← Back to home

Privacy Policy

Last updated: February 23, 2026

1. Information We Collect

When you use VirtuePath, we collect information you provide directly:

  • Account information: email address, name (optional), and password
  • User content: virtue check-ins, journal entries, goals, and weekly focus selections
  • Usage data: streaks, points, and analytics derived from your activity
  • Device information: browser type, operating system, and IP address (for security and rate limiting)

2. How We Use Your Information

  • Provide and maintain the VirtuePath service
  • Track your virtue practice progress and generate analytics
  • Send optional notifications (check-in reminders, streak alerts, encouragement)
  • Protect against abuse through rate limiting and security monitoring
  • Improve the service based on aggregate usage patterns

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Neon with encryption at rest and in transit. The application is hosted on Vercel. Passwords are hashed using bcrypt with a cost factor of 12. Sessions use signed JWT tokens with HS256 encryption.

4. Third-Party Services

We use the following third-party services:

  • Vercel: hosting and deployment
  • Neon: database hosting
  • Sentry: error tracking and performance monitoring
  • Resend: transactional email delivery (password resets)
  • Upstash: rate limiting infrastructure

We do not sell your personal data to any third parties.

5. Cookies

We use a single httpOnly session cookie (virtuepath_session) to maintain your login session. This cookie is strictly necessary for the service to function and expires after 7 days. We do not use tracking or advertising cookies.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (check-ins, journal entries, goals, streaks, and points) is permanently deleted via cascading database constraints.

7. Your Rights

  • Access & export: You can export all your data at any time from Settings
  • Correction: You can update your email and name from Settings
  • Deletion: You can delete your account and all data from Settings
  • Notification control: You can enable or disable all notification types from Settings

8. Children's Privacy

VirtuePath is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

If you have questions about this privacy policy or your data, please contact us at privacy@virtuepath.app.