Privacy & Data

This section describes what the app stores about you, who can see it, and what happens when you leave.

It is written plainly, without legal boilerplate, because you deserve to understand it rather than be told to accept it.

What is stored

The app stores three categories of data about you.

Content you create. Every subject, ritual, task, goal, and reflection you write is stored in the app's database. This includes titles, descriptions, venues, dates, times, durations, and the full text of your reflections.

Progress you earn. The app records your XP, level, rank, streak count, achievements, S-Rank events, gold balance, gold transactions, and purchases.

Preferences you set. Your accent colour, your leaderboard visibility, and your capacity entitlements.

That is everything. There is no hidden category, no shadow profile, and no inferred data.

What is not stored

The app does not store:

• Analytics about which pages you visit or which buttons you click.
• Advertising identifiers, tracking pixels, or third-party cookies.
• Your location, your device fingerprint, or your IP address beyond what the web server needs to serve a request.
• Any information about you gathered from external services.

The app does not use Google Analytics, Facebook Pixel, Mixpanel, or any similar tool. There are no scripts on any page that phone home to a third party.

Who can see your data

You, and only you.

Every read and write in the app is scoped to your authenticated account. When you log in, you see only your own subjects, rituals, tasks, goals, reflections, progress, and gold. No API endpoint accepts a user ID from the client. No view renders another user's content.

The one exception is the leaderboard in the Arena, which shows your username, XP, level, rank, and streak to other logged-in users. It does not show your subjects, tasks, goals, reflections, or any other content. You can opt out at any time — a small link at the bottom of the leaderboard tab removes your row from everyone else's view.

Encryption

Your connection to the app is encrypted. Every request and response between your browser and the app's server travels over HTTPS. Nobody on the network between you and the server can read what passes between them.

The app's database is encrypted at rest by the hosting platform. If the physical storage media were stolen, the data on it could not be read without the platform's encryption key.

The app does not yet have end-to-end encryption. This means that content you write — subjects, task titles, reflection answers — is stored in a form the server can read. The operator of the app does not read your content, and no employee or third party has access to it, but the app is not yet designed so that it could not.

End-to-end encryption is a committed upcoming phase. When it lands, content you write will be encrypted in your browser before it leaves your device, with a key that never reaches the server. At that point, even the operator will not be able to read your subjects, tasks, goals, or reflections. Metadata — counts, dates, durations, XP, gold — will remain accessible to the server so that the leaderboard, achievements, streaks, and the shop continue to function.

Until then, please treat the app as a private notebook: read by no one, but not sealed against everyone. If you write about things whose disclosure would harm you, this is not the place for them yet.

Cookies and sessions

The app uses one cookie: a session cookie that identifies you while you are logged in. It is not used for tracking, not shared with any third party, and not accessible to JavaScript.

There are no advertising cookies, no analytics cookies, and no third-party cookies.

Data retention

Your data is retained for as long as your account exists. There is no automatic deletion, no rolling expiry, and no archival policy that removes data after a period of inactivity.

If you want your data gone, delete your account.

Deleting your account

You can delete your account at any time from the Settings page. The deletion is complete and permanent.

When you delete your account:

• Every record associated with your user is removed — subjects, rituals, sessions, goals, reflections, XP, gold, purchases, achievements, preferences, and capacities.
• The deletion cascades through every table that references your user ID. Nothing is left behind.
• Your login credentials are removed. You cannot log back in.
• Nothing is preserved, backed up, or archived.

Deletion cannot be undone. If you want to keep a copy of anything, export it first — or, if export is not yet available, contact the operator before deleting.

What this app is not for

The app is a scheduling and reflection tool. It is not a medical record, a therapeutic service, a financial ledger, or a legal document store.

It is not designed for sensitive personal information — health data, financial records, legal correspondence, or anything else whose loss or disclosure would cause you harm. If you use the reflections space to write about difficult things — and you may — please remember that those reflections are stored in a database on the operator's server. The app is private, but it is not a vault.

Contact

For any privacy-related question or request, contact the operator directly. The contact method is provided on the signup and login pages.

Changes to this statement

If this statement changes — for example, when end-to-end encryption is introduced, or when a new feature changes what is stored — the change will be noted here with its date. The app does not silently change what it stores.