Privacy

App accounts and everyday progress

Supabase provides authentication and account storage. We process your email, account identifier and authentication credentials to sign you in. Depending on your sign-in method, this includes an Apple account identifier and authorization tokens. Your habits, targets, goal choices, progress logs, dates, notes, intentions, reflections and moods are associated with your account. We use them to show progress, calculate milestones and sync supported data across your devices. Each app keeps a local copy for offline use. Signing out does not delete your account.

Optional health, movement and calendar access

With permission, Apple Health daily water, exercise and sleep totals become habit logs and sync to Supabase. Optional health and movement signals, including recent workouts, heart-rate variability and activity-ring progress where supported, can inform on-device suggestions. Calendar times help plan reminders; event titles are processed locally and excluded from AI prompts. You can decline these permissions, log manually and choose fixed-time reminders. Revoke permissions in system settings to stop future access; this does not remove information already saved to your account.

On-device AI and synced reminders

Smart planning and coaching use Apple’s on-device model when available. We do not send prompts to a cloud AI service. Saved reminder times, generated text, interactions and effectiveness records sync to your account. New reminder changes and exports exclude explanations. Older synced reminder text and explanations may still contain calendar or health context; previously queued changes can replay unchanged. New reminder text can still reflect timing, health and movement context. We use this data for reminders and personalization, not advertising or data brokerage.

App delivery and security

Cloudflare processes account-service requests and background delivery jobs. A registered installation identifier, platform, app identifier and push token can be associated with your account to route enabled remote updates through Apple. Connection, authentication and service records help providers secure and operate the service. Native apps have no advertising or third-party analytics SDK. Website analytics choices below apply when you visit the website.

App retention, deletion and exports

Account information stays while your account exists. Archiving preserves habit history. Deleted records and delivery safety records may remain until account deletion so old devices and retries do not restore removed data. Sync receipts retain a hash of the submitted change and its response for a 90-day replay window. Scheduled cleanup removes expired receipts. Use Delete account in Account to remove hosted account data, or contact us for help. Devices reconcile deletion when they reconnect; an offline device may retain its local copy until then. Files you export or copy elsewhere remain under your control. Any provider backup copies are subject to the provider’s retention cycle and are not immediately rewritten by an individual deletion.

You can review and correct habits and logs in the app and export a backup from Account on iPhone or Mac. Request access, correction or deletion through our contact form. We may need to verify that you own the account. We do not sell personal information or use health data for advertising. Avoid putting information about other people or sensitive details you do not need into free-text fields.

Your waiting-list email

When you join, we store your email, preferred language, signup time and the version of the consent you accepted. We use these to provide ImproveThing launch and early-access updates in the appropriate language. We do not sell your email. Joining does not create an app account, start a trial or charge you.

Contact messages

Our contact form sends your name (if supplied), email, topic, preferred language and message to the ImproveThing team through Cloudflare Email Service. We use these details to respond, not for marketing. We keep messages in our support inbox while needed to handle your request and any follow-up. You can request deletion through this form. Contact messages are not stored in the waiting-list database or sent to Google Analytics.

Security and hosting

Cloudflare hosts this website, stores the waiting list in D1 and provides Turnstile bot protection. Turnstile processes browser and network signals to distinguish visitors from automated abuse. Our rate limiter uses an IP address temporarily; we do not store it in the waiting-list database. Cloudflare may process technical data to deliver and secure these services.

Optional Google Analytics

Analytics is off until you select “Allow analytics.” If enabled, Google Analytics 4 measures page visits and successful waiting-list submissions using cookies and technical information about your browser/device. We do not send your email or form contents to Google Analytics, and we disable advertising personalization. You can decline without affecting signup and change your choice using “Cookie choices.” Your preference is stored locally in this browser.

Retention and your choices

We keep waiting-list details until you ask us to remove them or until 12 months after signup, whichever comes first. Request access, correction or deletion through our contact form. Please use the address you registered so we can follow up to verify your request. Launch emails will provide a way to leave the list.

Service providers and location

RocketFang LLC is a U.S. company. We use Cloudflare for hosting, storage and security, Supabase for native authentication and account storage, Apple for platform services, and Google for website analytics only when enabled. These providers may process data in the United States and other countries. Their notices explain their processing: Cloudflare, Google, Supabase and Apple privacy notices.