Privacy Policy

1. Information We Collect

We collect information directly from you, automatically from your device, and from third-party services you choose to use.

Account and Profile Information

• Authentication information from Apple, Google, or Supabase Auth, such as your email address and provider identifier.
• Profile details you choose to provide, such as display name, handle, avatar, bio, gender, height, or weight.
• Guest-mode identifiers created by the app, including a local app user ID and generated handle.

Habit, Session, and Progress Information

• Habit preferences, goals, reminders, enabled habits, streaks, levels, XP, badges, and leaderboard stats.
• Session records, including start and end time, status, duration, goal progress, interruption counts, and proof status.
• Run summaries such as distance, pace, moving time, GPS accuracy counts, motion counts, and related verification signals.
• Focus timer summaries, including focus duration, interruptions, and focus theme if you choose one.
• Pose exercise summaries, including rep count, confidence, form score, and quality flags.
• Photo check-in summaries, including check-in count, optional mood, and optional weight.

Location, Camera, Motion, Photos, and Recordings

• Location is used during run sessions to calculate distance, pace, movement, and route-related proof.
• Camera access is used for pose-assisted exercise tracking, photo check-ins, avatars, and custom share backgrounds.
• Motion signals may be used to improve run proof accuracy.
• Photos, videos, thumbnails, and screen recordings may be stored locally when you create check-ins, proof media, or share assets.

Peak Journey is designed to keep core habit data local first. Local SQLite storage is the source of truth for habit data on your device. When you sign in or use synced features, selected habit records, proof summaries, XP, and leaderboard data may sync to Supabase. Public web shares currently use summary metadata and do not expose full proof media, raw GPS points, local file URIs, private habit history, or internal proof payloads.

Website, Device, and Analytics Information

• Device and app information such as platform, app version, session ID, and non-sensitive usage events.
• Website analytics and performance information from tools such as Vercel Analytics, Speed Insights, and PostHog when configured.
• Crash, diagnostic, and security information needed to maintain the service.

Our analytics contract is intentionally narrow. We do not intentionally capture emails, phone numbers, raw names, notes, captions, invite codes, handles, media URIs, route points, GPS coordinates, photo metadata, or proof media payloads in analytics. Web PostHog autocapture and automatic pageview tracking are disabled so public share URLs are not collected automatically.

Payments, Subscriptions, and Stores

If you purchase Peak Journey Pro or another paid feature, payments are processed by Apple, RevenueCat, or other payment providers. We receive subscription status, entitlement, product, and transaction metadata needed to unlock and support purchases. We do not receive your full payment card number from app store payment processors.

Communications and Support

If you contact us, respond to a survey, or request support, we collect the information you choose to provide and the contact details needed to respond.

2. How We Use Information

• Provide, operate, personalize, and improve Peak Journey.
• Track habits, calculate streaks, levels, XP, badges, summaries, and leaderboard placement.
• Verify sessions through GPS, timer, motion, camera, pose, and photo-based signals where you enable those features.
• Sync signed-in habit records and recover progress across devices.
• Create public proof pages, recap pages, invite links, and download links when you choose to share or invite someone.
• Send reminders, push notifications, service messages, and support responses.
• Process subscriptions, verify entitlements, detect fraud, and maintain account security.
• Analyze product performance using privacy-limited analytics.
• Comply with legal obligations and enforce our Terms of Use.

3. How We Share Information

We may share information in the following ways:

• With service providers that host, store, analyze, secure, support, or process our services, including Supabase, PostHog, Vercel, RevenueCat, Apple, Google, and push notification providers.
• With other users and the public when you appear on public leaderboard surfaces or create public or unlisted share pages.
• With third-party apps or services when you choose to share content outside Peak Journey.
• With app stores and payment providers for subscriptions, billing, refunds, entitlement checks, and purchase support.
• With authorities, courts, or other parties when required by law or needed to protect rights, safety, security, or the integrity of the service.
• In connection with a business transaction such as a merger, acquisition, financing, reorganization, or sale of assets.
• With your consent or at your direction.

