Union, United Kingdom, or a jurisdiction with similar laws, you have the following rights regarding your personal data:

Right to Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to request a copy of the data we hold on you. We will provide this in a commonly used electronic format. (This is sometimes called a “Data Subject Access Request.”)
Right to Rectification: If the personal data we have about you is incorrect or incomplete, you have the right to request that we correct or update it. For example, if you change your name or email, or you find a typo in data we have stored, let us know and we will fix it.
Right to Erasure: You can request that we delete your personal data. This right is also known as the “Right to be Forgotten.” We will honour such requests so long as we do not have a compelling legal reason to retain the data. (See the Delete Your Personal Data section for more info on how deletion works.)
Right to Restrict Processing: You have the right to ask us to restrict or suspend processing of your personal data if you contest its accuracy, if the processing is unlawful and you prefer restriction over deletion, if we no longer need the data but you need it for legal claims, or if you have objected to processing (see #5) and verification of our legitimate grounds is pending. When processing is restricted, we will still store your data but not use it until the issue is resolved.
Right to Object to Processing: You may object to our processing of your personal data when that processing is based on legitimate interests or when done for direct marketing. If you object on legitimate interest grounds, we will review whether our reasons override your rights and freedoms; if not, we will cease the processing in question. If you object to processing for direct marketing, we will stop processing your data for those purposes immediately. (For example, you can object to receiving marketing emails or targeted push notifications, and we will honour that.)
Right to Data Portability: You have the right to request that we provide your personal data to you (or to another data controller) in a structured, commonly used, machine-readable format. This typically applies to data you provided us directly (e.g., your profile information or content you’ve uploaded), and when the processing is based on consent or contract and carried out by automated means. We will facilitate this by, for example, giving you a CSV or JSON file of your data if you request it.

To exercise any of these rights, please contact us at I-Can-App@outlook.com with your request. We may need to verify your identity before fulfilling the request (to ensure that we don’t give your data to someone else). We will respond to your request within one month, or let you know if we need more time (which can be an additional two months for complex requests, but we’ll inform you and explain why if so).

Additionally, you have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe we have infringed your privacy rights. For example, EU users can contact the supervisory authority in their country of residence. You can find contact details for DPAs on the European Data Protection Board’s website. Of course, we would appreciate the chance to address your concerns directly first, so we encourage you to reach out to us with any issue.

We take these rights seriously. Our aim is to be transparent and helpful in allowing you to exercise control over your personal data.

Rights Under the CCPA/CPRA (California Residents)

If you are a resident of California, U.S.A., you have specific privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include:

Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and share or sell (if applicable) about you. This includes the categories of personal information, the categories of sources from which the info was collected, the business or commercial purpose for collecting or sharing, the categories of third parties with whom we share the personal info, and the specific pieces of personal information we hold about you. Essentially, you can ask for a report of your personal data and our data practices regarding your information.
Right to Delete: You have the right to request that we delete personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions. For instance, we may not delete information that is necessary to complete a transaction you requested, to detect security incidents, to comply with a legal obligation, or other exceptions allowed by law. We have outlined how deletion works in Delete Your Personal Data above; those principles apply here as well.
Right to Correct: You have the right to request correction of any inaccurate personal information that we maintain about you. If you find any of your data is wrong or outdated, let us know and we will correct it (after verifying your identity and the accuracy of the new information).
Right to Opt-Out of Sale or Sharing of Personal Information: The CCPA/CPRA gives you the right to direct us not to sell your personal information to third parties. “Sale” is broadly defined to include some sharing of data for valuable consideration. CPRA also covers the right to opt-out of “sharing” which refers specifically to sharing for cross-context behavioural advertising (targeted advertising). Important: The I Can App does not sell your personal data for money. We also do not share personal data for cross context behavioural advertising outside of the context of allowing ads to run in our app as described (which might be considered “sharing” of device identifiers with ad networks). If you do not want your data to be used for personalized advertising, you can opt out as described in the Advertising section (by using device settings or contacting us). We treat such preferences as CCPA opt-out requests. You may also use a “Do Not Sell or Share My Personal Info” link or setting if provided in the app/website. If we ever expand our data sharing practices, we will provide a clear opt-out mechanism.
Right to Limit Use of Sensitive Personal Information: CPRA grants the right, in certain cases, to limit the use and disclosure of sensitive personal information (SPI) if a business uses it for reasons other than those allowed. The I Can App does not collect sensitive personal info like government IDs, full account passwords, precise geolocation, racial or ethnic origin, etc., beyond possibly an email and password (which are necessary for your account) and basic demographics if you provide them. If in the future our app collects any sensitive info, we will only use it for necessary purposes (like a payment card number solely for completing a transaction) or we will provide an option to limit its use.
Right of Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we won’t deny you our services, charge you a different price, or provide a different level or quality of service just because you exercised your privacy rights. (However, please note that if you ask us to delete data that is essential for providing the service, we might not be able to continue providing that service – for example, deleting your account data will mean you can’t log in. That’s considered a consequence of deletion, not discrimination. We will always be fair and explain any such consequences.)

