Privacy Policy

TL;DR: We're a privacy-first app with no accounts, no tracking, and no ads. What you create lives on your device and, by default, also syncs to your own private iCloud — encrypted by Apple, and not something even we can read. When you use AI features, what you're working on — your text, plus things like your routines, calendar events, and (only if you turn it on) your thoughts — passes through our secure server to Claude and back; we don't store conversations by default. Here's the full picture.

Overview

Ziggy Zag LLC ("Ziggy Zag", "we", "our", or "us") develops and operates the "i hate the routine" mobile application for iOS and watchOS (the "App"). This Privacy Policy explains how we collect, use, and protect information when you use the App.

We built this app with a simple belief: your data is yours. Privacy isn't a feature we bolt on — it's how the whole thing works. Almost everything you create lives on your device, and by default it also syncs to your own private iCloud so you can back it up and move to a new phone — that copy is encrypted by Apple and is not something we can see. The main time your content reaches our server is when you use an AI feature.

Version 2 introduced AI features that communicate with a server, and iCloud sync that backs your data up to your own Apple account. We think it's important to be upfront about exactly what each of those means. This policy covers everything: what we collect (very little), what lives on your device and in your private iCloud (almost everything), and what passes through our server when you use AI (temporarily, with minimal data retained only for safety and service integrity).

Information We Collect

We collect the bare minimum needed to make the App work. Here is what we collect:

Device Token
When you first open the App, it generates a random identifier (a UUID) and stores it in your device's secure Keychain. This token is sent with server requests so we can manage your rate limits and premium status. It is a random string of characters, not linked to your name, email, Apple ID, or payment details. That said, this token is pseudonymous: because it is persistent and tied to your subscription and usage, we treat it as personal data under laws like the GDPR and CCPA, and the rights described below apply to it.

Rate Limit Counts
We store simple counters of how many AI calls you have made — daily, monthly, and lifetime. These are just numbers (like "7"), stored alongside your device token. No details about what you asked, what the AI said, or anything else. Just counts, so we know whether you have reached your limit.

Premium Status
If you subscribe to premium, we store your subscription expiration date alongside your device token. Just a date, so the App knows whether to unlock premium features.

Age Verification Band
If you use AI features, the App asks whether you are 18 or older. We store only a broad age band ("adult" or "under 18") alongside your device token for one year. We do not collect your date of birth or exact age. This is required by Apple's App Review Guideline 4.7 and Anthropic's usage policy.

AI Report Data
If you choose to report an AI response (via the in-app report option), we store: your reason (up to 200 characters), a brief excerpt of the reported message (up to 500 characters), a 16-character hashed reference derived from your device token, and a timestamp. This data is stored for 90 days, then automatically deleted. Reports are user-initiated only — nothing is reported without your action.

Subscription Validation Identifiers
When your subscription is validated, we store a mapping between your Apple transaction ID and your device token in our server-side key-value store. The device mapping expires after 35 days (refreshed on each validation). The transaction binding is retained for the duration of your subscription. These identifiers do not include your name, email, or payment details, but because they are linked to your device token they are pseudonymous personal data, handled as described in this policy.

Operational Metadata
When you use AI features, our server logs limited operational data: hashed device identifiers, the AI model used, token counts, estimated cost, and rate-limit status. This does not include the content of your messages or AI responses. It is used for service reliability and abuse prevention — not for advertising, profiling, or behavioral tracking.

IP Address (transient, anti-abuse only)
Like any internet service, our server (through Cloudflare) receives the IP address your request comes from. We use it only briefly — to group requests into short-lived rate-limit buckets that stop abuse (IPv6 addresses are shortened to a network prefix first). We do not use it to identify you, build a profile, or track you across sessions, and these anti-abuse counters are deleted automatically within about two days (see Data Retention).

That is the core of what we collect. A pseudonymous ID, some counters, some dates, and — only when you use specific features — the items described above. None of it includes your name, email, or anything from your Apple account — but it is still data about you, and the rights described below apply to it.

