Privacy Policy

1. Introduction

Welcome to CmonGrit -- Grit Your Tasks Out!! ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and password when you create an account
• Profile Information: Display name, profile picture, bio, and any other information you choose to add to your profile
• Task Data: Tasks, goals, subtasks, notes, due dates, priorities, and progress information you create
• Focus Session Data: Focus session duration, breaks, productivity metrics, and session history
• Messages and Comments: Messages, comments, and notes you send to other users on shared tasks

2.2 Social and Collaboration Data

• Friends and Connections: Users you add as friends, friend requests you send or receive
• Collaboration Data: Tasks you share with others, collaborators you invite, and collaboration invitations you accept or decline
• Group Focus Sessions: Group sessions you join or host, session participants, and real-time presence information
• User Interactions: Likes, reactions, or interactions with other users' content within shared tasks

2.3 Information from Third-Party Services

• Email Authentication: Email address for account creation and login
• Email Sign-In: Email address for authentication and account recovery

2.4 Automatically Collected Information

• Usage Data: Focus session statistics, task completion rates, and productivity metrics (visible to you in your analytics)
• Performance Data: Error logs stored locally on your device (not transmitted)
• Notification Data: Your in-app notification preferences for friend requests, task invitations, and focus session invites

2.5 Gamification and Achievement Data

• Achievements and Badges: Progress toward achievements, badges earned, and milestone completions
• Gamification Data: Achievements, badges, and streaks based on your productivity activity
• Streaks and Statistics: Daily streaks, productivity scores, and focus time statistics

3. How We Use Your Information

We use your information to:

3.1 Core App Functionality

• Create and manage your account
• Store and sync your tasks, goals, focus sessions, and progress across devices
• Track and display your productivity statistics and reports
• Process and manage your subscription (if applicable)

3.2 Social and Communication Features

• Friend Connections: Connect you with friends, manage friend requests, and display friend lists
• Messaging: Deliver messages and comments between you and other users on shared tasks
• Collaboration: Enable task sharing, show collaborators, and manage collaboration invitations
• Group Focus Sessions: Facilitate group productivity sessions, show real-time participant presence, and sync session data
• Activity Feed: Display activity and updates from friends and collaborators

3.3 Notifications and Communication

• Send in-app notifications about friend requests, messages, task invitations, and focus session updates
• Notify you of comments and activity on your shared tasks
• Provide updates about app features, tips, and productivity insights

3.4 Gamification and Motivation

• Track achievements, badges, and milestones
• Display streaks, productivity scores, and statistics
• Provide motivational insights and progress reports

3.5 Service Improvement and Support

• Improve our app and develop new features
• Analyze usage patterns to optimize performance
• Provide customer support and respond to inquiries
• Debug issues, fix bugs, and prevent crashes
• Ensure security, prevent fraud, and enforce our Terms of Service

4. How We Store Your Information

Your data is stored securely using Supabase, a trusted cloud database provider. We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest (via Supabase)
• Secure authentication and authorization (Supabase Auth)

5. Data Sharing and Disclosure

We do not sell your personal information. We never have and never will.

Data sharing is limited to service providers necessary for core app functionality:

When you use social and collaboration features, certain information is visible to other users:

• Profile Information: Your display name and profile picture are visible to friends and collaborators
• Friend List: Your friends can see your basic profile information and online status
• Shared Tasks: Collaborators on a task can see task details, comments, messages, and activity you post on that task
• Group Sessions: Participants in group focus sessions can see your presence, session duration, and basic statistics
• Activity Status: Friends may see when you're active, in a focus session, or offline

5.2 Service Providers

We share your information with trusted third-party services that help us operate the app:

• Supabase: Cloud database and authentication (stores your account, tasks, messages, and app data)
• RevenueCat: Subscription management and payment processing (only if you subscribe)
• Firebase: Static page hosting for our legal and support pages
• Apple/Google: Payment processing via App Store / Google Play (if you subscribe)

These providers are contractually required to protect your data and use it only for providing services to us.

5.3 With Your Explicit Consent

• When you invite friends or collaborators to tasks
• When you join or create group focus sessions
• When you choose to share content outside the app

5.4 Legal and Safety Requirements

• When required by law, court order, or government request
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users or the public
• To enforce our Terms of Service or investigate violations
• To prevent fraud, security issues, or illegal activities

5.5 Business Transfers

If CmonGrit -- Grit Your Tasks Out!! is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

6. Communication and Messaging

6.1 Device Permissions

We may request access to certain features of your device, including:

• Camera: To take profile pictures directly within the app
• Photo Library: To select and upload profile pictures from your device
• Microphone: To record voice messages on tasks and voice notes

Notifications are handled entirely in-app and do not require device-level permission. You can manage camera, photo, and microphone permissions through your device settings at any time. We only access your camera, photos, and microphone when you explicitly choose to use those features.

