Still Growing is a digital reading companion for "Life Lessons from a Baby" and future titles, operated by:

ClickBloom Marketing No 3, Jalan Tembusu 3/9, Seksyen 3, 40000 Shah Alam, Selangor, Malaysia

If you have questions about this policy or your data, contact us at admin@stillgrowing.co.

2. Information we collect

Information you provide directly:

• Account details: your email address, a display name or nickname, and an avatar you select from our illustrated avatar set.

• Optional profile details: birthday (used only to send you a birthday message — see Section 3), display-name overrides on reviews.

• Content you create: chapter reflections, reactions ("I felt this"), Circle posts, and book reviews (star rating plus written text).

• Purchase-related details: when you buy through our checkout, your email address, order details, and payment confirmation are shared with us by our payment and funnel provider (see Section 5) — we do not receive or store your card number.

Information collected automatically:

• Standard technical data such as IP address, browser type, device type, and pages visited, collected by our hosting and infrastructure providers for security, performance, and fraud-prevention purposes.

• Session cookies required to keep you signed in (set by our authentication provider). We do not currently use third-party advertising or analytics cookies on stillgrowing.co itself. [Confirm: if the sales/checkout pages at baby.stillgrowing.co carry a Meta, TikTok, or Google Ads pixel for marketing purposes, that should be disclosed here and in Systeme.io's own policy for that subdomain.]

3. How we use your information

We use the information above to:

• Create and maintain your account, and let you sign in (including via "Sign in with Google").

• Deliver the reading experience: track which chapters you've unlocked, display your reflections and reactions to other readers in the Circle, and show your public profile.

• Verify purchases against unlocked content, to protect against unauthorized access to paid chapters.

• Send you transactional emails: reaction notifications, new-book announcements, and — only if you've provided a birthday — a birthday message once a year.

• Moderate community content (reflections, reviews, Circle posts) for safety, including a review pass that flags content suggesting self-harm risk, so we can point you toward support resources.

• Maintain and improve the security and reliability of the service.

We do not sell your personal information, and we do not use your data for third-party advertising.

4. Legal bases for processing (for visitors in the EU/UK)

5. Sharing your information

We share information with the service providers who help us run Still Growing, each acting under their own privacy and security commitments:

• Supabase — our database and authentication provider; stores your account, profile, and content data.

• Vercel — hosts the Still Growing web application.

• Resend — sends transactional emails on our behalf (reaction, new-book, and birthday emails).

• Mux — hosts and streams chapter reward videos.

• Systeme.io — powers our sales funnel and checkout pages (baby.stillgrowing.co), and passes us confirmation of successful or refunded orders.

• Stripe — processes payments through our Systeme.io checkout; Still Growing never receives or stores your full card details.

• Google — if you choose to sign in with Google, Google shares your basic account info (name, email, profile image) with us per your consent during that sign-in flow.

We do not share your information with any other third party except where required by law, to protect our rights, or in connection with a business transfer (e.g. a merger or acquisition).

6. Cookies and tracking

We use only the cookies necessary to keep you signed in and to remember your session. We do not currently use cookies for advertising or cross-site tracking on stillgrowing.co. [If this changes, or if the Systeme.io-hosted sales pages use marketing pixels, this section should be updated to match.]

7. International data transfers

Our service providers may process and store data outside your home country, including in the United States. Where this involves transferring personal data out of the EU/UK, our providers rely on standard contractual clauses or equivalent safeguards.

8. How long we keep your information

We keep your account and content data for as long as your account is active. If you delete your account, we remove your personal profile data within a reasonable period, except where we're required to keep records (for example, purchase and refund records, which we retain for accounting and legal purposes).

9. How we protect your information

We use reasonable technical and organizational measures to protect your information, including row-level access controls on our database so that only you (and authorized admins) can access your private data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to:

• EU/UK (GDPR/UK GDPR): access, correct, delete, or export your data; object to or restrict certain processing; and withdraw consent at any time.

• California (CCPA/CPRA): know what personal information we hold about you, request deletion, and opt out of the "sale" or "sharing" of personal information (we do not sell or share your data).

• Malaysia (PDPA): access and correct your personal data, and withdraw consent for optional processing.

To exercise any of these rights, email admin@stillgrowing.co. You can also update your display name, avatar, and birthday directly from your account settings, or delete your account reflections and reviews yourself where that option is available in the app.

11. Children's privacy

Still Growing is intended for adult readers and is not directed at children. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us at admin@stillgrowing.co and we'll remove it.

12. Third-party links

Our pages may contain links to other websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes may be communicated by email or a notice on our pages. Your continued use of our Services after changes take effect means you accept the updated policy.

14. Contact us

f you have any questions about this Privacy Policy or how we handle your information, please contact:

ClickBloom Marketing

No 3, Jalan Tembusu 3/9, Seksyen 3, 40000 Shah Alam, Selangor, Malaysia

Email:  admin@stillgrowing.co.

This document is provided for general informational purposes and is not legal advice. You are responsible for ensuring it accurately reflects your data practices and complies with the laws that apply to you and your customers.