Privacy

What we store

Your account email, display name, password hash, and the data you enter into the app — goals, habits, notes, health targets, money items, ventures, body measurements, and chat history with the assistant if you opt in.

We also store which features you tap (e.g. "opened habits room") so we can learn what helps. This is internal-only.

Where it lives

Everything is stored on a single server in the EU (DigitalOcean London). The database is not shared with anyone. Nightly encrypted backups (TBC).

Third parties

• Groq — when you opt into Brain Chat, the messages you send and the relevant context are sent to Groq's hosted Llama model. Groq's terms apply. Off by default; see Settings → Brain chat.
• Spotify — if you connect Spotify, we store an encrypted OAuth token to call their API on your behalf. Disconnect any time.
• Apple/Google push services — if you enable push notifications, your device's push endpoint is stored and used to deliver reminders.

We do not use analytics services, ad networks, or tracking pixels.

Your rights

• See your data — Settings → Export your data.
• Delete your data — Settings → Delete account. Cascade-deletes every row across every table.
• Revoke chat consent — Settings → Brain chat → Off.
• Contact — /feedback.

Health + financial data

Some of what you can store here counts as special-category data under UK GDPR (anything health-related). You can refuse to enter it; the app works without it. Money items stay on this server; we do not connect to your bank.