AI Features

The App includes optional AI features powered by Claude, a large language model made by Anthropic, PBC. Here is exactly how they work:

When you use an AI feature — like asking for help building a routine, planning your day, or triaging your thoughts — your request travels from the App, through our secure server (hosted on Cloudflare), to the Anthropic API, and the response comes back the same way. To make its suggestions useful, that request includes more than the words you type: depending on the feature, it can also include your routines and roughly how long they usually take, your calendar events for the day and the next several days (see Calendar context below), what's already on your Day plan (including a routine you're running right now), and — only if you turn on Thought Analysis — items from your Thoughts inbox. The sections below spell out each of these. By default, our server acts as a pass-through: it forwards your request to the AI, returns the response, and does not store your conversation. We do not manually review your conversations; AI output is automatically scanned for safety before delivery. Two exceptions: (1) if you choose to report an AI response, a brief excerpt (up to 500 characters) is stored for 90 days so we can review it; (2) limited safety and operational metadata (such as hashed identifiers, model used, and token counts — not message content) may be logged for service reliability and abuse prevention.

Your thoughts and the assistant: The Day assistant can help you sort a "brain dump" — a free-form list of everything on your plate (up to a few thousand characters), plus any thoughts you tap in from your Thoughts board. That text is sent to Claude when you ask it to sort. Separately, the assistant can draw on your whole Thoughts inbox as background context on a planning turn — but only if Thought Analysis is turned on. With it off, your inbox is never sent as background context (what you type or tap in still goes, because you chose to include it), and the assistant is told plainly it can't see your thoughts. Thought Analysis lives in Settings → AI. (Installs that already had the app when this shipped started with it on; new installs start with it off.)

Optional personalization (off by default): Two switches let the assistant learn from your history to plan better: "Learn from my week" (your recurring calendar patterns and how you tend to schedule things) and "Use my real pace" (how long your routines actually take you). Both are off unless you turn them on, and only a compact summary is shared with the assistant when they are on. Leave them off and none of that leaves your device.

Assistant memory (off by default): The assistant can keep a short, opt-in memory of durable preferences you tell it — or that it notices and you confirm — like "evenings work better for me" or "mornings need extra buffer," so it doesn't have to relearn them every time. It is off unless you turn it on ("Remember things about me" in Settings → AI). When it's on, the assistant may propose a few things to remember at the end of a chat; nothing is saved unless you tick it and confirm — every box starts unchecked, and anything you skip is simply not stored. It keeps only a small, capped number of short notes (never the things the App already measures for you, like how long your steps take), and it will never remember anything about a diagnosis, medication, therapy, or a named health condition — that is blocked both by instruction and by a built-in content filter that works independently of the AI. It is also instructed never to note your symptoms or anything about other people. You can read, edit, or delete every remembered note anytime in Settings → AI → "What it remembers," or clear them all with "Forget everything" — and once you delete a note it kept, it won't be suggested again. Remembered notes are stored on your device (and sync through your own private iCloud, like the rest of your data, when iCloud sync is on); when the feature is on, a compact list of them rides along in the AI request on a relevant planning turn — the same secure path as everything else above, and never with your name or account. Turn the feature off and the assistant stops remembering new things and stops sending any it already has; your existing notes stay saved (and viewable) until you delete them, and Reset All Data erases them completely.

Photos and AI: If you turn on Thought Analysis, the assistant can also help sort thoughts you capture as photos (a snapshot of a flyer, a whiteboard, a receipt). When it does, a small preview of that photo is sent to Claude as part of the sorting, in the background. This happens only while Thought Analysis is on — a single switch in Settings → AI that you can turn off anytime. With it off, no photo is ever sent in the background. (If you explicitly ask the AI to work on a specific photo — like scanning a photo for its ingredients — that photo is sent for that request, because you asked.)

Calendar context: When you use AI planning features, your calendar events for the current day and the next several days may be included in the AI request — each event's title, time, and location (if it has one), and an estimated travel time — so Claude can help you plan around your real schedule. Automatic thought triage, if you've turned it on, similarly looks at a few days of events. This information passes through the same secure path and is not stored on our servers.

Consent: Before you use AI features for the first time, the App displays an explicit consent dialog explaining that your text will be sent to Claude through our server. You must affirmatively accept to use AI features. You can decline, and the App works without AI — you just won't get AI-powered suggestions.

Sensitive information: Please avoid including sensitive personal information in AI conversations — such as government IDs, financial account numbers, or detailed medical diagnoses. The App is a planning tool, not a medical or financial service, and AI features are not designed to handle that kind of data.

