Privacy Policy

Last updated: [DATE]

Before you publish this: this policy was drafted to accurately describe what FireWithin's code actually does as of this writing — local-first storage, optional Google/Apple sign-in, optional cloud sync via Supabase, and subscriptions via RevenueCat through the App Store / Google Play. It is a starting point, not legal advice. Have it reviewed by a lawyer before publishing, and update the bracketed placeholders ([DATE], [CONTACT EMAIL], [COMPANY/DEVELOPER NAME], [JURISDICTION]) with your real details, especially if you have users in the EU/UK (GDPR) or California (CCPA).

This Privacy Policy explains what information FireWithin ("the App", "we", "us") collects, how it's used, and what choices you have. FireWithin is developed by [COMPANY/DEVELOPER NAME].

1. Information We Collect

Local data (always). By default, everything you do in the App — your check-in history, streak, tasks, daily mission progress, reminders, and cosmetic choices (flame color, card frame, app theme) — is stored only on your device. We never see this data unless you choose to sign in.

Account data (only if you sign in). Signing in is optional and available only via Google or Apple — the App never asks for an email address or password directly. If you sign in, we store the identifier your account provider gives us and use it to sync your progress (the same data listed above) to our cloud database so it can follow you across devices and survive a reinstall.

Purchase data. Subscriptions are handled by Apple/Google and processed through RevenueCat, a subscription management provider. We receive your subscription status (active/expired) so the App can unlock premium features — we do not receive your payment card details, which are handled entirely by Apple/Google.

Device permissions. The App may request notification permission (for reminders you set) and microphone permission (only if you choose to use an optional in-app voice feature). Neither is required to use the core app, and nothing recorded is sent off your device unless you explicitly choose to.

2. How We Use Information

To let the App function — track your streak, tasks, and missions
To sync your progress across your devices, if you've signed in
To validate and manage your subscription, if you've subscribed
To send you the local reminders you set within the App

We do not sell your data. We do not run advertising in the App, and we do not use third-party ad-tracking SDKs.

3. Third-Party Services

The App relies on the following third-party services to function:

Supabase — stores your account and synced progress data, if you sign in.
Google / Apple Sign-In — handles authentication if you choose to sign in.
RevenueCat, Google Play Billing, Apple StoreKit — process subscriptions and purchases.

Each of these providers has its own privacy policy governing how it handles data on our behalf.

4. Data Retention & Deletion

Local data stays on your device until you delete the App or clear its data. Synced data is retained until you delete your account or request deletion. To request deletion of your cloud data, contact us at [CONTACT EMAIL].

5. Children's Privacy

FireWithin is not directed at children under 13 (or the minimum age required by your jurisdiction), and we do not knowingly collect personal information from children.

6. Your Choices

You can use the App entirely without an account — no data ever leaves your device.
You can sign out at any time, which stops future syncing.
You can disable notification permissions in your device settings at any time.
You can request access to, or deletion of, your synced data by contacting us.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this policy? Reach us at [CONTACT EMAIL].