✦ The Rebuild

Privacy Policy

Last updated: 7 July 2026

The Rebuild Planner ("we", "us", "our") is operated by 30 Something Creative, based in Brighton, England, United Kingdom. This policy explains what personal data we collect, why we collect it, how it is stored and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who we are

The Rebuild Planner is operated by 30 Something Creative. If you have any questions about how we handle your personal data, please contact us at hello@lifeafter30.co.uk or via our contact page.

2. What data we collect

Data you provide directly

  • Name and email address (when you create an account or purchase access).
  • Encrypted password.
  • Payment details — processed and held securely by Paddle.com, our payment provider and Merchant of Record for all purchases. We do not store card data.

Data you enter into the planner app

The Rebuild Planner stores the following data in our encrypted cloud database so that it is available to you across devices when you sign in:

  • Menstrual cycle dates, symptoms, mood and phase notes.
  • Gratitude journal entries and daily prompts.
  • Financial information entered into budget and savings tools.
  • Goals, tasks, appointments and planner entries.
  • Workout logs and personal bests.
  • Vision board notes, wins and weekly check-ins.

Data collected automatically

  • Basic server and security logs (including IP address, browser type, pages visited) collected by our hosting and backend providers for security and performance purposes.
  • If you join our waitlist or subscribe to our newsletter, MailerLite collects your email address, and basic engagement data such as open and click rates, so we can notify you and keep you updated.

3. Why we collect your data

  • To process your purchase and deliver access to The Rebuild Planner (lawful basis: performance of a contract).
  • To send you emails about your purchase, account or product updates (performance of a contract).
  • To notify waitlist subscribers at launch, and to send our newsletter or marketing communications where you have opted in (consent).
  • To improve the app and understand how users interact with it (legitimate interests).
  • To comply with legal obligations, including tax and financial record-keeping (legal obligation).

4. Special category (health) data

The cycle tracker, mood log and any wellbeing features let you record information about your health. Under Article 9 UK GDPR this is special category data. We process it only on the basis of your explicit consent, which you give by entering it. You can delete this data at any time from within the app, or delete your account to wipe it entirely.

5. Third parties we share data with

We do not sell your personal data. We share data only with trusted third parties where necessary to operate the service:

  • Paddle.com — our payment provider and the Merchant of Record for all purchases. Paddle handles checkout, card data, applicable sales tax/VAT, invoicing, receipts and refunds. We never see or store your card details. Paddle is PCI-DSS compliant.
  • Lovable Cloud — our hosting and managed database; stores your account and planner data in an encrypted database within the EU/UK.
  • MailerLite — collects and processes your email address if you join our waitlist or opt in to our newsletter.
  • Google Analytics (GA4) — collects anonymised data about how visitors use our site (pages viewed, time on site, general location) to help us understand and improve the service. Privacy policy: policies.google.com/privacy.
  • Meta (Facebook/Instagram) — the Meta Pixel collects data about your visit to help us measure ad performance and, where you've consented, show you relevant ads on Facebook and Instagram. Privacy policy: facebook.com/privacy/policy.

All third parties are required to handle your data in accordance with applicable data protection law. Because Paddle acts as Merchant of Record, Paddle is an independent controller of your payment and billing data for the purposes of that transaction — please see Paddle's Privacy Policy for details of how they handle it.

6. How long we keep your data

  • Purchase and transaction records: Paddle retains payment and tax records as Merchant of Record; we separately retain purchase confirmation records for our own bookkeeping for 7 years (HMRC requirement).
  • Waitlist and email marketing list: until you unsubscribe or request deletion.
  • Account and planner data: until you delete your account. After deletion, data is wiped from live systems within 30 days; backups are rotated and overwritten within 90 days.
  • Server and security logs: typically 30 days.

7. How we keep your data safe

  • All data transmitted to and from our site is encrypted via HTTPS (TLS).
  • Your account and planner data is stored in an encrypted database hosted within the EU/UK.
  • Passwords are hashed and never stored in plain text.
  • Payment data is processed exclusively by Paddle and never touches our systems.
  • We use reputable, GDPR-compliant third-party processors with their own security measures.

8. Your rights under UK GDPR

As a UK resident you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten") — you can do this yourself at any time via More → My account → Delete my account.
  • Restrict processing — ask us to limit how we use your data in certain circumstances.
  • Data portability — request your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests or for direct marketing at any time.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email hello@lifeafter30.co.uk. We will respond within one calendar month.

9. Children's data

The Rebuild Planner is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has provided us with their data, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify subscribers by email. The date at the top of this page reflects when it was last revised.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority, the Information Commissioner's Office (telephone 0303 123 1113). We would, however, appreciate the opportunity to address your concerns directly first — please email hello@lifeafter30.co.uk.