Exercising Your California Rights: To make a request under CCPA/CPRA, you (or your authorized representative) can contact us at I-Can-App@outlook.com with the subject line “CCPA Request” (or something similar that clearly indicates what you want). Please specify which right you seek to exercise (Know, Delete, Correct, or Opt-Out). We will need to verify your identity to a reasonable degree of certainty before fulfilling certain requests (especially for the Right to Know specific pieces of information or Right to Delete). Verification may include matching information you provide in the request with information we have on file (such as confirming your email address, last transaction, etc.).

If you use an authorized agent to submit a request on your behalf, we will require proof of the agent’s authority and verification of your identity directly, unless the agent has power of attorney under California law.

For opt-out of sale/sharing requests, we have a simpler process: you can simply instruct us via email or use any provided mechanism (like a “Do Not Sell or Share” link if available). Opt-out requests do not need elaborate verification – we may ask for some minimal information to ensure we apply the request to the correct account/device.

We aim to respond to verifiable consumer requests within 45 days as the law requires. If we need more time (up to another 45 days, totalling 90 days maximum), we will inform you of the reason and extension in writing.

Again, we want to stress that our policy is not to monetize your personal data by selling it to third parties. Any sharing we do is principally for providing the service (with service providers) or for advertising as described, which you can control. If you have any questions or concerns about your personal information or these rights, please contact us — we are here to help and will gladly clarify any of our practices.

Do Not Track Signals

Web browsers often have a “Do Not Track” (DNT) feature that can send a signal to websites indicating you do not wish to be tracked across sites. The online industry is still working on defining exactly what it means to honour DNT signals, and there is no universal standard adopted by all sites or apps yet.

Because the I Can App is primarily a mobile application, DNT signals (which are a web browser mechanism) may not directly apply to the app’s operation. However, if you use our website and your browser sends a DNT signal, we currently treat it similarly to an opt-out of analytics/advertising cookies. We already limit cross-site tracking to the best of our ability and focus on first-party data uses.

For in-app data, we give you equivalent controls through the settings described earlier (like opting out of personalized ads).

In summary, our stance is to respect user preferences regarding tracking: if you tell us (or use a tool to tell us) you don’t want tracking for advertising, we will honour it. As standards emerge or if DNT becomes standardized and legally required, we will update our approach accordingly.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make significant changes, we will let you know via appropriate means:

We will post the updated Privacy Policy on this page (and update the “Last updated” date at the top).
If changes are substantial, we will also provide a more prominent notice. This could be via an in-app notification or alert, an email to you (if you have provided an email and agreed to such communications), or a notice on our website’s homepage. For example, if we were to start collecting new types of personal data or change how we use data in a meaningful way, we’d inform you in advance.
In some cases, we may seek your consent to the changes if required by law. For instance, if a change would require new consent under GDPR, we would do so.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any update to this Privacy Policy will be deemed as acceptance of the changes, to the extent permitted by law. Of course, if you do not agree with any changes, you always have the choice to stop using the Service or exercise any applicable rights (like deleting your data or opting out of certain uses).

If you have any questions about what has changed, you can contact us for clarification. We will also maintain an archive or changelog of Privacy Policy versions if required, so that you can see what changes were made.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please feel free to contact us:

Email: I-Can-app@outlook.com

We will do our best to respond promptly and help resolve any issue or answer any questions you have. Your privacy and satisfaction are extremely important to us, and we welcome feedback on our privacy practices.

Business Identification

I Can App is operated by a business registered in Australia. For your reference:

Business Name: I Can App
Australian Business Number (ABN): 36 762 655 217
Registered Address: Sydney, NSW 2000, Australia
Website: icanapp.com.au

This information is provided for transparency and for any official correspondence. If you need to send us any physical mail or have any official inquiries, you can use the contact details above (email is preferred for fastest response).

Thank you for taking the time to read our Privacy Policy. We hope you feel informed about how your data is handled in the I Can App. We truly value the trust you place in us when you use our Service, and we are committed to honouring your privacy and keeping your data safe.