Privacy Policy
Your commitments are yours. We design for privacy by default and enforce it by architecture.
Our Privacy Philosophy
HADAL is built on a simple principle: your constraint data belongs to you.We don't monetize your attention, sell your data, or train models on your commitments. The system is designed to enforce your personal constraints—not to extract value from them.
What Data We Collect
Account Information
- ✓Email address (for authentication)
- ✓Display name (optional)
- ✓Authentication provider (Apple/Google sign-in)
Capacity & Commitment Data
Stored locally by default. Your capacity contract, commitments, punt history, and mausoleum entries live on your device unless you explicitly enable cloud sync.
- ✓Capacity contract settings (weekly hours, biological tax, chaos margin)
- ✓Commitment labels, weights, deadlines, and status
- ✓Punt counts and burial records
Social Features (Optional)
- ✓Witness pairing code (hashed)
- ✓Capacity mirror public status (on/off)
- ✓Punt count thresholds for liar alerts (only counts, not content)
What We Don't Collect
How We Use Your Data
- Core Functionality: Your capacity and commitment data is used solely to calculate load, detect critical failure, and enforce constraints. Nothing else.
- Cloud Sync (Optional): If enabled, encrypted sync across your devices. We cannot read your commitment content.
- Witness Alerts: Only punt counts and thresholds are shared with your paired witness. They never see what you committed to—only that you're punting too much.
- Support: When you contact us, we may access account-level information (email, subscription status) but never your commitment content without explicit consent.
Data Storage & Security
Local-First Architecture: Your data lives on your device. The app functions fully without an internet connection. Cloud sync is opt-in, not opt-out.
Encryption: Cloud-synced data is encrypted at rest (AES-256) and in transit (TLS 1.3). We use Firebase/Firestore with industry-standard security practices.
No Data Mining: We don't analyze your commitments to "improve recommendations" or train AI models. Your constraint struggles are not our product.
Your Rights
Data Export
Export all your data (capacity contract, commitments, burials) as JSON or CSV at any time.
Account Deletion
Delete your account and all associated data permanently. No retention periods. Gone means gone.
Access & Correction
View and modify all your data within the app. No opaque databases you can't see into.
Revoke Consent
Disable cloud sync, remove witnesses, or turn off the capacity mirror at any time.
Third-Party Services
Firebase (Google): Used for authentication, cloud sync, and push notifications. Subject to Google's privacy policy.
RevenueCat: Handles subscription management. We never see your payment details.
Apple/Google Sign-In: If used, subject to their respective privacy policies. We only receive your email and name.
Changes to This Policy
We may update this policy as features evolve. Material changes will be notified via in-app message and email (if provided). Continued use after changes constitutes acceptance. If you disagree with changes, you may export your data and delete your account.
Contact Us
Questions about privacy? Contact us:
privacy@hadal.app