← Back to RESET

Privacy Policy

Last updated: August 2026

This page explains, in plain language, what data RESET processes, what stays on your device, and which services are involved.

Who is responsible

The controller is Dayana Milcheva, Seitenstettengasse 5/37, 1010 Wien, Österreich. Privacy contact: contact@resetthechaos.com.

What stays on your device

RESET stores the following in your browser's local storage: your brain-dump list, your current reset, your reset history on this device, estimated durations, your language choice, and local usage counters. This data stays on your device and is not sent to a server for storage. You can delete it anytime through your browser's site data settings.

When you start a reset (AI analysis)

To build your reset plan, the task text you entered — together with your energy and time selection, your local time, timezone and language — is sent to our server and from there to the Lovable AI Gateway (Lovable Labs Incorporated). The gateway forwards the request to the Google Gemini language model ("google/gemini-3.7-flash"), which creates the plan. This only happens when you start a reset. RESET does not store your brain-dump text on its own servers; we have no control over how long Lovable or Google retain it, and their privacy terms apply. Transfer to third countries (including the USA) cannot be excluded. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Accounts and account data

You can use RESET without an account. If you create one, we process your email address and a securely hashed password — or, when signing in with Apple or Google, the identifier and email address those providers send us. Accounts and sign-in run on Lovable Cloud, technically operated with Supabase. Stored with your account: a profile (identifier, display name, language), your usage state (number of free resets used, subscription plan and status), and — while signed in — your reset history with task titles, completed and skipped tasks, duration and time. On first sign-in, progress saved on this device may be merged into your account once. Access is technically restricted to your own account.

Signing in with Apple or Google

If you use "Continue with Apple" or "Continue with Google", you are redirected to that provider (Apple Inc. or Google Ireland Limited); sign-in is handled through Lovable Cloud's authentication service. The provider learns that you are signing in to RESET and sends us an identifier and your email address. We never receive your password.

RESET Premium and payments

RESET Premium is offered as a subscription: €5.99 per month or €24.99 per year. Payments are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). What is processed: when you subscribe, you are redirected to a payment page operated by Stripe (Stripe Checkout). You enter your payment details (e.g. card or bank details) directly with Stripe; RESET never receives or stores full card or payment details. As an independent controller, Stripe processes data such as your name, email address, billing and payment details, amount and currency, and technical data (e.g. IP address, device and browser) to process the payment and prevent fraud. What RESET stores: a Stripe customer ID and subscription ID, your plan, your subscription status, the end of the current billing period, and whether the subscription ends at period end. We also store the IDs of payment events received from Stripe to avoid processing them twice. None of this contains full payment details. Purpose and legal basis: processing serves the conclusion and performance of the subscription contract, billing, and providing Premium features; the legal basis is Art. 6(1)(b) GDPR. Fraud prevention by Stripe and our storage of event IDs rely on Art. 6(1)(f) GDPR (legitimate interest in secure, reliable payment processing). Where statutory retention obligations apply to invoices and payment records, the legal basis is Art. 6(1)(c) GDPR. Transfers: your contractual counterpart for payment processing is Stripe Payments Europe, Ltd. in Ireland. Stripe may transfer data within its group, including to Stripe, Inc. in the USA. According to Stripe, such transfers are based on the European Commission's standard contractual clauses together with supplementary measures. For more information, see Stripe's privacy policy: https://stripe.com/privacy. If you delete your account, an active subscription is cancelled at Stripe. Payment and invoicing records that Stripe retains to meet its own legal obligations are not affected.

Usage statistics

RESET keeps a small set of counters to understand how the app is used: app opened, reset started, time budget selected, reset completed, task skipped, and another reset started. These counters are stored locally on your device only and are not sent to any external analytics service. They never contain your brain-dump text, task content, or personal information.

Hosting and technical error diagnostics

RESET is hosted on the Lovable platform. Opening the app involves processing technically necessary connection data (e.g. IP address, time, browser). If a technical error occurs in the app, an error message with technical details (e.g. error text and current page) may be sent to the Lovable platform's error diagnostics. These reports contain no brain-dump content.

Cookies and local storage

RESET uses no advertising or tracking cookies. Technically necessary browser storage is used for sign-in and app operation (localStorage, and cookies for your session where applicable).

Deleting your account

You can delete your account yourself at any time under Settings. This permanently removes your profile, your entitlement record and your Reset history, and signs you out. Local data on this device is cleared as well.

Abuse prevention for free Resets

So the free Resets cannot be reused endlessly by deleting and recreating accounts, we store an irreversible cryptographic fingerprint (HMAC-SHA256) of your verified email address together with the number of free Resets used. The email address itself is not stored and cannot be recovered from the fingerprint. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). These records are deleted after 24 months at the latest.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can delete local data yourself anytime through your browser and your account under Settings. You also have the right to lodge a complaint with the Austrian Data Protection Authority.

Contact

Questions about privacy? Write to contact@resetthechaos.com.