Legal

Privacy Notice

Last updated: June 24, 2026

1. Who we are

This site (Shevet Challenges, operated at challenges.avodahdynamics.com) is provided by Hustle Culture Co. ("we", "us", "our"), the data controller responsible for your personal data. Contact: support@avodahdynamics.com.

2. Personal data we collect

  • Account data: name, email address, password (hashed), profile preferences.
  • Authentication data: login identifiers (including Google OAuth identifiers if you sign in with Google).
  • Challenge activity: enrollments, progress, completions, journal entries, and testimonies you submit.
  • Support messages: communications you send us.
  • Usage & device data: IP address, browser/device identifiers, pages viewed, referring URLs, timestamps.
  • Cookies: essential session cookies and limited analytics cookies.

Payment card data is collected directly by Paddle and is not stored on our servers.

3. Purposes & legal bases

  • Provide the service (account creation, challenge delivery, progress tracking) — performance of contract.
  • Process purchases via our merchant of record, Paddle — performance of contract.
  • Security & fraud prevention — legitimate interests.
  • Product improvement & analytics — legitimate interests.
  • Customer support — performance of contract / legitimate interests.
  • Marketing emails (if you opt in) — consent, withdrawable at any time.
  • Legal compliance — legal obligation.

4. Who we share data with

  • Paddle.com Market Ltd — Merchant of Record. Paddle handles checkout, payments, tax compliance, invoicing, subscription management, and refunds. See Paddle's privacy notice at paddle.com/legal/privacy.
  • Hosting & infrastructure providers (e.g. Supabase, Cloudflare) — processors that store and serve the application.
  • Email & analytics providers — for transactional emails and product analytics.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

5. International transfers

Some recipients (including Paddle and our infrastructure providers) may process your data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep your account data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records are retained as required by tax and accounting law. You may request deletion at any time (see section 7).

7. Your rights

You have the right to:

  • Access your personal data and request a copy.
  • Rectify inaccurate data.
  • Request erasure ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent (where processing is based on consent).
  • Lodge a complaint with your local data protection authority.

To exercise these rights, email support@avodahdynamics.com. We respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and hashed credentials — to protect personal data. No system is 100% secure, but we work to keep yours safe.

9. Cookies

We use essential cookies required to run the site (session, authentication) and limited analytics cookies to understand product usage. You can manage cookies via your browser settings.

10. Children

The service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction).

11. Changes to this notice

We may update this notice from time to time. Material changes will be communicated via the site or email.