Privacy Policy

Overview

AffirmFlow ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application.

By using AffirmFlow, you agree to the collection and use of information in accordance with this policy.

Information We Collect

• Account data — email address and password hash used for authentication via Supabase.
• User-generated content — affirmations, folders, and notification schedules you create.
• Usage analytics — anonymous in-app events to improve the app experience.
• Device identifiers — anonymous identifiers for push notification delivery.

How We Use Your Information

• Provide and maintain the app's core features (affirmation storage, notifications, widget).
• Personalize content generated via AI affirmation features.
• Process subscription purchases and manage premium access.
• Improve app performance and fix bugs through aggregated analytics.
• Send push notifications you've explicitly scheduled.

Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Supabase — database, authentication, and backend infrastructure.
• OpenAI — AI-powered affirmation generation (requests are proxied server-side; your API key is never stored in the app).
• Apple StoreKit — in-app purchase processing.
• Apple Push Notification Service (APNs) — notification delivery.

Data Storage & Security

Your data is stored on Supabase infrastructure with Row-Level Security (RLS) enabled — only you can access your own data. All data is encrypted in transit via HTTPS/TLS.

We do not sell, trade, or rent your personal information to third parties.

Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. We will process deletion requests within 30 days.

Children's Privacy

AffirmFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

Your Rights

• Access, correct, or delete your personal data.
• Opt out of analytics by contacting us.
• Request a copy of your stored data.
• Withdraw consent at any time.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.