Privacy Policy

We collect the following categories of personal information:

We do not collect precise geolocation, biometric data, browsing history, contacts, photos, or any data not listed above.

• To create and maintain your account.
• To store, sync, and display your worry entries across devices.
• To calculate your personal Reality Gap score and statistics.
• To send you push notifications you have opted into (deadline reminders, morning check-ins). You can withdraw consent at any time in iOS Settings.
• To diagnose crashes and improve app stability using anonymous error logs.
• To comply with our legal obligations.

We do not use your data for targeted advertising, behavioral profiling, or any purpose beyond providing the app service to you.

We do not sell, rent, or trade your personal data. We share data only as follows:

• Supabase (database provider): Your worry entries and account data are stored on Supabase servers (PostgreSQL). Supabase acts as a data processor under our instructions and does not use your data for its own purposes. Data is stored in the US.
• Apple: Sign In with Apple transactions are processed by Apple. We receive only the anonymized identifier and optional email Apple provides.
• Legal requirements: We may disclose information if required by law, court order, or to protect the safety of users or the public.

No other third parties receive your personal data.

• Your account data and worry entries are retained while your account is active.
• If you delete your account (Settings → Delete Account), all personal data is permanently deleted from our servers within 30 days.
• Anonymous crash logs are retained for up to 90 days, after which they are automatically purged.
• You may request earlier deletion by contacting us at privacy@didnthappen.app.

We implement the following security measures:

• Encryption in transit: All data is transmitted over HTTPS/TLS.
• Encryption at rest: Data stored in Supabase is encrypted at rest.
• Row-level security: Database policies ensure each user can only access their own data — no other user or process can read your worry entries.
• Authentication: Account access is protected by Sign In with Apple or email/password authentication.

No method of transmission over the Internet is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Delete your account and all associated data from within the app (Settings → Delete Account), or by contacting us.
• Data portability: Export your worry data in JSON format from the app's Settings screen.
• Withdraw consent: Disable push notifications at any time in iOS Settings → DidntHappen → Notifications.
• Opt out of telemetry: Crash reporting is anonymous and cannot be linked back to you.

To exercise any rights, contact us at privacy@didnthappen.app. We will respond within 30 days.

• Apple generates a unique anonymized identifier for your account on our service.
• You choose whether to share your real email or use Apple's private relay email.
• We never receive your Apple ID password.
• Apple's Privacy Policy governs the data Apple collects during authentication.

The app uses the following third-party services:

We do not use any third-party advertising, analytics, or tracking SDKs.

Your data may be stored and processed in the United States, where our database provider (Supabase) operates. By using the app, you consent to this transfer. We ensure appropriate safeguards are in place.

California (CCPA/CPRA): We do not sell personal information. You have the right to know, delete, and opt-out of sale (though we do not sell). Contact us to exercise your rights.

European Economic Area (GDPR): Our legal basis for processing is contract performance (providing the app service). You have the right to access, rectify, erase, restrict, and port your data, and to lodge a complaint with your supervisory authority.

We may update this Privacy Policy. We will notify you of material changes via an in-app banner before the change takes effect. The updated policy will also be posted at this URL with a new effective date. Continued use after changes constitutes acceptance.

Data controller: DidntHappen

Email: privacy@didnthappen.app

Support: https://didnthappen-web.vercel.app/support