AI limitations: AI-generated suggestions are for convenience and planning purposes only. They are not professional advice of any kind. The App is not a medical device and is not a substitute for professional medical, psychological, or therapeutic guidance. You are responsible for any decisions you make based on AI suggestions.

Anthropic's data policy: Per Anthropic's current published policy, which controls: Anthropic retains API request logs for up to 30 days, then automatically deletes them, and does not use API data to train their models. In rare cases where content is flagged by their automated safety systems (for example, content that may involve harm or abuse), it may be retained for up to 2 years for abuse prevention, and Anthropic may keep the related safety-classification scores — not the content — for up to 7 years. By using the App's AI features, you acknowledge this third-party retention. For details, see Anthropic's privacy policy. You can also contact Anthropic directly at privacy@anthropic.com regarding their data handling.

On-Device Data

The vast majority of what the App does happens entirely on your device. The items below are never stored on our servers. Two things can carry some of this data to Apple, at your option: iCloud sync (on by default — see "iCloud Sync & Backup" below) backs your content up to your own private iCloud, and AI features send the specific things described above to Claude when you use them. Here's the detail:

Calendar: The App reads your Apple Calendar (via EventKit) to display events in your day planner and calculate scheduling conflicts. Your calendar stays on your device and is never stored on our servers. (Event titles, times, and locations may be included in AI requests if you use AI planning features — see Calendar context above. A local copy of upcoming events is stored on your device to draw the planner, and that copy syncs through your private iCloud like the rest of your data.)

Location: Used to estimate travel time to events that have an address. To do that, the App asks Apple Maps for directions, which means the relevant coordinates are sent to Apple (never to us) for that calculation. Location is also used — if the automatic light/dark appearance option is on (it's on by default) — to calculate your local sunrise and sunset times; that happens entirely on your device, and nothing is sent anywhere for it. We don't store your location on our servers. If you save a commute, its starting point is stored on your device and syncs through your private iCloud like your other data.

Camera and Photos: Used for capturing thoughts as photos. Photos are stored on your device (and sync through your private iCloud like the rest of your data). They are not sent to the AI unless you've turned on Thought Analysis (which sends a preview of a photo thought to Claude as part of sorting it) or you run an AI action on a specific photo yourself — see "Photos and AI" above.

Microphone and Speech: Voice input is transcribed on your device using Apple's built-in Speech framework. The App requests on-device transcription when your device and language support it. For some devices or languages, Apple's Speech framework may use server-based recognition per Apple's own policies. Audio is not stored by the App. The transcribed text becomes part of that thought, so from then on it's treated like any other thought — it syncs through your private iCloud, and it can be included in an AI request if you use AI features on it.

Contacts: Accessed only when you tap "Add to Contacts" for a specific item. The App writes to your device contacts via Apple's Contacts framework. No contact data is ever sent to any server.

OCR (Text Recognition): The App can extract text from photos using Apple's on-device Vision framework. The recognition itself happens entirely on your device. The extracted text becomes part of that thought, so from then on it's treated like any other thought — it syncs through your private iCloud, and it can be included in an AI request if you use AI features on it.

Routines, steps, checklists, thoughts, and planner data: Stored on your device using Core Data. We don't store this data on our servers. By default it does sync to your own private iCloud (see below) so it survives a new phone, and parts of it are sent to Claude (passing through our server, never stored there) when you use AI features, as described above.

Your device token is stored only in the local Keychain on your device and is not synced to iCloud Keychain. How the App uses iCloud for your other data is described in the next section.

iCloud Sync & Backup

The App uses Apple's iCloud (via CloudKit) to back up your data and sync it across your devices. Here is exactly how that works:

It's on by default, and it's yours. Sync is turned on unless you turn it off. It copies what the App stores — your routines, your thoughts and jots (including any photos and their extracted text), your Day plans, your locally cached calendar events, and your saved AI conversations (the ones on your Thoughts board) — to your own private iCloud database, tied to your Apple Account. Apple encrypts it. It goes to Apple's servers, never to ours — we cannot see it, read it, or access it.

Why it's on. Before this, a lost or replaced phone meant losing everything you had built. Sync means you can set up a new phone and your routines and thoughts come back. That's why the default is on — but it's a single switch.

