Privacy Policy

Who we are

Layout Face is operated by Flavio Mendes, based in Ireland. For any privacy question or request, contact flavio@trilha.info. We are the data controller for the information described below.

What we collect

• Account data: your name, email address, and a hashed password (or federated sign-in identifier) so you can log in.
• Watchface data: the layouts and layout codes you save, so your designs are available across sessions.
• Payment data: if you buy a license, our payment processor handles your card details. We store only non-sensitive references (Stripe customer, checkout, and payment identifiers, amount, and currency) — never full card numbers.
• Operational data: minimal server logs and email delivery metadata used for security and troubleshooting.

The Layout Face watchface itself reads on-device health and sensor values (such as heart rate, steps, and battery) locally on your Garmin device to render your face. That data is never transmitted to us — the watchface has no network permissions.

Why we use it (legal bases)

• Contract: to create your account, save your faces, and deliver a license you purchased.
• Legitimate interests: to secure the service, prevent abuse, and keep essential records.
• Legal obligation: to keep transaction records required by tax and accounting law.

Processors we rely on

• Stripe — payment processing and refunds.
• Neon — managed Postgres database hosting.
• Resend — transactional email (verification, receipts).
• Vercel — application hosting and delivery.

These providers act as processors under our instructions and process data only to deliver their service.

Cookies

We use only strictly necessary cookies to keep you signed in and to protect the service. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required for optional tracking.

Retention

We keep account and watchface data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except records we must retain for legal or accounting reasons (for example, proof of a transaction), which we keep for the statutory period.

Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, and object to certain processing. You can also withdraw consent where processing relies on it and lodge a complaint with your local supervisory authority (in Ireland, the Data Protection Commission). To exercise any right, email flavio@trilha.info.

Changes

We may update this policy; material changes will be reflected in the “last updated” date above. See also our Terms of Service and Refund Policy.