Privacy Policy

Percenty is a habit-building app for iOS and Android. This policy explains what the app collects, why, who else handles it, and how you can remove it. “We” means the people who run Percenty.

Who runs Percenty

Percenty is run by [To confirm: the full legal name of the person or company responsible for this data], based in Casablanca, Morocco. You can reach us at adnanealk@gmail.com.

What we collect, and why

Account details

Your name, your email address, a username we generate from your email, and when you last signed in. If you sign up with an email and password, we store the password only as a bcrypt hash.

Why: to sign you in, and to show your name to the partners you connect with.

Google and Apple sign-in

If you continue with Google or Apple, we receive your name and email address when the provider shares them, plus an ID for your account with that provider. We never see your Google or Apple password. If you use Apple's Hide My Email, we receive the relay address instead. For Apple sign-in we also keep a token that lets us revoke Percenty's access when you delete your account.

Why: to confirm it's you, and to link that sign-in to your Percenty account.

Your birthday, at email sign-up

Email sign-up asks for your birthday. The check happens in the app. The date is sent along with the sign-up request, but our server doesn't store it.

Why: to check that you're at least 13.

Habits and progress

Your goals, habits, tiny versions, identities, emojis, schedules, reminder times, rewards, milestones, habit stacks, the days you log, the days you miss, and your streaks.

Why: this is the app: it's how your habits, streaks, and calendar work.

Partners and invitations

Who you partner with, the email address you enter to invite someone, any promise you write, encouragement you send, and the people you block. If you invite someone who doesn't have an account, we keep the address you entered so the invite can find them if they sign up with it. The app doesn't email them. You share the invite yourself.

Why: to run accountability partnerships, and to let you stay in control of them.

Reports

If you report someone, we store who you reported, the reason you picked, and any details you added.

Why: so a report can be reviewed.

Device and notification data

A push notification token for each device that allows notifications, whether the device is iOS or Android, a random ID the app creates for each install, your time zone, your language, your notification settings and quiet hours, and your in-app notification history.

Why: to send reminders and partner updates to the right device, at the right local time, in your language.

Feedback and support

Suggestions you send in the app, the optional reason you give when deleting your account, and any emails you send us.

Why: to answer you and improve the app.

Technical logs

Our server keeps rolling technical logs, which are overwritten as they fill up. Your IP address is used to connect you to the server, and we don't store IP addresses in our database.

Why: to keep the service running and diagnose problems.

What we don't collect

The app doesn't ask for your precise location, contacts, or photos, and doesn't use an advertising identifier. It contains no advertising or analytics tools, and it doesn't track you across other companies' apps or websites. We don't sell your personal data.

What your partners can see

A partnership is for one habit, and it starts only when the other person accepts. Before they accept, they see your name, the habit's name, and any promise you added. Once they accept, they can see:

• Your name and email address
• That habit's name, emoji, goal, tiny version, and schedule
• Your current streak and streak milestones for that habit
• The days you logged it, whether each was the tiny version or the full habit, and recent missed days
• Any promise you agreed to

They're told the morning after you miss a planned day, and after 3 missed days in a row they're nudged to check in. They don't see your other habits, your rewards, or your identities. All of this works the same way in reverse when you support someone else.

Either of you can end a partnership at any time, and you can block or report someone from the Together tab. If you reach out to a friend, the app opens a draft in WhatsApp or your phone's share sheet. Percenty doesn't send or see that message, and that app's own privacy policy applies.

Who else handles your data

• DigitalOcean hosts our server and database.
• Expo receives your push token and the text of each notification, and passes them on for delivery.
• Apple and Google deliver push notifications to your device. If you sign in with one of them, they also confirm your sign-in.
• Vercel hosts this website, and handles standard request data such as IP addresses when you visit it.

Notification text can include a habit's name or a partner's name. We may also disclose information when the law requires it, or when it's needed to protect people's rights and safety.

How long we keep it

We keep your data while your account is active. When you delete your account, it's removed as described on the account deletion page. After that:

• We keep a small deletion record for 90 days: a one-way hash of your email address, an internal account ID, the date, and the reason if you gave one.
• Suggestions you sent in the app are kept, with the link to your account removed.
• Reports you filed, and reports about you, are removed.
• Backups: [To confirm: whether database backups are taken, and how long they are kept]

Your choices and rights

In the app, you can:

• Change your name and password in Settings, under Name & password
• Edit or delete any habit, under Manage Habits on the Home tab
• Turn notifications on or off, and set quiet hours, in Settings under Notifications
• End partnerships, and block or report people, from the Together tab
• Delete your account

Depending on where you live, you may also have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. To make a request, email adnanealk@gmail.com.

If you're in the EEA or UK, we rely on these legal bases: performing our contract with you, our legitimate interests (such as security and preventing abuse), your consent where it's required (such as push notifications), and legal obligations.

Where your data is stored

Our server is hosted by DigitalOcean in [To confirm: the region of the production server]. Our providers may process data in other countries, so your data may be handled outside the country you live in. [To confirm: the safeguards in place for international transfers, if any]

Security

The app talks to our server over HTTPS, passwords are stored only as bcrypt hashes, and the database isn't published to the internet. No system is perfectly secure, so we can't promise that yours will never be exposed. If something goes wrong, email adnanealk@gmail.com.

Children

Percenty isn't meant for children under 13, or under the minimum age where they live. If you believe a child has created an account, email adnanealk@gmail.com and we'll delete it.

This website

This website doesn't use cookies or analytics, and it loads its fonts from its own server.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top.

Contact

Questions or requests: adnanealk@gmail.com
Casablanca, Morocco