Privacy Policy

Last updated [[EFFECTIVE_DATE]] · Applies to the Cinder Android app and this website.

The short version. Cinder is a local-first app. Your habits, logs, streaks, and settings live in a database on your device, and the app works fully offline. Signing in is optional — if you never create an account, nothing leaves your device. If you do create an account and turn on cloud sync (a Cinder Pro feature), a copy of your habit data is stored on our cloud backend so it stays in sync across your devices (see §3). Either way, we do not sell, rent, or share your personal information, and we show no ads.

1. Who we are

This app and website ("Cinder", "we", "us") are operated by[[LEGAL_ENTITY]]. You can reach us at[[SUPPORT_EMAIL]].

2. Data stored on your device

When you use Cinder, the app creates and stores the followinglocally on your device:

Habits you create (name, type, schedule, tag, color, icon, reminder time)
Your completions, timer sessions, and logged minutes
Streak and freeze balances and history
App preferences (theme, palette, settings)

Unless you sign in and turn on cloud sync (see §3), this information never leaves your device except when you choose to export or share it (see §7). We cannot see it.

3. Optional account & cloud sync

You can use Cinder entirely without an account. If you want your habits to sync across devices, you can create an account and sign in. Cloud sync itself is aCinder Pro feature and runs only while you are signed in, subscribed to Pro, and online — but note that creating an account stores your sign-in details with us even if you never subscribe (see below).

What we store for your account

When you create an account or sign in, our authentication provider stores:

Your email address.
A display name, if you provide one (or the name from your Google account when you sign in with Google).
A securely hashed password if you sign up with email and a password. We never see or store your password in plain text.
A unique account identifier and basic session/authentication records (for example, when you last signed in).

If you sign in with Google, Google shares your name and email address with us for the purpose of creating your account; your use of Google sign-in is also subject to Google's privacy policy.

What syncs when cloud sync is on

While cloud sync is active, a copy of the following is stored on our cloud backend and associated with your account so it can be restored on your other devices:

Your habits (name, type, schedule, color, icon, reminder time)
Your completions and logged minutes
Your timer sessions
Your weekly-quota progress
Your streak-freeze history

Your app settings, theme, and on-device streak state are not uploaded — they stay on your device. We use this data only to provide the sync feature. We do not sell it, share it for advertising, or use it to profile you.

Who processes this data

Account and sync data is hosted on our behalf by Supabase, which provides the authentication and database infrastructure, on servers located in[[DATA_REGION]]. Supabase acts as our data processor and does not use your data for its own purposes. Data is transmitted over an encrypted connection (HTTPS/TLS).

4. Information we do not collect

No account is required to use the app — signing in is entirely optional (see §3).
No location, contacts, photos, microphone, or camera access.
No advertising identifiers and no third-party advertising or analytics SDKs that profile you.

5. Device permissions

Notifications

If you enable reminders, Cinder schedules local notifications on your device at the times you choose. These are generated and delivered entirely on-device; no reminder content is sent to us or any third party. You can deny or revoke this permission at any time in Android settings.

6. Purchases & subscriptions

Cinder offers optional in-app purchases (Cinder Pro and freeze packs). Payments are processed by Google Play under Google's terms and privacy policy. We never receive or store your payment card details.

Editor's note — confirm before the IAP build ships. When in-app purchases are enabled, Cinder uses[[BILLING_PROVIDER e.g. RevenueCat]] to validate and restore purchases. That service may process apseudonymous app-user identifier and yourpurchase/subscription status to keep your Pro entitlement in sync across reinstalls. It does not receive your habit data. If you ship without a third-party billing provider, delete this section.

7. Exporting & deleting your data

You can export your habits and logs as JSON or CSV fromSettings → Data & Privacy at any time, and share that file wherever you like.

Local data. To remove everything stored on your device, uninstall the app — all on-device Cinder data is deleted with it.

Account & synced data. If you created an account, your account details and any synced habit data are held on our backend (see §3) until you ask us to delete them. To request deletion of your account and all associated cloud data, email us at[[SUPPORT_EMAIL]] from the address on your account; we will delete it within 30 days. You can also stop syncing at any time by signing out or cancelling Pro — new changes then stay on your device only.

You may also ask us to access or correct the personal data associated with your account. These rights apply regardless of where you live, including under the GDPR and CCPA. (Purchase records held by Google Play are governed by Google's policies.)

8. Analytics

The current release does not send usage analytics off your device. If we introduce optional, privacy-respecting analytics in a future version, we will update this policy and the Google Play Data Safety form before that version ships.

9. Children

Cinder is not directed to children under 13 (or the equivalent minimum age in your region) and we do not knowingly collect personal information from them.

10. Changes to this policy

If we change this policy we will update the date above and, for material changes, note it in the app or on this page. Continued use after an update means you accept the revised policy.

11. Contact

Questions about privacy? Email [[SUPPORT_EMAIL]].