Privacy Policy
Last updated: June 2026
1. Who We Are
21 Days Store ("we", "us", "our") operates 21days.store and provides AI-guided goal planning and digital action plans.
2. What We Collect
Conversation data: Text you enter about your goal, starting point, time, and constraints. This data is used to generate your personalized plan and recommendation during the session.
Account data: If you create an account, we collect your email address and authentication credentials.
Purchase data: If you purchase a program, payment is processed by Razorpay or Lemon Squeezy. We receive the order identifiers and payment status needed to deliver your course, but do not store your card number.
Usage data: Standard web analytics — pages visited, session duration, device type, and approximate geographic region (country level).
Cookies: We use essential cookies for session management and authentication. We do not use third-party advertising cookies.
3. How We Use Your Data
We use your data solely to:
- Run the AI assessment and generate your personalized report
- Deliver purchased digital programs to your account
- Send transactional emails (purchase confirmations, account notices)
- Generate and deliver your plan, daily guidance, quizzes, and lesson notes
- Comply with legal obligations
We do not sell, share, or provide your personal data to any third party. Your conversation content, assessment responses, and personal information are never disclosed to advertisers, data brokers, or external parties. The only use of your data beyond service delivery is training our own AI model to improve your experience.
4. Data Retention
Session conversation data is retained for up to 90 days to allow you to return to your assessment. Account data is retained for the duration of your account plus 2 years. You may request deletion at any time (see Your Rights below).
5. Third-Party Services
We use the following sub-processors strictly for operational purposes (payment, hosting, authentication, AI inference). These providers process data only on our behalf under strict data processing agreements and are prohibited from using your data for their own purposes:
- Razorpay / Lemon Squeezy — payment processing
- Groq / Google Gemini / YouTube — AI inference, lesson discovery, and video notes
- Google — account authentication
- Resend — transactional email and reminders
- Vercel — hosting and infrastructure
- Better Auth — authentication and account management
7. Your Rights
Depending on your jurisdiction, you have the right to: access your data, correct inaccurate data, request deletion ("right to be forgotten"), restrict processing, data portability, and withdraw consent. To exercise any right, email mail.21daysstore@gmail.com. We respond within 30 days.
California residents (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of any sale (we do not sell personal information).
8. Children
Our services are not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has submitted data, contact us and we will delete it immediately.
9. Security
We use industry-standard encryption (TLS) for data in transit and encrypt sensitive data at rest. Access to personal data is restricted to personnel who require it to operate the service.
10. Changes to This Policy
We may update this policy. If changes are material, we will notify you by email or a notice on the platform. Continued use after changes constitutes acceptance.
Contact & Complaints
If you are in the EU and believe we have violated your rights, you may lodge a complaint with your local data protection authority.