PRIVACY POLICY.

THE SHORT VERSION

To keep your progress safe and make Freewill better, your progress, your challenge history and your answers sync to our servers. Your journal is different: it only leaves your phone if you choose to back it up, and even then it is stored apart from your name. We use an analytics tool to see how the app gets used, including screen recordings that hide what you type, your journal and your ratings. We also use de-identified data, which can't be traced back to you, for research. We don't show ads, we don't track you across other apps, and we never sell your personal information.

WHAT WE COLLECT

Your account. When you sign in, we create an account ID. If you use Sign in with Apple, we receive your email address (which may be an Apple private relay address) and, if you share it, your name.

Your onboarding answers. The answers you give when you start, including what feels hard for you socially, where it shows up, your goals, the habits you flag before social situations, and the path the app tailors to you.

Your progress and challenge history. Each challenge you complete, when you completed it, how you rated it before and after, your streaks, streak pauses and restores, your crab's name and stage, experience points, level, coins and your app settings, such as reminder times.

Your journal (only if you turn on backup). If you choose "Back up my journal," the reflections and notes you write are stored on our servers so you can get them back if you switch phones. If you leave it off, your journal stays on your phone only. See "How your journal is protected" below.

The Cove (if you use it). Your handle, bio, profile setting (public or private), posts, comments, replies, Snaps, the rooms you join, your friends and friend requests, invite codes, and the people you block or report. Your name is shared in the Cove only with friends you accept, or in a room where you turn on "post with my name."

Subscription details. Whether you subscribe, your plan, trial and renewal dates, cancellations, refunds, and when RevenueCat first and last saw your account. We never see your card details.

How you use the app. Which screens you open, what you tap, and actions such as starting a challenge, viewing the paywall or joining a room. We also record how you move through the app (session recordings), with everything you type hidden and the journal, rating and onboarding-answer screens left out entirely. We collect crash reports, your device model, system version and app version, and your approximate city and country, estimated from your IP address. None of this includes your journal, your ratings, your onboarding answers or anything you type. If you're in the EU, EEA, UK or Switzerland, we collect this only if you say yes.

How you heard about us. If you answer that question during onboarding.

HOW WE USE IT

• To run Freewill: save your progress, restore it if you reinstall or switch phones, and unlock Pro.
• To run the Cove: show your posts and profile to the people your settings allow, and keep the community safe.
• To improve Freewill: understand which challenges help, where people get stuck, and what to build next.
• To find and resolve crashes and bugs.
• For research, using de-identified data only (see below).
• To respond to you when you contact us.

We do not use your data for advertising. We do not use AI to process your journal or answers.

YOUR CHOICES

You have these choices, during onboarding and any time in Settings under Your data:

• Back up my journal. Off unless you turn it on. Turning it off deletes your journal from our servers.
• Share usage stats. Only in the EU, EEA, UK and Switzerland, where it stays off until you turn it on. Everywhere else, usage stats are part of using Freewill.

HOW YOUR JOURNAL IS PROTECTED

If you back up your journal, the text is stored in a separate place, under a random ID that is not your account, name, email or handle. The link between that ID and your account is kept in a locked part of our database that the app itself cannot read. A small number of Freewill team members can access journal text, only to operate and improve the service, and every access is logged. If you turn backup off, the copy on our servers is deleted right away.

RESEARCH

We use de-identified data to study how social confidence grows, and we may share or license de-identified data to research partners such as universities, clinics and clinical researchers. De-identified means it can't reasonably be linked back to you: no name, email, handle, account ID or device ID, and never your journal text. Anyone we share it with must agree not to try to identify you. We never sell or share data that identifies you.

WHO WE SHARE WITH

We share data only with the service providers that make Freewill work:

• Supabase hosts our database and handles sign-in.
• RevenueCat manages subscriptions. It receives your account ID and your purchase events.
• PostHog provides analytics. It receives your account ID and the app data described above: events, taps, session recordings with sensitive screens hidden, crash reports and device details. It uses your IP address to estimate your city and country. It never receives what you type, your journal, your ratings or your onboarding answers.
• Apple handles Sign in with Apple and App Store payments.
• Resend delivers our internal moderation alerts when someone files a report.

We may also disclose information if the law requires it, or to protect someone's safety. If Freewill is ever sold or merged, your information would move with it under this policy.

We never sell your personal information (de-identified research data, described above, can't identify you and isn't personal information), and we never share it for advertising or cross-app tracking.

NOTIFICATIONS

Reminders are scheduled on your device. We do not collect a push token.

SUBSCRIPTIONS AND PAYMENTS

Subscriptions are billed through your Apple ID, and Apple handles all payment information. You can manage or cancel any time in your App Store settings.

KEEPING AND DELETING YOUR DATA

We keep your data while you have an account. You can delete your account any time in Settings. When you do, we immediately delete your account, progress, history, journal, Cove profile and content, data choices and subscription records from our database, and the app clears what is stored on your phone. Backups that may hold a copy are purged within 90 days.

Deleting your account does not cancel a subscription: cancel it in your App Store settings.

CONSUMER HEALTH DATA

Some of what you share, such as how anxious you rate a situation, what feels hard for you socially and your journal, may count as consumer health data under some state laws, including Washington's. We collect it only to provide and improve Freewill. We never sell it, and we never share it in a form that identifies you. You can see, get a copy of or delete it by contacting us or by deleting your account.

SECURITY

Data is encrypted in transit and stored with industry-standard protections through Supabase. Access is limited to the people and systems that need it.

CHILDREN

Freewill is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

YOUR RIGHTS

You can see and correct most of your information in the app, change your data choices in Settings, and delete everything by deleting your account. Depending on where you live, you may have more rights, such as getting a copy of your data. Email us and we will help within 30 days.

CHANGES TO THIS POLICY

If we change what we collect or how we use it, we will update this policy and the date above before the change goes live, and tell you in the app when it matters.