We do not sell personal information for money. Some privacy laws define "sale", "sharing", or "targeted advertising" broadly. If we later enable advertising cookies or cross-context behavioral advertising, we will provide choices where required.

4. Public Sharing and Leaderboards

Peak Journey is built around visible momentum, but sharing is still your choice. Public proof pages, recap pages, invite pages, and leaderboard rows may show your display name, handle, avatar, habit name, proof status, amount labels, level, streak, rank, or other summary details. Do not include information in your profile, handle, avatar, photos, videos, or shared content that you do not want others to see.

Public share links may be unlisted, meaning they are available to anyone with the link even if they are not shown in normal site navigation. If you send a Peak Journey share to another app, that app's privacy practices apply to the copy, image, video, link, or metadata you share there.

5. Health, Fitness, and Sensitive Information

Habit data, activity information, photos, body measurements, mood, weight, and location may be considered sensitive information or consumer health data under some laws. We use this information to provide the habit tracking, verification, progress, sharing, and support features you request.

• Categories may include habit goals, session history, run summaries, movement signals, pose summaries, check-in photos, mood, weight, profile details, proof status, streaks, levels, and related progress information.
• Sources include information you provide, information your device collects when you enable a feature, and service providers that help us operate Peak Journey.
• We may disclose this information to service providers, app stores, payment providers, analytics providers, public share viewers, leaderboard viewers, third-party apps you choose to share with, and legal or safety recipients described in this Policy.
• We do not sell consumer health data. We do not currently request Apple HealthKit or Google Health Connect repository data. If we add those integrations later, we will describe that use and request any permissions required.

6. Your Choices

• You can choose which habits to enable, whether to sign in, whether to share, and whether to allow device permissions.
• You can disable location, camera, motion, photo, or notification permissions in your device settings. Some features may stop working without those permissions.
• You can manage app store subscriptions through Apple App Store or the applicable payment provider settings.
• You can initiate account deletion in the app from Profile settings. We process account deletion requests within 30 days, and you can also request access, correction, portability, restriction, objection, or withdrawal of consent where applicable by contacting us.
• You can ask us not to send promotional messages. We may still send service, security, legal, or transaction messages.

7. Retention

We keep information for as long as needed to provide Peak Journey, maintain your account, support local-first sync, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Local data remains on your device unless you delete it, reset progress, uninstall the app, or use app features that remove it. Synced account and leaderboard records may remain in our systems until deleted under our normal retention and backup practices or in response to a verified request.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal information. Native Supabase sessions are stored using secure platform storage where supported. No system can be guaranteed completely secure, and you are responsible for protecting access to your device, app store account, and sign-in providers.

9. Children

Peak Journey is not intended for children under 13. If you are under the age required to consent to digital services in your location, you may use Peak Journey only with appropriate parent or guardian involvement. If we learn that we collected personal information from a child in a way that violates applicable law, we will take appropriate steps to delete it.

10. International Transfers

We and our service providers may process information in the United States and other countries. These countries may have privacy laws that differ from those where you live. Where required, we use appropriate safeguards for international transfers.

11. Additional Rights by Region

Depending on where you live, you may have additional rights under laws such as U.S. state privacy laws, Canadian privacy laws, the GDPR, or UK privacy law. These rights may include the right to know, access, correct, delete, port, restrict, object to, or appeal certain decisions about your personal information. You may also have rights related to sensitive or consumer health data.

To exercise rights, contact support@peakjourney.app. We may need to verify your request before acting on it. Authorized agents may submit requests where allowed by law, but we may require proof of authority.

12. Changes to This Policy

We may update this Privacy Policy as Peak Journey changes. The effective date above shows when this version took effect. If we make material changes, we will provide notice through the app, website, email, or another reasonable method.

13. Contact Us

Questions, requests about privacy, and general support questions can be sent to support@peakjourney.app.