Privacy Notice

Last updated: June 11, 2026

This Privacy Notice explains how myENOUGH (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use myEnough.app (the “Service”). We act as the data controller for the personal data described in this notice.

1. Information We Collect

We collect the following categories of personal data:

Account information: email address, password hash, and display name.
Profile information: financial inputs such as income, expenses, goals, investment preferences, and currency selection.
Usage data: IP address, browser type, device information, and pages visited.
Communication data: messages you send to us for support or feedback.
Referral data: referral codes and invite links you share.

2. How We Use Your Information

We use your personal data for the following purposes:

To provide, maintain, and improve the Service.
To authenticate you and manage your account.
To process payments and manage your plan.
To communicate with you about your account, updates, or support requests.
To analyze usage and improve features.
To comply with legal obligations.

Our legal bases for processing include: performance of a contract (providing the Service), legitimate interests (improvement and security), and legal obligations.

3. Data Sharing

We do not sell your personal data. We may share it with the following categories of recipients:

Service providers: hosting, analytics, and support tooling providers who process data on our behalf.
Merchant of Record (Paddle): We share necessary transaction and billing data with Paddle.com, our online reseller and Merchant of Record, to process payments, manage subscriptions, handle tax compliance, and provide invoicing. Paddle acts as an independent data controller for the data it processes in connection with payments.
Professional advisers: legal, accounting, or audit professionals when required.
Authorities: when required by law or to protect our rights.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this notice, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.

5. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (right to be forgotten).
Object to or restrict certain processing.
Request data portability.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise your rights, contact us using the details provided in this notice. We will respond within one month.

6. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and secure infrastructure. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Similar Technologies

We use essential cookies to operate the Service (e.g., authentication and session management). We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

8. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data during such transfers.

9. Children’s Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.

10. Changes to This Notice

We may update this Privacy Notice from time to time. We will post the updated version on the Service with a revised effective date. Please review it periodically.

11. Contact Us

If you have any questions or concerns about this Privacy Notice or our data practices, please contact us through the Service.