Privacy Policy

privacy-policy — operator's commitments about your data.

FastHQ is operated by DJUMP, MB (registered in Lithuania), reachable at start@djump.io. The mobile app has not yet launched. This policy describes what we collect today through the landing page, and what we will collect after launch.

The only data we collect from this website is what you choose to give us:

• Email address — when you subscribe to the launch list.
• Name, email, message — when you submit the contact form.
• IP address & user agent — sent with form submissions, used only for rate limiting and abuse prevention. Not persisted long-term.

We don't use cookies. We don't run analytics on the landing page. No third-party trackers.

When the FastHQ mobile app ships, it will collect:

• Email address for account creation.
• Fasting timestamps (start / stop) — the core data of the app.
• Selected protocol (16:8, 18:6, OMAD, 24h, custom).
• Push notification token, only if you opt in to fast-end reminders.
• Device fingerprint (iOS identifierForVendor / Android ID) — for fraud prevention only.
• Anonymous usage analytics via PostHog — feature usage, crashes, no personal data.

What we will not collect: payment or credit card information. All purchases are processed by Apple (App Store) or Google (Google Play) via RevenueCat — we never see your card.

• Send the launch notification you signed up for.
• Reply to your contact-form message.
• (After launch) Authenticate your account and store your fasting log.
• (After launch) Send opt-in push notifications for fast-end and reminders.
• Aggregate analytics to improve the app — never to profile individuals.

We do not sell or rent your data to anyone. We do not share it with advertisers.

• Resend — transactional email delivery (subscribe confirmation, contact replies, launch announcement).
• Vercel — hosts this website and the API endpoints behind the forms.
• Supabase (after launch) — auth + database with row-level security: only you can read your own rows.
• RevenueCat (after launch) — subscription management on top of Apple / Google purchases.
• PostHog (after launch) — anonymous usage analytics.
• Apple & Google — sign-in providers and payment processors for the app.

Each processor is bound by their own privacy policy. We share with them the minimum data needed to provide their service.

All traffic to FastHQ uses HTTPS. After launch, your fasting log lives in Supabase with row-level security policies that allow access only to the row owner. We use the principle of least privilege for our internal access — most engineers cannot query user data at all.

Under GDPR and Lithuanian data protection law you have the right to:

• Access the data we hold about you.
• Correct it.
• Delete it (right to be forgotten).
• Export it (data portability).
• Withdraw consent at any time.

To exercise any of these, email start@djump.io. We respond within 30 days. After launch, account deletion will also be one tap in the app.

FastHQ is not intended for users under 13. We do not knowingly collect data from children. If you believe we have, contact us and we'll delete it.

We may update this policy when we add features. Material changes will be announced on this page and, if you're on the list, by email. Continued use of FastHQ constitutes acceptance.