What we collect: name, email, phone (optional), login timestamps.
Why we collect: account creation, authentication, and profile management.
Protection: passwords are hashed; access is restricted to the account owner.
Retention: you may request deletion anytime using "Delete my account".
This is a student project demonstrating privacy-by-design concepts.