Privacy Policy

Last Updated: January 8, 2025

This Privacy Policy describes how Activity Tracker ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application.

TL;DR: We collect minimal data (email and activity logs), use Supabase for secure storage, and never sell your information. You own your data.

1. Information We Collect

1.1 Information You Provide

Email address: Collected via Google Sign-In for authentication
Name: Optionally collected from your Google account profile
Activity data: Habits and activities you create and track in the app
Calendar entries: Dates and counts when you log activities

1.2 Automatically Collected Information

Device information: Device type, operating system version
Usage data: App usage statistics (crashes, errors)
Authentication tokens: Secure tokens to keep you signed in

2. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain the Activity Tracker service
To authenticate you and secure your account
To sync your data across your devices
To send you important service updates (only if necessary)
To improve app functionality and fix bugs
To respond to your support requests

3. Data Storage and Security

3.1 Where Your Data is Stored

Your data is stored securely using Supabase, a trusted cloud database platform built on PostgreSQL. All data is encrypted both in transit (using HTTPS/TLS) and at rest.

3.2 Security Measures

Google OAuth 2.0 for secure authentication
Row Level Security (RLS) policies ensure you can only access your own data
Encrypted connections for all data transfers
Regular security updates and monitoring

3.3 Data Retention

We retain your data for as long as your account is active. If you delete your account, all your personal data will be permanently deleted within 30 days.

4. Data Sharing and Third Parties

4.1 We Do NOT:

Sell your personal information to anyone
Share your data with advertisers
Use your data for marketing purposes without consent
Access your activity data except for support purposes (with your permission)

4.2 Third-Party Services We Use:

Google Sign-In: For authentication (subject to Google's Privacy Policy)
Supabase: For secure data storage (subject to Supabase's Privacy Policy)

These services have their own privacy policies and we recommend reviewing them:

Google Privacy Policy: https://policies.google.com/privacy
Supabase Privacy Policy: https://supabase.com/privacy

5. Your Data Rights

You have the following rights regarding your personal data:

Access: Request a copy of your data
Correction: Update incorrect or incomplete data
Deletion: Request deletion of your account and all associated data
Export: Download your data in a portable format (coming soon)
Opt-out: Stop receiving non-essential communications

To exercise any of these rights, please contact us at the email below.

6. Children's Privacy

Activity Tracker is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Analytics and Cookies

We currently do not use analytics services or cookies. If we implement them in the future, this policy will be updated accordingly and you will be notified.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, and the right to request deletion of your information.

11. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: alphabyai@gmail.com
Response Time: We aim to respond within 48 hours