Privacy Policy — Affirmly
Last Updated: 2026-10-24 · Effective Date: 2026-10-24
Affirmly ("the App") is published by MobileByteSensei ("we", "us"). This policy explains what the App collects, why, who processes it, and the choices you have. It applies to the Affirmly apps for Android and iOS and to this website.
1. The short version
- You can use Affirmly without an account. Your affirmations, favourites, journal entries and mood check-ins are stored on your device.
- If you sign in with Google or Apple, that content is synced to our backend so it follows you across devices.
- We use Firebase Analytics and Firebase Crashlytics to understand which features are used and to fix crashes.
- No ads, ever. We do not sell your data and we do not share it with advertisers.
- You can delete your account and synced data in the App at any time.
2. What we collect
Information you provide
- Account details (optional). If you sign in with Google or Apple we receive your name, email address and an account identifier from that provider. Apple's "Hide My Email" relay address is respected.
- Your content. Affirmations you write, personal categories, favourites, collections, gratitude journal entries and mood check-ins (the mood you pick, optional "what is shaping it" tags and an optional note). This content stays on your device, and is synced to our backend only while you are signed in.
- Personalisation answers. The goals and focus areas you choose during onboarding or in your profile.
Information collected automatically
- Usage analytics (Firebase Analytics): screens viewed and features used, an app-instance identifier, device model, OS version, app version and approximate country derived from the IP address.
- Crash and diagnostic data (Firebase Crashlytics): stack traces, device state at the time of a crash and an installation identifier.
- Purchase status. Whether you are in your free trial or have an active subscription, provided by Google Play or the App Store through our billing provider. We never see or store your card details.
What we do not collect
- No precise location. No contacts. No photos or microphone audio. No advertising identifier is used for ads.
3. How we use it
| Purpose | Data used |
|---|---|
| Show your daily affirmations and keep your personal set | Your content, personalisation answers |
| Generate a personalised daily set | Your chosen goals, focus areas and recent mood (sent to our server-side function; never used to train models) |
| Sync across devices | Account details, your content |
| Free trial and subscription access | Purchase status |
| Local reminders | Reminder times you choose — scheduled on your device, never sent to us |
| Fix bugs and improve the App | Crash data, usage analytics |
4. Who processes your data
We use service providers that process data only on our behalf:
- Google Firebase — authentication, analytics, crash reporting (Google LLC).
- Supabase — database and sync for signed-in users, and the server-side function that personalises your daily set.
- Our AI model provider — receives only the goals/mood context needed to suggest affirmations, through our server; your name and email are not sent.
- PayCraft, Google Play Billing and Apple In-App Purchase — subscription and trial status.
We do not sell or rent personal data, and we do not share it with data brokers or advertisers.
5. Retention
- On-device content stays until you delete it or uninstall the App.
- Synced content is kept while your account exists and deleted within 30 days after you delete your account.
- Analytics and crash data are retained per Firebase's default retention (up to 14 months for analytics, 90 days for Crashlytics).
6. Security
All data in transit is encrypted with HTTPS/TLS. Synced data is protected by per-user access rules on our backend.
7. Your choices and rights
- Delete your account: Settings → Account → Delete account. This removes your synced data.
- Reminders: turn any reminder on or off, or change its times, in Settings → Reminders.
- Access, correction, portability, objection: email us at the address below. If you are in the EEA, the UK or California, you have the rights given to you by GDPR, UK GDPR or CCPA/CPRA respectively, and you may complain to your local data-protection authority.
8. Children
Affirmly is not directed at children under 13 (or the minimum digital age in your country), and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
9. International transfers
Our service providers may process data outside your country. Where required, transfers rely on standard contractual clauses or equivalent safeguards provided by those providers.
10. Wellbeing, not medical care
Affirmly is a positive-mindset companion. It is not a medical or therapeutic service and does not diagnose or treat any condition. Mood check-ins are for your own reflection.
11. Changes
We will update this policy as the App changes. The "Last Updated" date will move, and material changes will be shown in the App or on its store listing.
12. Contact
MobileByteSensei — [email protected]