Turning it off. Open Settings in the App and turn off "Sync & Back Up with iCloud." From then on, your data stays only on that device.

Uninstalling. Deleting the App removes the on-device copy. If iCloud sync was on, the copy in your iCloud remains — that is what lets your data return if you reinstall. Turning sync off stops future syncing, but it does not remove what's already in iCloud; to delete that copy, remove the App's data from your iPhone's iCloud settings (Settings → your name → iCloud) after uninstalling.

Apple Watch

If you use the App on Apple Watch, your data syncs between your iPhone and Watch using Apple's WatchConnectivity framework. This sync happens directly between your paired devices, does not pass through any third-party servers, and is managed entirely by Apple's secure protocols. We never see or have access to this synced data.

Third-Party Services

We use three third-party services. There are no tracking SDKs, no ad networks, and no behavior analytics tools in the App. Here is what each service does:

Anthropic (Claude AI)
Processes AI requests when you use AI features. Per Anthropic's current published policy, which controls: Anthropic retains API logs for up to 30 days, then deletes them, and does not train on API data. Safety-flagged content may be retained up to 2 years. Anthropic also collects standard API usage metrics (request counts, token usage) on their developer platform. See Anthropic's privacy policy.

Apple
Apple plays three roles. First, iCloud (CloudKit) stores your synced data in your own private iCloud database (see "iCloud Sync & Backup" above) — this is your storage with Apple, not ours, and we cannot read it. Second, Apple Maps receives event coordinates when the App estimates travel time. Third, Apple handles all subscription payments and in-app purchases through the App Store. When you subscribe, your Apple transaction ID passes through our server's memory for validation — we forward it to Apple's Server API, confirm your subscription is active, and to support ongoing subscription verification and prevent abuse, your transaction ID and device token are stored as a mapping in our server-side key-value store. The device mapping expires after 35 days (refreshed on each validation). The transaction binding is retained for the duration of your subscription. We never receive your name, email, or payment details. See Apple's privacy policy.

Cloudflare
Hosts our server infrastructure (the proxy that forwards AI requests and validates subscriptions). Cloudflare does not log request or response bodies, and your messages and images are not stored on their servers — apart from the short report excerpt described above, which is kept in our Cloudflare-hosted key-value store for up to 90 days. However, Cloudflare collects standard operational metrics as part of running their platform, including request counts, response status codes, CPU time, and bandwidth. This is infrastructure-level data, not user behavior tracking. See Cloudflare's privacy policy.

These are the only third-party services that receive any data from the App. We maintain appropriate data processing agreements with our service providers and only share the minimum data necessary for each service to function as described above. If we add or remove service providers in the future, we will update this policy accordingly. We are not responsible for the privacy practices of these third-party services and encourage you to review their privacy policies.

What We Don't Do

• No accounts. No email, no username, no password, no sign-up. Ever.
• No user behavior tracking. We do not track which screens you visit, how long you spend in the App, what features you use, or any usage patterns. There are no analytics SDKs in the App — no Google Analytics, no Firebase, no Facebook SDK, no crash reporting services. Our server logs limited operational metadata (token counts, cost estimates, rate-limit status) for service integrity — not for behavior profiling or marketing.
• No advertising. No ad networks, no ad identifiers, no ad tracking. The App has zero ads.
• No identity data. We never receive your name, email, Apple ID, or payment details, and we build no advertising profile. What we do hold is keyed to the pseudonymous device token described above. The only demographic data we store is a broad age band (18+ or under 18) required for AI compliance, with no date of birth or exact age.
• No conversation history on our servers. We do not store your full AI conversations. (Your Thoughts-board AI conversations are saved on your device and sync through your own private iCloud so you can scroll back; the Day assistant's planning chat is kept only in memory and isn't saved or synced at all. Neither is stored by us.) The only exception on our side: if you actively report an AI response, a brief excerpt (up to 500 characters) is retained for 90 days for safety review, then automatically deleted.
• No data sales. We do not sell, rent, lease, or trade your personal information to any third party, for any reason.

A note on infrastructure metrics: While we do not run any analytics ourselves, our infrastructure providers (Cloudflare and Anthropic) collect standard operational metrics as part of running their platforms — things like request counts, response codes, and API token usage. This is standard for any cloud service and does not include the content of your requests.

