Privacy Policy
Win Your Morning is a morning-accountability app for small friend groups: you set promises the night before, check in in the morning, and whoever misses is the squad's "Bum of the Day". This policy describes what the app collects, who it's shared with, where it's kept, and how to delete it.
What we collect
- Account. An account identifier created when you first open the app. No password is required.
- Sign in with Apple or Google (optional). If you sign in with Apple or Google, they share your email address with us (with Apple this can be a private relay address) and may share your name. We keep the email with your login so you can recover your account; it isn't shown to anyone. We don't copy your Apple or Google name or photo into your profile.
- Email (optional). If you link an email in Settings, we store it for account recovery and account-related email.
- Profile. The display name you enter and, if you add one, a profile photo.
- Activity. Your promises, morning check-ins (won/missed, promises kept, check-in time), streaks and points.
- Photos, videos and audio. Photos you take or pick (profile, check-in and "Bum of the Day" photos); short morning videos, which record sound; voice notes and the weekly champion's voice note. Nothing is uploaded unless you take, record or pick it yourself.
- Comments, reactions and GIFs you post on your squad's mornings.
- Timezone. Your phone's timezone, so the app knows when your morning starts and ends. We don't collect your location.
- Push notification token. A device identifier used only to deliver notifications to your phone.
- Reminder settings. Your reminder time and notification preferences.
- Purchases. If you buy Pro or Squad Mega: which product, when it renews or expires, and whether it was refunded. Apple handles the payment; we never see your card.
- Usage analytics. What you do in the app (screens opened, buttons tapped, onboarding steps, posts, streaks), with your device model, iOS and app version, timezone, squad identifiers and sizes, and whether you have Pro. It's recorded with PostHog against your account identifier and a random identifier for your install. It never includes your photos, videos, promise text, comments, name or email. We've turned off PostHog's IP-address location lookup.
- Diagnostics and crash reports. If the app crashes or the camera fails to start, we receive technical details: where in the code it happened, the camera's state, your device model and iOS version. Used only to fix the problem.
What we don't collect
- No location. No contacts: invites are links you send yourself.
- No advertising identifiers and no ad networks.
- No tracking. Nothing about you is combined with data from other companies' apps or websites, sold, or shared with advertisers or data brokers.
Who can see your data
Your name, photo, promises, check-ins, streaks, points, photos, videos, voice notes, comments and reactions are visible only to members of the squads you're in. The app loads photos and videos through expiring links that only work for signed-in squad members. Your email is never shown to other members. Invite links let anyone who receives them join your squad, so share them only with people you want in your group.
Companies that process data for us
- Supabase: our database and file storage, in Canada.
- PostHog: analytics, diagnostics and crash reports, in the United States.
- RevenueCat: manages Pro and Squad Mega purchases. It receives your account identifier and purchase history, not your name or email. United States.
- GIPHY: when you search for a GIF, the search goes from your phone directly to GIPHY in the United States, and GIPHY's own privacy policy applies to that request. We don't receive or keep your searches.
- Apple: sign-in, payments and push notifications. Google: sign-in, if you choose it.
Where your data is kept
Your account, activity, photos, videos and audio are stored in Canada (Supabase, ca-central-1) and sent over HTTPS. Analytics and purchase records are processed outside Quebec and Canada, in the United States, by the companies above. Their laws may differ from yours.
How long we keep it
- Your data is kept while you have an account. Mornings older than 90 days are stored as smaller copies but not deleted.
- When you delete your account, your profile, promises, check-ins, comments and memberships are erased immediately, and your photos, videos and audio within 24 hours. Backups roll off within 30 days.
- Analytics and purchase records held by PostHog and RevenueCat are deleted within 30 days of a request to the contact address.
Deleting your data
You can delete your account at any time in Settings → Delete account. You can also request deletion by email at dopaminecorp830@gmail.com.
Your rights
You can ask to access the personal information we hold about you, correct it, have it deleted, or withdraw your consent, by writing to dopaminecorp830@gmail.com. We'll answer within 30 days. If you're not satisfied, you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Age
You must be 13 or older to use Win Your Morning. If you live in Quebec and are under 14, you need the consent of a parent or guardian. We don't knowingly collect information from anyone under 13, and if we learn we have, we delete the account.
Changes
If this policy changes, the updated version will be posted at this URL with a new effective date.
Who we are
Win Your Morning is an independent app operated from Canada. Our Privacy Officer is the person responsible for the protection of personal information, including under Quebec's Act respecting the protection of personal information in the private sector and Canada's PIPEDA. Contact the Privacy Officer at dopaminecorp830@gmail.com.