Privacy Policy

Draft — last updated during early development.

We collect only what's needed to run your account and personalize your practice: your email, display name, and the preferences and activity you create inside the app (journal entries, Sankalps, practice history). Journal entries are private to you.

We use Supabase (Postgres, hosted in the cloud) for authentication, data storage, and scheduled notifications, and SendGrid to deliver one-time sign-in codes to your email — sign-in is email-only, we do not collect or use your phone number. We do not sell personal data. Analytics events are aggregated and used to improve the product, not to build individual profiles for advertising.

To prevent abuse, sign-in requests are rate-limited by IP address, and IP addresses used for this purpose are automatically deleted after 24 hours. If something breaks, technical details of the error (message, and your account if you were signed in) may be logged for up to 30 days so we can fix it, and are never used for any other purpose.

You can export a copy of your data at any time from Settings. Deleting an item (a journal entry, reminder, or routine entry) removes it from your view and from every feature immediately; contact us if you'd like it purged from backups as well.