Data Security

All communication between the App and our server uses HTTPS (TLS encryption), meaning your data is encrypted in transit. On-device data is stored using Apple's Core Data framework within the App's sandboxed container, and your device token is stored in the iOS Keychain (Apple's encrypted credential storage).

No security system is perfect. While we take reasonable measures to protect the limited data that passes through our server, we cannot guarantee absolute security. In the unlikely event of a data breach affecting device tokens or other server-side data, we will notify affected users as promptly as practicable and in accordance with applicable law, and we will post a notice on our website describing the incident and steps taken to address it. If you become aware of a security issue, please contact us at developer@ziggy-zag.com.

Data Retention

Here is exactly how long data is retained:

• Daily and monthly AI usage counters: reset automatically at the start of each new day and month — only the latest values are kept (numbers only: a call count and a monthly cost estimate, no content), keyed to your device token.
• Lifetime AI call count: Persists as long as your device token exists. This single number is retained because it is necessary to enforce the App's free-tier usage limits. It contains no content — it is one number, keyed to your pseudonymous device token.
• Premium status: Refreshed roughly every 24 hours or upon subscription expiry.
• Anthropic API logs: Up to 30 days, then automatically deleted by Anthropic. Safety-flagged content may be retained up to 2 years.
• Infrastructure metrics: Retained by Cloudflare and Anthropic per their respective data retention policies.
• On-device data: Persists until you delete the App. Deleting the App removes the local copy; if iCloud sync was on, the copy in your own private iCloud remains until you remove it (see "iCloud Sync & Backup").
• Device-to-subscription mapping: 35 days, refreshed on each subscription validation.
• Transaction-to-device binding: Retained for the duration of your subscription.
• Age verification band: 1 year, then automatically deleted.
• AI report data: 90 days, then automatically deleted.
• Moderation incident metadata: 90 days. Hashed device reference and timestamp only — no message content.
• Anti-abuse rate counters (per device): 2 hours, then automatically deleted.
• IP-based anti-abuse buckets: up to 48 hours, then automatically deleted.

Your Choices and Rights

AI features are opt-in. The App asks for your consent before the first AI use. If you decline, AI features are disabled and no AI prompt or response processing occurs on our server. Subscription validation still communicates with our server if you are a subscriber. Age verification and report submissions send limited data to our server only when you actively use those features.

Every device permission is optional. Calendar, location, camera, microphone, contacts — the App requests each permission individually, and you can decline any or all of them. The App works without them; you just get fewer features.

Deleting the App. Uninstalling removes the on-device copy of your data. If iCloud sync was on, the copy in your own private iCloud remains — that's what lets your data come back if you reinstall — and you can remove it as described in "iCloud Sync & Backup." Our server-side data (your pseudonymous device token, rate-limit counts, and premium status) expires automatically via the retention periods listed above. There is no account to delete because there is no account.

Request deletion of server-side data. If you want your server-side data removed before it expires naturally, email us at developer@ziggy-zag.com with "Data Deletion Request" in the subject line. Include any details that may help us locate your data (such as approximate dates of use). We will process your request within 30 days.

International Users and Your Privacy Rights

The App is available worldwide. Our servers are located in the United States (Cloudflare's global network) and data processed by Anthropic is handled in accordance with their privacy policy. By using AI features, your data may be transferred to and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland: To the extent that EU/UK data protection law (GDPR) applies to our processing of your data, we rely on the following legal bases: for the pseudonymous device token, rate limiting, subscription validation, and safety and moderation retention, we process data on the basis of our legitimate interest in providing and securing the App and — where you subscribe — performance of our contract with you (Articles 6(1)(f) and 6(1)(b) GDPR); for AI features that transmit your content to third-party services, we rely on your explicit consent, which you provide through the in-app consent dialog before first use (Article 6(1)(a) GDPR).

You have the right to access, correct, delete, restrict processing of, or request portability of your personal data. You also have the right to withdraw consent for AI features at any time: AI features are opt-in, and you can withdraw by turning off the AI-related switches (such as Thought Analysis) in the App's Settings → AI — or turn the assistant off entirely with “Turn off the assistant” there — and by not using the AI features — the App only sends data to the AI when a feature you have turned on or actively invoked calls for it. We hold no name or email to search by, but we can act on the data keyed to your device token — the deletion request process described under "Your Choices and Rights" is how these rights work in practice. To exercise any of these rights, contact us at developer@ziggy-zag.com. If you have concerns about our data practices, you may also lodge a complaint with your local data protection authority.

