Privacy Policy — FloField App

Account info. Your email address (from Google Sign-In or email/password), and a display name you can set yourself.

Task & activity data. The tasks you create (title, description, schedule), when you complete or miss them, your staking and reward credit balances, redemption history, and streak data — this is the core of how the app works.

Proof photos or videos. If you attach photo/video proof when completing a task, it's stored privately and only accessible to you.

Subscription status. Whether you're subscribed and to what tier — not your card details (see “Where it lives” below).

Push notification token. Only if you enable reminders, so we can send them.

Analytics events. App usage events (task created, task completed, reward redeemed, and similar) tied to an internal account ID, not your email or name.

No payment card details, ever. Apple and Google process your subscription payment directly — we never see or store card numbers.

No third-party advertising trackers, no ad SDKs, no cross-app tracking. Our analytics provider never receives your email or display name.

Account info: to sign you in and personalize the app.

Task & credit data: this is the product — staking, completing, and earning rewards only works because we track it.

Proof photos: to let you verify your own completions. We don't review them unless you ask us to (e.g. for a support issue).

Push token: to send the reminders you've opted into.

Analytics: to understand which parts of the app are actually helping people follow through, so we can improve it.

Your account, task, and credit data live in a Supabase database (PostgreSQL). Proof photos/videos live in Supabase Storage, private to your account.

RevenueCat manages your subscription status — it only ever receives an internal account ID, never your email or payment details. Apple and Google process the actual payment through the App Store / Play Store billing systems.

PostHog stores analytics events, keyed by an internal account ID. Resend sends transactional emails (like subscription receipts) and sees your email address for that purpose only.

We don't sell your data or share it for advertising, to anyone.

You can ask us to show you what data we have or correct it — reach out (see “Contact” below) and we'll sort it within 30 days.

To delete your account, open the app and go to Profile → Delete my account, or see the full account deletion page for what gets deleted, what gets retained, and how long it takes.

Deleting your account does not automatically cancel an active App Store or Play Store subscription — you'll need to cancel that separately in your phone's subscription settings, or you'll keep being charged.

If you're in the EU or UK, you have GDPR rights including the right to access, rectify, erase, restrict, or object to processing. If you're in California, you have similar rights under the CCPA. We won't make it weird.