Privacy Policy

Effective date: March 10, 2026

IntoReality ("we", "our", "the app") is a habit tracking application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Local-only mode (free):

• Habit definitions, daily completions, and statistics are stored only on your device in a local SQLite database.
• Journal entries are encrypted with AES-256 before being stored locally. The encryption key is kept in your device's secure keychain (iOS Keychain / Android Keystore) and never leaves your device.
• Notification preferences (reminder time, timezone) are stored locally.
• Widget data is shared between the app and home screen widgets via platform-specific secure storage (iOS App Groups / Android SharedPreferences).
• No data is transmitted to any server when using the free version.

Cloud Sync mode (paid subscription):

• If you subscribe to Cloud Sync, we collect your email address and authentication tokens via Google Sign-In or Apple Sign-In.
• Your habit data and encrypted journal blobs are synced to our servers. Journal entries remain encrypted — our servers never have access to decryption keys.
• Subscription status is managed through RevenueCat. We store your RevenueCat user ID and subscription details (product ID, expiry date).

2. How We Use Your Data

• To provide the habit tracking and journaling functionality of the app.
• To sync your data across devices (Cloud Sync subscribers only).
• To manage your subscription status.

We do not sell, share, or use your data for advertising purposes.

3. Third-Party Services

• RevenueCat — Subscription management. See RevenueCat Privacy Policy.
• Google Sign-In / Apple Sign-In — Authentication (Cloud Sync only). Subject to their respective privacy policies.
• Sentry — Anonymous crash reporting to improve app stability. No personal data is included in crash reports.

4. Data Retention

• Local data: Stored on your device until you delete it via the in-app "Delete All Data" option or uninstall the app.
• Cloud data: If you cancel your Cloud Sync subscription, your data is retained on our servers for 90 days, then permanently deleted.

5. Your Rights

• Delete local data: Use the "Delete All Data" option in Settings to permanently wipe all local data.
• Delete cloud data: Cloud Sync subscribers can request full data deletion from our servers.
• Export: You may request a copy of your data by contacting us.

6. Children's Privacy

IntoReality is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

7. Security

We use industry-standard security measures including AES-256 encryption for journal entries, secure keychain storage for encryption keys, JWT-based authentication, and encrypted HTTPS connections for all server communication.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or via email (if you have an account).

9. Contact

If you have questions about this privacy policy, contact us at oskolog@gmail.com.