Privacy Policy
Last updated: March 17, 2026
This Privacy Policy describes how Gratitude Performance Tracker ("the App", "we", "us", or "our") collects, uses, and protects your personal information when you use our mobile application.
1. Information We Collect
We collect the following types of information to provide and improve the App:
- Account information — email address and display name used for authentication
- Journal entries — gratitude entries, reflections, and associated mood ratings
- Habit & goal data — habits you track and goals you set, along with your progress
- Sport & climbing sessions — training logs, climbing grades, and injury records
- Nutrition & food logs — meals, macro tracking data, and barcode scan results
- Health & wellness metrics — sleep quality, hydration levels, and period/cycle tracking
- Photos — images you attach to journal entries or your profile
- Social data — friend connections, shared entries, and messages
2. How We Use Your Information
Your information is used to:
- Provide, maintain, and improve the App's features
- Display your personal statistics, charts, streaks, and insights
- Enable social features such as friend invites and shared entries
- Process your subscription through our payment provider
- Send important service-related notifications
3. Data Storage & Security
Your data is stored using Google Firebase services (Firestore database and Cloud Storage for files/photos). All data is encrypted in transit using TLS/SSL. Firebase infrastructure provides encryption at rest for stored data.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, or destruction.
4. Third-Party Services
The App uses the following third-party services:
- Firebase Authentication — for secure account sign-in and management
- Firebase Firestore — for cloud database storage of your app data
- Firebase Cloud Storage — for storing photos and file attachments
- RevenueCat — for managing in-app subscriptions and purchases
- Open Food Facts API — for retrieving nutritional information via barcode scanning (no personal data is sent to this service)
Each third-party service has its own privacy policy governing how they handle data. We encourage you to review their respective policies.
5. Data Sharing
We do not sell, rent, or share your personal data with advertisers or marketing companies.
Your data may only be shared in the following limited circumstances:
- With other users, when you explicitly choose to share entries or connect with friends
- With third-party service providers listed above, solely to operate the App
- When required by law or to comply with legal process
6. Health & Sensitive Data
The App collects certain health-related information including period/cycle tracking, sleep data, hydration metrics, and injury records. This data is:
- Stored securely using the same protections as all other app data
- Never shared with third parties for advertising or marketing purposes
- Only visible to you (and friends you explicitly share with)
- Deletable at any time through your account settings
7. Your Rights
You have the right to:
- Access — request a copy of all personal data we hold about you
- Delete — delete your account and all associated data at any time
- Export — request an export of your data in a portable format
- Rectify — update or correct your personal information
- Withdraw consent — stop using the App and request data deletion
8. Data Retention
Your data is retained for as long as you maintain an active account. When you delete your account, all associated personal data is permanently deleted from our systems within 30 days. Anonymised, aggregated data that cannot identify you may be retained for analytical purposes.
9. Children's Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.
10. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:
- The right to data portability
- The right to restrict processing
- The right to object to processing
- The right to lodge a complaint with a supervisory authority
Our legal basis for processing your data is your consent (provided when you create an account) and the performance of the contract (providing the App's services to you).
11. CCPA Compliance (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- The right to know what personal information is collected
- The right to request deletion of personal information
- The right to opt out of the sale of personal information — we do not sell your personal information
- The right to non-discrimination for exercising your privacy rights
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App and updating the "Last updated" date above. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact us at:
Email: tna.naomi@gmail.com