Privacy Policy | Power Place

Who is responsible for your data

The data controller for the Service is IMUSE INC (doing business as Power Place), 2125 Biscayne Blvd, Ste 204 #9745, Miami, Florida 33137, USA. For any privacy question or to exercise your rights, contact us at power@powerplace.org.

What we collect

On the website / newsletter:

Newsletter sign-up: your email address, and your name if you provided one. We also record which lists you chose and when you confirmed, so we only send what you asked for.
Anti-spam check: when you submit the sign-up form we use Cloudflare Turnstile to tell humans from bots. Cloudflare may process a token and limited technical data (such as your IP address) for this.
Basic technical data: like any website, our host and security layer process standard request data (IP address, browser type, pages requested) to serve pages and prevent abuse.

In the PowerPlace app:

An anonymous device id: a random identifier generated on your device so we can show fresh content (and not repeat cards you have already seen) and sync your saved cards. It is not linked to your name, email, or contacts, and you can reset it by reinstalling the app.
In-app activity: which cards you like, dismiss, or save, and your chosen language — so the deck reflects your taste. This is tied only to the anonymous device id.
Purchases: premium subscriptions are handled entirely by Apple. We never receive your payment details; Apple tells us only whether an entitlement is active.
Delivery data: background images and narration audio are served over the network from our content CDN, which processes standard request data to deliver them.

The app contains no advertising and no third-party tracking or analytics SDKs, and we do not collect precise location, contacts, photos, or microphone data.

How we use data, and our legal bases

Where data-protection law (such as the GDPR) applies, we rely on these legal bases:

To provide the Service — show content, remember your saved cards and preferences, and deliver media (basis: performance of a contract / our legitimate interest in operating the app).
To send the newsletter you opted into, using double-opt-in (basis: your consent, which you can withdraw at any time).
To keep the Service secure and working — prevent abuse, debug, and improve reliability (basis: our legitimate interests).
To handle purchases and provide premium features (basis: performance of a contract).
To comply with law where we are legally required to process or retain data (basis: legal obligation).

Email analytics

Our email provider records whether messages are delivered, opened, and whether links are clicked, so we can see that emails are arriving and improve them. These are aggregate engagement signals, not surveillance, and every email includes a one-click unsubscribe link.

Cookies and analytics

We do not use advertising cookies. On the website we may use privacy-respecting analytics to understand which pages are read, and Turnstile may set a necessary token to function. Your browser settings let you control cookies. The app does not use cookies.

Who we share data with (sub-processors)

We share data only with the providers that run the Service:

Mailgun — stores newsletter subscribers and sends email.
Cloudflare — Turnstile anti-spam, and image and media (R2) delivery.
Apple — App Store distribution and subscription billing.
ElevenLabs — generates the narration audio (no personal data is sent).
OpenAI / Google — generate and translate content (no personal data is sent).
Render — hosting and our database.

We do not sell your personal information and we do not share it with advertisers.

International transfers

Our providers are mostly based in the United States, so your data may be processed there and in other countries. Where required, transfers out of your region rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.

Data retention

We keep newsletter details for as long as you are subscribed; if you unsubscribe we stop sending email and, on request, delete your record. App activity tied to an anonymous device id is kept only as long as needed to run the service and is removed or anonymised when no longer needed. We may keep limited records longer where the law requires it.

Your privacy rights

Depending on where you live (for example under the GDPR or the UK GDPR), you may have the right to:

access the personal data we hold about you, and receive a copy;
have inaccurate data corrected, or incomplete data completed;
have your data erased (“right to be forgotten”);
restrict or object to certain processing;
data portability;
withdraw consent at any time (for example, unsubscribe);
lodge a complaint with your local data-protection authority.

If you are a California resident, you may request access to or deletion of your personal information and exercise these rights without discrimination; we do not sell or “share” personal information for cross-context behavioural advertising. To exercise any right, email us at power@powerplace.org and we will respond within the time required by law.

How we protect data

We use encryption in transit, access controls, and reputable providers to protect data. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information and to limit who can access it.

Children

Power Place is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

Changes

If we change this policy we will update the date below and, for material changes, note it on the site or in the app.

Contact

Questions, access requests, or deletion requests: power@powerplace.org. See also our Terms of Use and our editorial policy for how we source and verify content.