Privacy Policy
Last updated: August 2026
The short version
Without an account, everything you write stays on your phone and never reaches us. An account is required only if you subscribe to the Growth Pass, and it exists so your records survive a lost or replaced phone. Even then, the parts that read like a diary — the messages you didn't send, your notes, your photos — are encrypted on your phone before they are uploaded, with a key that never leaves it. We hold those as unreadable data. We cannot open them, and neither can anyone who obtains them from us.
On your phone
The app works fully offline and keeps all of this on the device:
- The breakup date and goal you enter
- Every time you opened the app to hold back, and what you decided
- How strong the urge felt, when you record it
- Messages you wrote but chose not to send
- Growth Pass records: check-ins, goals, notes, and photos you add
- App settings
If you create an account
Signing in is asked for once, immediately before a Growth Pass subscription, and never anywhere else. Control Passes and the free app require no account at all.
What the account itself holds
- Your email address, from Sign in with Apple or Google. If you use Apple's Hide My Email, we only ever see the relay address
- An account identifier we use to keep your backup separate
Backed up in readable form
Structure only — the shape of your history, not its content:
- Dates and times
- Which category a record belongs to, and whether you held back
- How strong the urge felt, as one of five levels from none to critical
- Counters and progress
Backed up encrypted, unreadable to us
- The messages you wrote and didn't send
- Anything you typed in your own words
- Photos you attach to a growth record
These are encrypted on your phone with AES-256-GCM before upload. The key is held in your device's keychain and is never sent to us. You may also generate a 12-word recovery code so you can unlock the backup on a new phone; that code is yours alone — if you lose it, we cannot recover the encrypted items either, and support cannot do it for you.
What we never collect
- Your name, beyond the email tied to your account
- Your ex's name, number, or any way to identify them
- Your contacts, call log, or messages from any other app
- Your location
- Your payment details — Apple and Google handle those, and we never see them
Where it is kept
Backups are stored on Supabase infrastructure in the Seoul region (South Korea). Supabase is a US-incorporated company, so its personnel may access the systems for operation and support; the encrypted items remain unreadable to them for the same reason they are unreadable to us.
Deleting your data
Start Over (in Settings) erases the records you chose to clear from both the phone and the backup. If you have another device signed in, they disappear there too.
Delete account (in Settings) removes the account, the backup, and the encrypted photo files, and asks Apple to revoke the sign-in link. Records still on your phone stay until you remove the app.
Uninstalling deletes everything on the phone, including the encryption key. Without an account, or without your recovery code, that deletion is permanent.
Analytics
We record which screens are opened and which features are used, so we can tell what is working. These reports carry no names, no account, and nothing you wrote — they say "a paywall was shown", never who saw it or why.
Third-party services
- Supabase — accounts and backup storage (Seoul region)
- Sign in with Apple and Google Sign-In — account sign-in
- RevenueCat — managing subscriptions and purchases
- Firebase Analytics — anonymous usage statistics
- Google AdMob — ads in the free version
Each has its own privacy policy, and we encourage you to read them.
Age
The app is not intended for anyone under 14, and we do not knowingly collect data from them.
Changes to this policy
We may update this policy. Changes are posted on this page with a new "Last updated" date.
Contact
Questions about this policy: support@myquietspot.com