1. Who we are
Completed It Mate operates Completed It Mate and is the controller of personal information processed through the service unless stated otherwise.
Privacy contact: buddy@completeditmate.uk
2. Information we collect
Depending on how you use Completed It Mate, we may collect:
- Account information such as first name, email address, username, password hash, mobile number and postcode.
- Profile information such as profile photo, bio, privacy choices and communication preferences.
- Completion information including Cards and Items you start or complete, completion dates, ratings, memories, locations you choose to add, photos and the connections you say you completed something with.
- Bucket List information you create, including its Items and progress.
- Connection information such as connection requests, accepted connections and relationship labels.
- Purchase information such as orders, products, entitlements, payment status and refund information. We do not need to store your full payment-card details; payment processing is handled by our payment provider.
- Technical and security information such as IP address, device/browser information, login attempts, timestamps and security/audit records.
- Communications such as email preferences and records of messages or notifications sent through the service.
3. How we use your information
We use information to provide and personalise the service; create your Story and Deck; calculate Card progress and community comparisons; operate connections and privacy controls; process purchases and unlock content; send verification, security, purchase and other service messages; send marketing only where permitted; prevent abuse and protect accounts; improve reliability and features; answer support requests; and meet legal, tax, accounting or regulatory obligations.
Your postcode is intended for approximate/local functionality. We do not display your postcode, email address or mobile number on your public or connection profile.
4. Our legal bases
Under UK data protection law, we rely on one or more lawful bases depending on the activity: contract where processing is needed to provide your account or purchased content; legitimate interests for service security, fraud prevention, analytics and reasonable product improvement; consent where required, including optional marketing or certain user choices; and legal obligation where we must keep or disclose information by law.
Where we rely on legitimate interests, we consider the impact on your rights and expect the use to be proportionate to operating and protecting Completed It Mate.
6. Profiles, connections and things you choose to share
Completed It Mate includes privacy controls. Depending on your settings, other users may be able to see your profile, Deck, completed Cards, Story activity, photos, statistics or Bucket List. Private or connection-only settings restrict who can see those areas.
When you deliberately create a public Story share link, the specific shared achievement can be viewed by anyone with that link. The public share page is designed not to expose private account details such as your email, mobile number or postcode.
Information you upload or choose to make public can be seen, copied or reshared by other people. Review your visibility settings before posting information you would not want others to see.
7. How long we keep information
We keep account and completion information while your account is active because it forms your Completed It Mate record. Security and audit records may be kept for a reasonable period after the relevant event. Purchase and financial records may be retained for the periods required by tax, accounting and legal obligations. When information is no longer needed, we aim to delete or anonymise it securely.
8. Security
We use technical and organisational measures intended to protect information, including password hashing, access controls, secure sessions, prepared database queries, upload validation, rate limiting and audit/security logging. No online service can promise absolute security, so please use a strong unique password and tell us promptly if you suspect your account has been compromised.
9. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict your personal information; object to certain processing; receive certain information in a portable format; and withdraw consent where processing is based on consent.
You also have the right to complain to the UK Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first, but you do not have to contact us before contacting the ICO.
10. Children
Completed It Mate is not intended for children under 13 to create independent accounts. If you are under 18, you should use the service with the knowledge and permission of a parent or guardian where appropriate. Family features do not make private account details visible to other members unless the user chooses a permitted sharing setting.
11. Changes to this policy
We may update this policy as the service develops or legal requirements change. We will update the date above and, where a change is significant, may provide an in-product or email notice.
12. Contact us
Questions about privacy or requests to exercise your rights can be sent to buddy@completeditmate.uk.