Your thoughts are yours.
So is your privacy.

1. Privacy at a glance

• We do not sell personal information.
• Your current journal stays on your device and is not visible to us.
• We collect only what is needed for the function you choose.
• Full card details will be handled by the payment provider, not stored by SFP.
• You may ask about, correct or delete information that we control.

2. Data controller

Sparkling Female Power is the brand responsible for deciding how personal data in the Service is used. Before paid subscriptions are activated, the registered company name, organisation number, postal address and dedicated privacy contact for the legal data controller will be inserted here and shown at checkout.

This policy covers the public website, member preview, Creator Studio and customer-request function. A provider such as a payment company may also be an independent controller for parts of its own regulated processing; its own privacy information will then apply as well.

3. Categories of information

Member preview information on your device

The current preview asks for a first name and email and lets you choose a focus, check-in time and support tone. It can also save your plan selection, favourites, challenge status and journal reflection. This information is stored in your browser's local storage and is not transmitted to our servers in the current version.

Future member and subscription information

When real accounts and payments are enabled, we may handle your name, email, account identifier, membership plan, subscription status, start and renewal dates, payment-provider customer reference, invoices, transaction status, support history and account preferences. The checkout provider will process payment credentials; Sparkling Female Power will not store your full card number or security code.

Withdrawal and customer-service requests

If you use the withdrawal function, we store your name, email, request type, any order or subscription reference, an optional message, the time received, a confirmation reference and the status needed to handle the request.

Creator Studio

For authorised creators and administrators, the platform uses authenticated account details such as name and email to verify Studio access. It stores content records, uploaded media, file metadata, publication choices and necessary security or operational logs.

Technical information

Hosting and security systems may process IP address, browser and device type, timestamps, requested pages, error information and similar technical data needed to deliver and protect the Service. We do not currently use advertising or behavioural-tracking cookies on the public member preview.

4. Purposes and legal bases

Where we rely on legitimate interests, we balance the purpose against your rights and reasonable expectations. We do not use wellbeing reflections for advertising profiles.

5. Sensitive reflections

A journal entry could reveal private or sensitive information. In the current preview, journal text stays on the device and is not collected by us. Please still remember that anyone with access to the same device and browser may be able to see locally saved content.

We will not introduce cloud journal storage without first giving clear information about how it works and the controls available. We do not ask you to include medical diagnoses, identification numbers, payment details or information about another person in a reflection.

6. Service providers and sharing

We share personal data only when needed with providers that help us operate the Service, for example hosting and infrastructure, authentication, payment processing, email or customer support, security, accounting and professional advisers. They may process information under our instructions or, for regulated functions such as payments, under their own legal responsibilities.

When paid checkout is enabled, Stripe or another provider identified at checkout may process payment and fraud-prevention information. Sparkling Female Power receives subscription and transaction status rather than complete card details.

Information may also be disclosed where required by law, to protect legal rights or safety, or as part of a genuine business transfer with appropriate safeguards. We do not sell or rent personal data.

7. Transfers outside the EU/EEA

Some technology providers may process information in countries outside the EU/EEA. Where GDPR requires it, we use an adequacy decision, approved standard contractual clauses or another lawful transfer safeguard and apply supplementary protections where appropriate.

8. Retention

Local member-preview information remains on your device until you clear the browser's site data, use a future delete function or the browser removes it. We do not control your device's backup settings.

Future account data will normally be kept while the account is active and for a limited period afterwards to handle reactivation, complaints and legal claims. Payment and accounting records are retained for the period required by applicable law. Withdrawal and support requests are kept only as long as needed to handle and document the request and meet legal obligations.

Creator content and file records are retained while needed for the Service or until an authorised editor deletes them, subject to backups, legal duties and legitimate documentation needs. Security logs are kept for a shorter period proportionate to their purpose.

9. Security

We use organisational and technical measures appropriate to the type of information and risk, including restricted Studio access, access checks, encrypted connections, protected hosting and limited collection. No online service can promise absolute security, but we work to prevent unauthorised access, loss, alteration or disclosure.

10. Access, correction and deletion

Depending on the circumstances, you may have the right to request access to personal data, correction, deletion, restriction, data portability, or to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

Use the customer request form and choose “Privacy request”. We may need to verify your identity before acting. We will answer within the period required by law and explain if a request cannot be fulfilled in full.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the supervisory authority where you live. More information is available at imy.se.

11. Cookies and local storage

The member preview uses local storage to remember your profile choices, saved content and journal on the device. Creator Studio uses authentication technology required to sign in and protect restricted pages. These functions are necessary for the experience requested by the user.

We do not currently place advertising or optional analytics cookies on the public member preview. If optional tracking is introduced, we will provide information and a consent choice before it is used where required.

12. Children and young people

The motivational content may be relevant to younger people, but paid subscriptions are intended for adults or require guardian involvement. We do not knowingly create a server-side account for a child under 13 without the involvement and authorisation required by law. If you believe a child's information has been collected incorrectly, submit a privacy request so it can be reviewed promptly.

13. Changes and contact

We may update this policy when the Service changes, for example when real member accounts, cloud journals, payments or new providers are introduced. We will highlight material changes where appropriate and update the date at the top.

The registered controller's complete business and privacy contact details will be added before paid subscriptions are launched. Until then, privacy, cancellation and other customer requests can be submitted through our secure request page.