Privacy Policy

01What we collect

• An anonymous identifier. When you first open the app, it creates an anonymous account (a random ID) with Google Firebase Authentication. It does not contain your name, phone number or contacts.
• The thoughts you take. When you choose a supportive thought, we store that thought, the critic it answered and the time, linked to your identifier, so it appears in «My thoughts».
• Your email address and password — only if you choose to create an account with email. The password is handled by Firebase Authentication; we never see it.
• If you continue with Apple or Google instead: the email address and name that Apple or Google share with us (with Apple you can hide your email — we then get a private relay address), received through Firebase Authentication. We never see your Apple or Google password. When you delete your account, we also revoke the app’s access to your Apple ID.
• Subscription status. RevenueCat, our subscription provider, receives your store purchase receipts and an app user ID so the app knows whether your subscription or trial is active. We never see your payment card details — payments are handled by Apple or Google.
• Usage statistics, unless you turn them off. How the app is used: which screens you open and what you do in them (for example: a critic was opened, a thought was shown, taken or swapped, a setting was changed, how onboarding and purchases went), with the ID of the critic or thought. With them go the app language and voice, your store country, subscription status and your device type and OS version. They are sent to PostHog under a random ID of their own — or, once you sign in, your account ID. If the app crashes or hits an error, a technical report goes with them (the error, where in the app’s code it happened, device and OS). They never contain the text of a thought, your own wording, your email or your name. Turn them off in Profile → «Usage stats».
• Technical data that Google Firebase processes to deliver the service (for example IP address and device type in server logs).

We do not collect your location, photos, contacts, health data or advertising identifiers.

02How we use it

• To show your collection of thoughts and keep it when you sign in on another device.
• To understand, in aggregate, how the app is used — which thoughts are taken or swapped, where people get stuck, what brings them back — so we can make it better.
• To keep the service secure and working, and to find and fix crashes.

We do not sell your data, use it for advertising, track you across other apps or websites, or build advertising profiles about you. The legal bases are performance of our service to you and our legitimate interest in improving it (usage statistics — which you can turn off at any time).

03Where it is stored

Data is stored with Google Firebase (Authentication and Cloud Firestore), for subscriptions RevenueCat, and for usage statistics PostHog (on its EU servers) — all act as our processors. RevenueCat shares subscription events (for example, a trial becoming a paid subscription) with PostHog under the same random ID. Data may be processed on servers outside your country, under Google’s data protection terms and standard contractual clauses. The app also keeps on your device a copy of the critics and thoughts, and a copy of your own collection (the thoughts you kept and any words you changed), so it opens and works offline. Signing out or deleting your account removes your collection from the device.

04How long we keep it

We keep your thoughts for as long as your account exists. If you delete the app without an email account, the anonymous account can no longer be reached; we delete such inactive data periodically. Usage statistics are kept only as long as needed to understand how the app is used. You can delete your data yourself at any time (see below).

05Your rights and deleting your data

You can access, correct, export or delete your data, and object to its processing. To delete your account and everything linked to it, open Profile in the app and tap «Delete account» (without an email account: «Delete my data») — your thoughts and the account are erased at once, and it cannot be undone; the app also starts a new, unrelated usage-statistics ID. Deleting the account does not cancel a subscription: that is billed by the App Store or Google Play and is cancelled in their subscription settings. If you no longer have the app, use the «Delete your account» page on this site, or write to tepalenko@gmail.com from the email of your account, and we will delete it within 30 days. If you are in the EU/EEA or UK, you may also complain to your data protection authority.

06Children

The app is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

07Security

Data is encrypted in transit, and access rules ensure that only your own account can read your thoughts. No method is perfectly secure, but we take reasonable measures to protect your data.

08Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app.

09Contact

Questions about privacy: tepalenko@gmail.com.