Privacy Policy

Last updated: June 13, 2026

Compound X ("we", "our", "us") is a personal habit and commitment tracking app. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information: When you sign up, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name, email, and profile photo from Google.

App data: We store your commitments (habits), daily check-in logs, weekly reviews, and profile preferences. This data is created entirely by you within the app.

Feedback submissions: When you submit feedback through the app's Feedback & Issues feature, we collect your email address, feedback type (bug, suggestion, or general), feedback message, app version, number of commitments, number of check-in logs, and device platform. If you choose to attach a screenshot to your feedback, that image is uploaded and stored securely in our cloud storage. This data is stored securely in our database and used solely to improve the app.

Notification preferences: If you enable reminders, your chosen notification times are stored locally on your device using standard Android storage. We do not transmit reminder settings to any server.

Device data: We do not collect device identifiers, IP addresses, location data, or analytics/telemetry data.

2. How We Use Your Data

• To provide the core app functionality: tracking your commitments, displaying your progress, and saving your weekly reviews.
• To sync your data across devices via your account.
• To authenticate your identity when you sign in.
• To review feedback you voluntarily submit and improve the app experience.
• To deliver local reminder notifications at times you configure.

We do not use your data for advertising, profiling, or selling to third parties.

3. Permissions We Request

The app may request the following permissions on your device:

• POST_NOTIFICATIONS (Android 13+) — required to deliver the daily and weekly reminders you configure. You can disable this at any time in your device's Settings > Apps > Compound X > Notifications.
• RECEIVE_BOOT_COMPLETED — used to reschedule your reminders after the device restarts, so they continue firing at your chosen time.
• SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM (Android 12+) — used to deliver your reminders at the exact time you set, rather than a delayed approximate time. You can manage this in your device's Settings > Apps > Compound X > Alarms & reminders.

These permissions are optional and only relevant if you choose to set up reminders.

4. Data Storage & Security

Your data is stored on Supabase (powered by PostgreSQL), a cloud database platform hosted on AWS infrastructure. Data is encrypted in transit (TLS/HTTPS) and at rest. Local cache on your device is encrypted with AES-256, with the key stored in your device's secure hardware (Android Keystore).

Row Level Security (RLS) ensures that each user can only access their own data through the API.

5. Data Sharing

We do not share, sell, rent, or trade your personal data with any third parties. Your habit data, logs, and reviews are visible only to you.

Third-party services used:

• Supabase — database, authentication, and file storage
• Google Sign-In — optional OAuth authentication

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account through the app's Settings, all your data (commitments, logs, reviews, profile, and avatar) is permanently deleted from our servers.

Feedback you submit is retained to help us improve the app. You may request deletion of your feedback by emailing us at compoundxapp@gmail.com.

7. Your Rights

You have the right to:

• Access all your data (visible in the app at all times)
• Edit your profile, commitments, and reviews
• Delete your account and all associated data (Settings > Delete Account)
• Revoke notifications at any time via your device Settings
• Export — data export functionality is planned for a future update

8. Children's Privacy

Compound X is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes through the app. Continued use of the app after changes constitutes acceptance.

10. Contact

For privacy questions or data requests, contact us at:
Email: compoundxapp@gmail.com