Privacy policy

The short version

We keep the least we can to run your challenge and an optional private Circle: your account, your list, your daily check-ins, and the limited progress summary you choose to share. Your notes, your weight, and your Progress Photos are never uploaded. There are no ads, no tracking across other apps or sites, and we never sell your information.

What stays on your device

These are kept only on your iPhone, in the app’s locked storage. They are never uploaded, synchronized, or shown to your partner:

• Your daily notes — anything you write for yourself.
• Your weigh-ins — every weight you log and the history behind it.
• Your progress photos — taken in the app, stored locked, and left out of your phone backups.

Because they never reach us, they can’t be recovered if you delete the app, lose your phone, or delete your account. To keep a progress photo somewhere else, use the “Save a Copy to Photos” button on it.

What we collect

We keep the things below on our servers. The app can’t work without them.

Swipe or use the arrow keys to see all columns.

We don’t access HealthKit, medical records, your location, or your contacts. There are no ads and no tracking tools in the app.

What your partner can see

A challenge has two people at most, and you each see the same things. While you are paired, your partner can see:

• Your display name and avatar colour.
• Your shared commitments and whether you completed each one today.
• Your 75-day completion history for the shared challenge.
• Moments you explicitly chose to share.

They can’t see your notes, your weight, your progress photos, or your email. They only see the challenge you share.

What a Circle connection can see

Circle is separate from your partnership. Each private connection links exactly two solo challenges or partnerships, and every active person on both sides must approve. People in one connection cannot discover or see your other connections. A connection can see only:

• Your display name and avatar colour.
• Your current challenge phase and Day number.
• How many tasks you completed today out of your total.
• Your completed-day count, current streak, and aggregate 75-day status map.
• Circle Moments and preset support you explicitly send.

Circle never exposes commitment names, targets, values, weight, reflections, private Progress Photos, email, gender, or exact time zone. Disconnecting or blocking revokes server access. Blocking works in both directions.

Photos

These are two different features and it matters which is which.

Progress Photos — private

You take these in the app. They stay on your phone, locked, and out of your backups. We never see them, so we can never get them back for you.

Moments — private or shared, by your choice

You see the photo and choose its audience. Just Me keeps the Moment on this iPhone and does not upload it. Partner or one or more Circle connections are shared only after you confirm. Before a shared Moment goes, the app shrinks it and removes the hidden details cameras add — where it was taken, which phone took it, and when. Those details never reach us.

Partner and Circle Moments are the only pictures we receive. Partner Moments sit in private storage for the active pair. Circle Moments use separate private storage and are visible only through connections you explicitly selected. Other recipients never learn which connections you also selected. Every shared Moment requires Apple’s on-device Sensitive Content Analysis to return a successful, non-sensitive result for the exact upload bytes. If Apple’s policy is disabled or changes during analysis, or if the check is uncertain, fails, or identifies sensitive content, UNIT75 keeps the photo private and does not upload it. When an Apple protection is active on a receiving iPhone, the same on-device system checks a received Moment before UNIT75 displays it. A potentially sensitive photo stays hidden behind a warning until the recipient chooses what to do.

Sensitive Content Analysis runs on the iPhone. UNIT75 does not transmit or store whether Apple identified a photo as sensitive, and no outside image-moderation service receives the photo or the analysis result. Reporting and blocking remain available for shared content.

Circle Moments normally expire at the end of the sender’s challenge day. Deleting, disconnecting, blocking, or account deletion revokes access under the rules for that audience. If someone reports a shared Moment, it is hidden from that person and UNIT75 reviews the report. A restricted copy may be kept for up to 30 days after the report solely to investigate the safety concern, handle an appeal, or meet a legal obligation. Access is limited to people handling safety reports, and the copy is removed sooner when it is no longer needed unless law requires a longer hold.

Notifications

Turn notifications on and we keep your reminder settings and a token from Apple. That is how the reminders reach your phone. Between 10 PM and 7 AM your time we skip them instead of saving them up, so you don’t wake to a pile.

You can turn them off any time, in the app or in iOS Settings. Disabling them suppresses delivery; it does not unlink your phone from your account or delete the Apple device token we hold.

Circle notifications have their own switch. Their payloads are generic and cover invitations, joins, direct preset support, and Circle Moments—not routine progress.

Payments

Apple takes the payment. RevenueCat tells the app whether you have paid. We never see your card number, your billing address, or your Apple sign-in. Refunds go through Apple, not us.

Who else touches it

We keep this list short. Each one only gets what it needs.

• Supabase — runs the database, the sign-in, and the private photo storage behind the app.
• Apple — the App Store, payments, and delivering notifications.
• RevenueCat — checks whether you have paid.
• Google — only if you sign in with Google.

We never sell your data, and we never hand it to advertisers.

How long we keep it

We keep your data for as long as you have an account. Your past challenges stay so you can look back at them.

If your last sign-in is no longer recent, UNIT75 asks you to confirm with Apple, Google, or an email code already linked to the same account. We then disable account access and remove your records and shared photos. The app also wipes the phone-only things listed above. Signing out does not: it leaves them on your phone.

Copies may sit in our backups and logs for a short while before they are erased.

A reported shared Moment may remain in the restricted safety hold described above for up to 30 days, even if the Moment would otherwise expire or the account is deleted. We keep only what is needed to review the report and enforce our community standards.

Your rights

Depending on where you live, you may have the right to see, fix, export, or erase the data we hold. You may also be able to object to how we use it, or complain to your local data protection body.

You can delete your account in the app. For anything else, email unit75app@gmail.com from the address on your account and we will respond within 30 days.

Children

UNIT75 is for people age 13 and older, or older where local law sets a higher age of digital consent. It is not directed to children below that age. We do not knowingly collect their data. A date of birth entered for the age check is evaluated on the iPhone and discarded. An under-13 result cannot create a cloud account. For an eligible account, we receive only the broad age range described above. Tell us if a child has an account and we will remove it.

Changes

If this policy changes in a way that matters, we will update the date at the top. If it changes how we use your data, we will tell you in the app first.

Contact

Questions about this policy, or the data we hold? Email unit75app@gmail.com.