Data processed through our services is handled by our sub-processors Anthropic (AI processing) and Cloudflare (proxy and edge infrastructure) and may be processed in the United States. Those transfers rely on the safeguards each provider publishes — such as Standard Contractual Clauses and their data processing agreements — per their current published terms, which control.

For users in California: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, to request deletion, to request correction of inaccurate personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information with third parties for their own commercial or marketing purposes, and we have not done so in the preceding 12 months. The limited data we collect (a pseudonymous device token, usage counts, subscription dates) is not linked to your name or contact details. We will never discriminate against you — in price, features, or service — for exercising any of these rights. To exercise any of these rights, contact us at developer@ziggy-zag.com with "Privacy Rights Request" in the subject line. We will respond within the timeframes required by applicable law.

For users in Australia: We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may request access to or correction of the personal information we hold (it is keyed to your pseudonymous device token) using the process described under “Your Choices and Rights.” As this policy describes, personal information is disclosed to overseas recipients — our service providers Cloudflare and Anthropic in the United States, and Apple — only as needed to run the App. If you believe we have mishandled your personal information, contact us at developer@ziggy-zag.com and we will respond within 30 days; if you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Notifications

The App may request permission to send local notifications during your routines. These notifications are generated and delivered entirely on your device, do not transmit any data to external servers, and can be disabled at any time in your device's Settings. We do not send marketing notifications, re-engagement prompts, or "come back!" reminders.

Children's Privacy

The App is not directed at children under 13 (or the applicable minimum age in your jurisdiction) and does not knowingly collect personal information from children. AI features specifically require a declaration that the user is 18 or older; users who indicate they are under 18 are blocked from AI features entirely. The App collects no names, emails, or accounts from any user, which substantially limits children's-privacy risk.

If you are a parent or guardian and believe a child under 13 has used the App's AI features (which transmit text to third-party servers), please contact us at developer@ziggy-zag.com with "Child Privacy Concern" in the subject line. We will take steps to delete any associated server-side data within 30 days of your request.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or applicable law. When we do, we will post the revised version at this URL with a new effective date. For material changes that affect how we collect, use, or share your data, we will provide at least 30 days' notice through the App or on our website before the changes take effect. If a future material change affects processing that rests on your consent (such as the AI features), we will ask for your fresh consent in the App before it applies to you — continued use alone will not be treated as consent to that change. Your continued use of the App after the updated policy's effective date indicates your acceptance of the changes. If you do not agree with a revised policy, you may stop using the App and delete it from your device.

Update log — July 16, 2026: Added an "Assistant memory" disclosure (an opt-in, off-by-default feature stored on your device and synced through your private iCloud, never covering health or diagnosis topics; viewable, editable, and deletable in Settings → AI — it adds no new data practice for anyone who leaves it off). Also disclosed that our server receives your IP address transiently, for anti-abuse rate-limiting only, and refined the Cloudflare and Anthropic-retention wording for accuracy; clarified that a photo is sent only in background triage or when you run an AI action on it yourself; added an Australian Consumer rights section; and corrected the wording of the daily/monthly usage-counter retention.

Update log — July 11, 2026: Clarified that the device token is pseudonymous personal data; named the AI/proxy sub-processors and transfer basis; unified the contact address; stated legal bases.

Update log — July 5, 2026: This revision describes iCloud sync and backup (on by default, to your own private iCloud), spells out the fuller context sent with AI requests (routines, calendar events including locations, your Day plan, and — when Thought Analysis is on — your thoughts and photo previews), and corrects earlier statements that implied this data never left your device. These changes describe how the App already works; they add no new data practice.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Michigan, United States, without regard to its conflict of law provisions. However, California residents retain all rights afforded to them under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Residents of the European Economic Area, United Kingdom, and Switzerland retain all rights afforded to them under the General Data Protection Regulation (GDPR) and applicable local data protection law. Nothing in this policy limits any mandatory consumer protection rights you may have under the laws of your jurisdiction of residence.