Privacy Policy

Version 1.2.1 · Effective 2026-10-23 · Version 1.2

1. Who we are

Acriority is operated by an individual based in Israel ("we"). For anything in this policy, contact support@acriority.com.

This policy describes what the Acriority app and service actually do with your data. We wrote it to match the implementation, not the other way around.

2. What we collect

Account data: your email address, password (stored only as a one-way Argon2id hash — we cannot read your password), an optional display name, your device's timezone (used to compute which day an activity belongs to), email-verification status, and the versions of the Terms and this policy you accepted and when.

Content you create: your life areas ("Domains" and "Areas"), goals, quests, and any reflections you choose to write. Reflections and the names/titles you write are treated as the most sensitive tier of data: they are stored in our primary database, synced to your own devices, and shown back to you. They are never included in analytics and never shared with third parties.

Progression history: an append-only log of your quest events (created, completed, "didn't manage", edited, archived, reflections) with two timestamps per record — when the activity belongs to and when you reported it — and the XP ledger derived from it. This is the source of truth for your levels, attributes, radar and journey.

Device and security records: for each device you sign in on — platform (Android/iOS), app version, and last-seen time; security tokens (stored only as hashes); and a security audit log of account-level actions (sign-ins, password changes, consent changes, legal acceptance) that records your user agent and a truncated IP address (the last part is removed before it is written).

Product analytics (optional — see section 4): small behavioral events such as "a quest was created", "onboarding was completed" or "the radar was viewed", carrying only coarse values — counts, buckets like "short/medium/long", and yes/no flags. Analytics events never contain text you wrote: no quest titles, no goal names, no reflections. The analytics pipeline has no field that could carry your content. Timestamps on analytics are set by our server, and events are stored in our own database.

What we do not collect: no precise location, no contacts, no advertising identifiers, no tracking across other apps or websites, no payment data (the Service is currently free).

3. How we use your data

• To provide the Service: store and sync your content between your devices, compute your progression, and show your history back to you.
• To secure accounts: verify emails, reset passwords, detect token misuse, and keep the audit log.
• To measure whether the product works, using the analytics described in section 4 — aggregate product measurement, never advertising.

We do not sell your data. We do not show ads. We do not use your data to train AI models.

4. Analytics and your choice

Analytics collection is off unless you turn it on — during onboarding, or at any time in Settings, where you can also turn it off again. Your choice is enforced on our server: turning analytics off silences the analytics stream at its single collection point — including the mirror described in section 5. Each change of your choice is recorded in the security audit log; the analytics record notes only that a change occurred, with no other detail.

Your analytics choice never affects your account, your progression, or any feature.

5. Where your data lives, and who else processes it

Your data is stored in our database hosted on Render (cloud infrastructure provider), which processes it on our behalf as a hosting provider.

PostHog (EU Cloud, hosted in Frankfurt) — an analytics mirror that may receive a copy of the analytics events described in section 2, identified by a random pseudonymous ID; your email, your account ID, and anything you wrote are never sent to PostHog, and IP addresses are discarded. Nothing is mirrored unless analytics is on and you have accepted the current version of this policy. Events already sent to PostHog stay there when your account is erased (section 7).

Resend — a transactional email provider. It processes your email address and the content of our account emails (verification and password-reset messages) solely to deliver them.

Cloudflare — hosts our website, acriority.com, and forwards email sent to support@acriority.com to a mailbox operated by Google (Gmail). When you write to us, they process your email address and what you write.

We send only transactional email (verification, password reset). We do not send marketing email.

No one else receives your personal data, except if we are legally required to disclose it.

6. Data on your device

The app keeps a local copy of your data on your device so it works offline. This local copy is protected by your device's own protections (screen lock, device encryption); the app does not add a separate encryption layer to its local database. Signing out removes your data from that device.

7. How long we keep data

• Your content and progression history: for as long as your account exists.
• Raw analytics events: deleted once they are 24 months old.
• Security audit log: we have not yet set an automatic deletion period. Entries are kept, including after an account is erased, without the link to that account.
• Sign-in (refresh) tokens: they stop working after 60 days without use; their hashed records are currently kept while your account exists.
• Deleted accounts: nothing is erased for 30 days. During that time you can still sign in, look at and export your data, and cancel the deletion, but not make changes. After the 30 days we erase your account from our database: your account details, everything you created, your progression history, your devices and sign-in records, and the analytics stored with your account. This final erasure is currently done by hand, so it can happen some time after the 30 days end; we do not yet guarantee a fixed date. It does not remove:
  • the security audit log entries described above;
  • analytics events already sent to PostHog (section 5);
  • copies of the database: our hosting provider keeps automatic recovery points for 3 days, and we sometimes make full copies for recovery or maintenance — exports, which our hosting provider keeps for at least 7 days, and copies we download. These copies do not expire on their own and can contain your data until we delete them; we have not yet set a fixed period for deleting them.

8. Your rights and choices

• Access and correction: almost everything we hold about you is visible and editable in the app itself.
• Analytics choice: Settings, at any time (section 4).
• Deletion: in the app (Settings → Delete my account), or by emailing support@acriority.com from your account's address — see acriority.com/delete-account. Deletion follows the schedule and the exceptions in section 7, and includes your event history.
• A copy of your data: in the app, Settings → Export my data gives you a file with your account, everything you created, your history and XP ledger, your analytics events and your security-log entries.

We will also honour rights granted to you by the privacy law that applies to you, including Israel's Privacy Protection Law.

9. Security

Passwords are stored only as Argon2id hashes; all traffic between the app and our servers is encrypted in transit (TLS); security tokens are stored only as hashes; our hosting provider encrypts the database and the backups it keeps at rest; access to production data is restricted to authorised operators.

10. Changes to this policy

We may update this policy by publishing a new version. Material changes require your renewed acceptance in the app before continuing normal use. The version you accepted, and when, is recorded.

11. Contact

Privacy questions and requests: support@acriority.com.