Privacy Policy

In force from 7 October 2026.

Who holds your data

Rai Pardo, Chile, who sells Building a Way of Life. Write to support@buildingawayoflife.com for anything about your data.

What we collect, and why

Your account. Your email address, the name you give, and your password, which is stored only as a hash — we cannot read it. This is what signs you in. To keep accounts safe, the server counts recent sign-in attempts by email and network address for fifteen minutes, then forgets them.

Your place in the program. Which readings you have opened, when you last opened each, and which you have marked complete. This is how the program remembers where you were. It is the only record of your use we keep; we do not track what you read within a page, how long, or what you write in your own notebook.

Your purchase. Paddle, our merchant of record, takes the payment. Paddle sends us your email address and a transaction reference so we can open the program to you, or send you the handbook. Your copy of the handbook carries the email you bought it with, at the top of its pages. We never see your card.

Your emails to us. Kept as long as the conversation needs, in our mailbox at Google.

The email list. If you sign up for our emails, we keep your email address and when you confirmed it, and whether you have bought the program, so the emails about the price go only to those who have not. Resend sends the emails. Every email has a link to unsubscribe, and we stop at once. We do not share the list. The form counts recent sign-ups by email and network address for fifteen minutes, then forgets them, so it cannot be used to fill someone's inbox.

That is the whole list. There is no advertising, no tracking of you, no profiling, and no data sold or shared for anyone's marketing.

Cookies

When you sign in, the program sets the cookies it needs to know it is you from page to page. If you close the offer of the daily reading, a small cookie remembers that you did. Your light-or-dark setting and text size stay in your browser's own storage. None of these track you, and there are no advertising cookies. The checkout is Paddle's: when you open it, it runs under Paddle's own privacy policy.

Who else touches your data

Companies that run parts of the service for us, under their own contracts and only for that purpose:

• Supabase — the database and the sign-in system. Your account and your place in the program live here.
• Railway — the servers that serve the program.
• Paddle — payments, as merchant of record. Paddle has its own privacy policy for what it collects at checkout.
• Resend — sends the messages the program sends you: the link to set your password after buying, password resets, the handbook if you buy it on its own, and the daily reading if you turn it on. If you sign up for our emails, it keeps that list and sends them.
• Cloudflare — counts page views on this site (no cookies, nothing that identifies you; we see how many people read which page, not who), and serves the app and the one small function described below.
• Google — our mailbox, for correspondence; and, only if you connect it in the app, your own Drive.
• Dropbox — only if you connect it in the app: your own Dropbox.

These companies keep servers in the United States and Europe, so your data leaves Chile. Each of them commits to protecting it under their agreements with us.

The emails you get

Only what the account needs: setting or resetting a password, your purchase. And, only if you turn it on, one reading a day until the last one — we keep the time zone you turned it on from, so it arrives in your morning, and which reading went last. Turn it off on the Account page and it stops. If you sign up for our emails and confirm, those too, until you unsubscribe.

The app

The free app at app.buildingawayoflife.com keeps your Manual and your Planner as plain files on your device — in the browser's own storage, or in a folder you choose. It has no account, and no server of ours holds your writing. We never see it.

If you connect Google Drive or Dropbox, the app writes the same files to a folder of its own in your own Drive or Dropbox — A Way of Life, or Apps/A Way of Life — and reads them back on your other devices. It asks for the least it needs: permission over the files it makes there, and your email address, to say in Settings which account is connected. It sees nothing else in your Drive or Dropbox. That permission lives in your browser. For Google, one small function of ours swaps the sign-in code for it and hands it back; it keeps nothing, logs nothing, and never sees a file. For Dropbox, your browser talks to Dropbox directly. Disconnect in Settings and the permission is revoked; the files stay yours, there and on your device. Google's privacy policy and Dropbox's privacy policy cover what they hold.

How long we keep it

Your account and your place in the program: until you delete the account, or ask us to. Purchase records: as long as tax law requires, then deleted. The email list: until you unsubscribe; after that, only your address, marked so that nothing more is sent to it.

Your rights

To see what we hold about you, to correct it, to have it deleted, to take it with you, and to object to or limit how we use it. Delete your account yourself on the Account page — everything goes with it — or email us for any of the rest and we will do it within 30 days. If you are in the European Economic Area or the United Kingdom, these are your rights under the GDPR; in Chile, under Ley 19.628 and its successor. You may also complain to your data-protection authority.

Children

The program is for adults. We do not knowingly keep an account for anyone under 18; if one exists, tell us and we will delete it.

Changes

If this policy changes, the date at the top changes, and if the change matters to you, we will email you.