yeah, gotta add a formal privacy policy. It'll look something like: - Will never share your data without your explicit consent

- Don't use any 3rd party trackers (not even GA) so no data shared with them

- Data stored in India (AWS) in a server owned by me

Anything else you think I should cover?