Information we collect
Account information
If you sign in with Apple, we receive your name and an email address (which may be Apple's private relay address) to create and secure your account. Authentication and account records are managed through our backend provider, Supabase.
Your ritual data
Settings and activity you create in the app: your morning window and days, chosen routine items, and streak history. This lives on your device and, when you're signed in, may be stored on our backend so it syncs across your devices.
Screen Time selections
When you choose which apps to protect, Apple's Family Controls framework gives us only anonymous, opaque tokens, never the names of your apps or anything you do inside them. These stay on your device and are never transmitted to us or anyone else.
Subscription information
Purchases and trials are processed by Apple and managed through RevenueCat, our subscription provider. We receive subscription status (active, trial, expired) and a transaction identifier, never your full payment card details, which only Apple holds.
Device and marketing data
We use the Meta SDK to understand which ads led people to install Hamsa and to measure in-app events (such as starting a trial). This may involve sharing device identifiers, IP address, and app-event data with Meta Platforms. This collection is governed by Apple's App Tracking Transparency. If you decline tracking, we do not use the identifier for cross-app tracking.
Notifications
If you enable notifications, we use Apple's system to deliver reminders. Push tokens, if used, are processed by Apple.
How we use your information
- To provide, secure, and sync the app and your account.
- To engage and lift app blocking during your chosen morning window.
- To process subscriptions and free trials.
- To measure marketing performance and improve the app.
- To respond to your support requests.
We do not sell your personal information.
Who we share it with
We share only what's needed with service providers who act on our behalf: Apple (accounts, payments, notifications), Supabase (account and data storage), RevenueCat (subscription management), and Meta (advertising measurement, as described above). We may also disclose information if required by law.
Data retention
We keep account and ritual data while your account is active. When you delete your account or request deletion, we remove your personal data from our systems within a reasonable period, except where we must retain limited records for legal or financial reasons.
Your rights and choices
- Access or delete your data anytime via our Delete your data page, or by emailing us.
- Turn off ad tracking in iOS Settings → Privacy & Security → Tracking.
- Depending on where you live (for example the EEA, UK, or California), you may have additional rights to access, correct, or delete your data, or to object to certain processing. Contact us to exercise them.
Children
Hamsa is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
Security
We use industry-standard measures to protect your information, though no method of transmission or storage is completely secure.
International transfers
Your information may be processed in countries other than your own, including the United States, with appropriate safeguards.
Changes
We may update this policy and will revise the “Last updated” date above. Material changes will be highlighted in the app or on this site.
Contact
Questions? Email ramie.chaarani@gmail.com.