Privacy policy

What we keep

An account holds:

• Your email address, and your display name.
• A profile picture URL, only if you signed in with Google and Google supplied one. We never see the image file; it is fetched from Google by your browser, and it is not used as your character in the app.
• Which rooms you are in, your role in each, and when you joined or left.
• What you ticked off and on which day, and what that was worth — the points, level, streak, coins and badges that come out of it.
• The tasks, badges and events in any room you run, including their titles, notes and places.
• Your notification settings, the time you want a daily reminder, and your device timezone.
• Your journal entries, encrypted before they leave your device — see below.

What other people in your room can see

Your name, your character and whatever you are wearing, your level, your points and streak in that room, the badges you have earned, and how much of today you have finished.

They cannot see your checklist. Which tasks you have and which of them you ticked is not readable by other members or by the person who runs the room — only the totals are. Your journal is not visible to anybody but you.

Your journal

Journal entries are encrypted in your browser, with a key belonging to your account, before they are sent. What is stored is ciphertext: the text of an entry is not readable in the database, in a backup, or by anybody with access to either.

By default the key is held for your account so that your journal opens on a new device without you having to do anything. That is real protection against anybody reading the stored data, and it is not end-to-end: under that default, the service holds material that could unwrap the key.

If you set a passphrase on your journal, the key is wrapped with it and only your passphrase can unwrap it. That is end-to-end, and it means we cannot recover your entries if you forget the passphrase and lose the recovery code. That is the point of it.

Who processes it for us

Three, and only for the job named:

• Supabase — the database, the sign-in system and the scheduled jobs. Your data is stored there.
• Google — only if you choose "Continue with Google". Google tells us your email address, name and picture URL. We do not get access to anything else in your Google account.
• Your browser vendor's push service (Apple, Google or Mozilla, depending on your device) — only if you turn notifications on, and only to deliver the notification. It receives the message we send, not your account.

What we do not do

There is no advertising, no ad network, no tracking pixel and no analytics package in this app. We do not build a profile of you, we do not sell or rent anything about you, and we do not share your data with anybody beyond the three processors above.

Cookies and local storage

The app stores your sign-in session and your language choice on your own device, and keeps a copy of recent screens there so it works without a connection. That is what makes it installable. None of it is used to follow you anywhere, and clearing your browser storage removes all of it.

How long it is kept

For as long as your account exists. Deleting your account, from Profile → Account, removes it and the progress attached to it. If you leave a room, your history in that room is kept so that rejoining restores it; deleting your account removes that too.

Children

The app is not aimed at children under 13, and we do not knowingly keep information about them. If a child has created an account, write to us and we will remove it.

Your rights

You can see everything the app holds about you from inside the app, correct your name and settings at any time, and delete your account yourself. If you would like a copy of your data, or want anything removed that you cannot remove yourself, write to us and we will do it.

Changes

If this policy changes in a way that affects what we collect or who we share it with, the date at the top changes and the app will say so. Continuing to use it after that means the new version applies.

Contact

Write to info@alburaqlabs.com. We read it.