Privacy Policy

Effective date: [DATE — set before publishing]

Spiralen is a paid product. We make money from the price of the app, not from your data. This policy explains, plainly, what we collect, why, and what we never do.

What we collect

• Account details. When you sign in with Apple, Google, or an email magic link, we receive your email address (or Apple's private relay address) and a unique account identifier. Authentication is handled by Supabase, our backend provider.
• Your content. The principles, habits, tasks, goals, check-offs and settings you create are stored on our backend (Supabase, hosted on managed cloud infrastructure) so they can sync across your devices and survive a lost phone. This content is private to your account and protected by row-level security.
• Purchase status. Subscriptions and the lifetime purchase are processed by Apple's App Store or Google Play — we never see your payment card. RevenueCat, our subscription-management provider, processes purchase receipts and an anonymous app user ID to tell the app whether your subscription is active.
• Feedback you send. If you use the in-app contact form, we receive the message you write.

What we do not do

• No advertising, and no advertising identifiers.
• No analytics or tracking SDKs.
• We never sell your data, and never share it for marketing.
• No social features — your data is visible only to you.

Where your data lives

Your content is cached on your device so the app works fully offline, and synced to Supabase when you are online. Demo data shown before you set up your own is stored only on your device and is never uploaded.

Export and deletion

You can export everything at any time from Account → Download data (CSV, Markdown and JSON). You can delete your account and all associated data from Account → Delete account; deletion is immediate and permanent. Signing out does not delete anything.

Service providers

We rely on a small number of processors to run Spiralen: Supabase (authentication and database), RevenueCat (purchase entitlement), and Apple / Google (payments and app distribution). Each receives only what it needs to do its job.

Children

Spiralen is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we will note it here with a new effective date before the change applies.

Contact

Questions or requests about your data: hello@spiralen.xyz