6.2 User-to-User Communication

CmonGrit -- Grit Your Tasks Out!! enables users to communicate with each other through:

• Task Comments: Messages and comments on shared tasks
• Activity Feed: Updates and notifications about friend and collaborator activity
• Friend Requests: Invitations to connect with other users
• Task Invitations: Invitations to collaborate on tasks
• Group Sessions: Real-time coordination during group focus sessions

6.3 Message Content and Moderation

• Your messages are private: Only you and the recipients (task collaborators) can see messages on shared tasks
• We do not monitor messages: We do not read your messages unless required for legal compliance or reported by users
• Reporting: Users can report inappropriate messages or behavior
• Content moderation: We may remove messages that violate our Terms of Service or contain illegal content
• Message retention: Messages are stored indefinitely unless you delete them or delete your account

6.4 Controls

• You can remove collaborators from your tasks at any time
• You can leave shared tasks and group sessions
• You can decline or cancel friend requests

7. Your Rights and Choices

You have the right to:

• Access Your Data: Request a copy of your personal information, including all messages, tasks, and activity
• Update Your Data: Modify your display name, profile picture, and account information at any time
• Delete Your Data: Request deletion of your account and all associated data (see section 8)
• Manage Connections: Remove friends and control who can see your profile
• Opt-Out: Decline collaborations and leave group sessions

8. Data Retention and Deletion

8.1 Active Account Data

We retain your information for as long as your account is active or as needed to provide services:

• Account Information: Retained while your account is active
• Tasks and Messages: Retained until you delete them or delete your account
• Focus Session History: Retained for statistical and reporting purposes
• Shared Content: May remain visible to collaborators even if you leave a shared task

8.2 Account Deletion

When you delete your account:

• Your profile, tasks, and personal data are permanently deleted immediately upon account deletion
• Messages you sent to others on shared tasks may remain visible to other collaborators (with "Deleted User" as author)
• Your username may be retained to prevent impersonation
• We may retain data longer if required by law or for legal proceedings

8.3 Data Retention After Inactivity

Your data is retained as long as your account exists. You can delete your account at any time through the app settings. We do not automatically delete accounts for inactivity.

9. Children's Privacy and Parental Consent

9.1 Age Requirements

CmonGrit -- Grit Your Tasks Out!! is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13 without parental consent.

9.2 Parental Consent (Ages 13-17)

If you are between 13 and 17 years old:

• You should have permission from a parent or guardian to use CmonGrit -- Grit Your Tasks Out!!
• Your parent/guardian should review this Privacy Policy
• We may require parental consent for certain features (messaging, friend connections)
• Parents can contact us to access, update, or delete their child's information

9.3 If We Discover Underage Users

If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us immediately at saadmac09@gmail.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. We ensure appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with service providers
• Compliance with applicable data protection regulations

11. Third-Party Links and Integrations

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party integrations we use:

• Payment processing (App Store / Google Play)
• RevenueCat (subscription management)

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending in-app notifications for significant changes
• Sending email notifications if changes materially affect your rights

Continued use of the app after changes constitutes acceptance of the new Privacy Policy.

13. Data Security

We use secure session storage on your device to keep you signed in between app launches. Your authentication session is stored locally and is never shared.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to know if personal information is sold or disclosed (we do NOT sell your data)
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights
• Right to correct inaccurate personal information

To exercise your right to deletion: You can permanently delete your account and all associated data at any time by visiting our Account Deletion Page. Alternatively, contact us at saadmac09@gmail.com for assistance with other rights.

15. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

To exercise your right to erasure: You can permanently delete your account and all associated data at any time by visiting our Account Deletion Page. This action is irreversible and will remove all your personal information from our systems.

16. Subscriptions and Payments

16.1 Auto-Renewable Subscriptions

CmonGrit -- Grit Your Tasks Out!! offers the following auto-renewable subscription options:

• Weekly: 1 week auto-renewable subscription
• Monthly: 1 month auto-renewable subscription
• Yearly: 1 year auto-renewable subscription

These subscriptions are processed through the platform you use to download the app:

• iOS (iPhone/iPad): Processed through your Apple ID via the App Store. License Agreement: Apple End User License Agreement (EULA).
• Android: Processed through your Google account via Google Play Store and subject to Google Play's Terms of Service.

16.2 Payment Information

We do not collect or store your payment information. All payments are processed securely through:

• iOS: Apple App Store
• Android: Google Play Store

Your payment details are handled by Apple or Google in accordance with their respective privacy and security policies.

16.3 Subscription Renewal and Cancellation

• Subscriptions automatically renew unless turned off at least 24 hours before the end of the current period
• iOS: Manage and cancel via Settings → Apple ID → Subscriptions
• Android: Manage and cancel via Google Play Store → Account → Subscriptions
• Cancellation takes effect at the end of the current billing period
• No refunds for partial subscription periods

17. App Store and Play Store Compliance

17.1 Data Collection Disclosure

As required by Apple and Google, we disclose all data we collect in our app store listings:

• Data Linked to You: Email, name, profile picture, messages, tasks, focus sessions, friends list
• Data Not Linked to You: Anonymous usage patterns and feature popularity
• Data Used to Track You: None - we do not track you across apps or websites owned by other companies

17.2 Privacy Nutrition Labels

Our app store listings include Privacy Nutrition Labels as required by Apple and Google, providing a summary of our data practices at a glance.

18. Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest via Supabase
• Authentication: Secure password hashing (bcrypt) via Supabase Auth

However: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

19. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users via email and provide details about what was compromised.