Privacy Policy

1. Introduction

Vow ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our iOS application, Vow - Commitment Tracker (the "App").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

2.1 Information You Provide Directly

• Commitment Data: Titles, descriptions, categories, frequencies, difficulty levels, and end dates for personal commitments
• Check-in Records: Daily check-in entries, results (success, missed, skip), and optional notes
• Reminders: Notification preferences and reminder times per commitment
• Calendar Sync Preferences: Your choice to enable iOS Calendar synchronization
• Profile Information: Display information visible to accountability partners (if enabled)
• Feedback: When you contact us via the "Send Feedback" feature, we receive your email address and message content

2.2 Information Collected Automatically

• Device Information: Device model, OS version, app version, build number
• Usage Analytics: Features used, commit patterns, engagement metrics (via Firebase Analytics)
• App Performance: Crash reports and error data (via Firebase Crashlytics)
• Purchase Information: In-app purchase history and subscription status (via StoreKit 2)
• Location (Optional): Only if you enable location services — never collected by Vow itself

2.3 Third-Party Data

• Calendar Data: If you enable iOS Calendar sync, calendar event data is read from your device's calendar
• Contact Information: You may optionally share your email to invite accountability partners

3. How We Use Your Information

We use collected information for:

• Core Functionality: Recording, storing, and displaying your commitments and check-ins
• Feature Personalization: Calculating streaks, insights, analytics, and recommendations
• Notifications: Sending weekly recaps, per-commitment reminders, and streak updates (opt-in)
• Cloud Sync: Synchronizing your data across your Apple devices via CloudKit
• Cross-Device Sync: Enabling your Apple Watch to display and record commitments
• Partner Features: Syncing partner accountability data via CloudKit (private database)
• In-App Purchases: Processing subscriptions and tracking premium feature access
• Analytics & Improvement: Understanding app usage to improve features and fix bugs
• Communication: Responding to your feedback and support requests
• Legal Compliance: Fulfilling legal obligations and protecting against fraud

4. Data Storage & Security

4.1 On-Device Storage

All commitment, check-in, and personal data is stored 100% on your device using SwiftData (Apple's encrypted local database). Data is never sent to external servers except when:

• You explicitly enable CloudKit sync (private, device-to-device)
• You invite an accountability partner (partner profile synced via CloudKit)
• Analytics are sent to Firebase (aggregated, anonymized)
• Crash reports are sent to Firebase Crashlytics (for debugging)

4.2 iCloud Synchronization (CloudKit)

• If you enable cross-device sync, your data is stored in your private CloudKit database managed by Apple
• CloudKit uses end-to-end encryption — Apple cannot read your data
• You control sync via Settings → Data → Enable Cross-Device Sync (can be disabled anytime)

4.3 Security Measures

• All network communications use HTTPS/TLS encryption
• No passwords or sensitive authentication data stored in the app
• Firebase Crashlytics and Analytics use secure, anonymized reporting
• Partner data uses CloudKit's public-private separation (partners see only what you share)

4.4 Data Deletion

• You can delete all data at any time via Settings → Data → Delete All Data
• Deletion is permanent and cannot be undone
• Partner data is also removed from your partner's account when you disconnect

5. Third-Party Services

5.1 Firebase (Google)

• Analytics: Aggregated usage metrics (features, events, engagement)
• Crashlytics: Crash reports and error logs for debugging
• No Personal Data: Firebase does not receive your commitment data, check-ins, or email

Firebase Privacy Policy →

5.2 CloudKit (Apple)

• Cross-Device Sync: Your commitment data synced across your Apple devices
• Partner Sync: Partner accountability data stored in encrypted CloudKit containers

Apple iCloud Privacy Overview →

5.3 StoreKit 2 (Apple)

• Purchases: In-app subscription and purchase transactions
• No Card Data: Apple handles all payment processing — we never see credit card details

Apple Privacy Policy →

5.4 EventKit (Apple)

• Calendar Sync: When enabled, reads and writes to your iOS Calendar
• Local Only: No calendar data leaves your device
• User Control: You grant permission explicitly in iOS Settings

5.5 WatchConnectivity (Apple)

• Watch Sync: Your commitments synced to Apple Watch via WatchConnectivity
• Encrypted: Watch-to-iPhone communication is encrypted
• User Control: Can be disabled in Settings

5.6 UserNotifications (Apple)

• Reminders & Recaps: Local notifications for commitment reminders and weekly recaps
• On-Device: All notifications generated and stored locally
• User Control: Toggle per-commitment reminders and weekly recaps in Settings

6. Your Privacy Rights & Choices

6.1 You Control Your Data

• Disable Sync: Turn off CloudKit sync anytime (Settings → Data)
• Disable Notifications: Opt out of reminders and weekly recaps (Settings → Notifications)
• Disable Analytics: Firebase Analytics can be disabled (requires app reinstall or reaching out to us)
• Delete Everything: Permanently delete all data via Settings → Data → Delete All Data

6.2 Partner Privacy

• Only people you invite can see your partner profile data
• Partner data is removed when you disconnect
• Partners cannot access your full commitment history — only shared challenges and basic stats

6.3 Data Access & Export

• Premium feature: Export your data as CSV (check-in history) or PDF (annual report) via Settings → Export Data
• You own all your data and can export it anytime before deletion

6.4 GDPR / CCPA Compliance

If you are in the EU (GDPR) or California (CCPA), you have the right to:

• Access: Request a copy of your data
• Deletion: Request permanent deletion of your data (use Settings → Data → Delete All Data)
• Portability: Export your data as CSV or PDF via the Export feature
• Withdrawal: Disable data collection features (sync, analytics, notifications)

To exercise these rights, contact us at lynxapps.contact@gmail.com.

7. Children's Privacy

Vow is not intended for children under 13 (COPPA) or under 16 (GDPR). We do not knowingly collect data from children under these ages. If we discover we have collected data from a child, we will delete it immediately.

8. Changes to This Privacy Policy

We may update this Privacy Policy at any time. We will notify you of material changes via:

• In-app notification
• Updated date shown at the top of this policy
• New version in the App Store

Your continued use of the App constitutes acceptance of the updated Privacy Policy.

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• Email: lynxapps.contact@gmail.com
• App: Vow - Commitment Tracker
• Version: 1.0.0

10. Summary of Data Practices