Privacy Policy

Introduction

Thankful ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

We collect the following categories of information to provide and improve our services:

• Account Information: When you sign up using Sign in with Apple, we receive a unique Apple-assigned user identifier but not your Apple ID email unless you choose to share it. When you sign up with email, we receive your email address. You may also create a display name, choose an avatar colour, upload an optional avatar photo, and add a short bio.
• User-Generated Content: Daily gratitude notes, mood entries, quiz answers, monthly highlight data, article read status, avatar photos, and reactions that you create or interact with through the app.
• Partner Connection Data: Information about your partner connection, including a unique pairing code, to enable shared features between connected users.
• Push Notification Token: We collect a device push notification token via OneSignal solely to deliver reminders and notifications you opt into. You can opt out at any time through your device settings.
• Purchase Information: If you subscribe to Thankful Premium, Apple processes payment on our behalf. We receive confirmation of your subscription status but do not receive your payment card details.
• Usage Analytics and Diagnostics: We may collect limited analytics and crash diagnostics, such as feature usage events and crash reports, to improve reliability and understand which parts of the app are working well.

We do not collect your precise location, contacts, or photo library. If you choose to add an avatar photo, we store only the image you select for that profile feature.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To enable partner connections and data sharing between connected users
• To send you push notifications about daily gratitude reminders
• To personalize your experience within the app
• To analyze usage patterns to improve our features
• To respond to your requests and provide customer support

Data Storage and Security

Your data is stored securely using the following methods:

• Cloud Storage: We use Supabase as our secure cloud database provider to store your account information, notes, and other app data.
• Local Storage: Some data may be stored locally on your device for offline access and improved performance.
• Encryption: We use industry-standard encryption to protect your data during transmission and storage.
• Access Controls: Access to your data is strictly limited to you and your connected partner. We do not share your data with third parties except as required by law.

Third-Party Service Providers

We use the following third-party services to operate the app. Each provider processes only the data necessary for their service and is bound by their own privacy policies:

• Supabase – Cloud database, authentication, account deletion, storage, and server functions. Stores your account information, notes, avatar photos, and app data. Privacy Policy
• OneSignal – Push notification delivery. Receives your device push token to send you notifications you opt into. Privacy Policy
• TelemetryDeck – Privacy-focused app analytics. Receives limited usage events to help us improve the app. Privacy Policy
• Firebase Crashlytics – Crash reporting. Receives crash diagnostics to help us fix reliability issues. Privacy Policy
• Apple – Sign in with Apple, App Store payments, and TestFlight distribution. Privacy Policy

We do not sell your personal information to any third party. We do not use your data for advertising.

Data Sharing

We share your information only in the following circumstances:

• With Your Partner: When you connect with a partner in the app, your gratitude notes, mood entries, and other shared content are visible to your connected partner. This is the core functionality of Thankful. You control what you share by choosing what you write.
• Service Providers: As listed above, our third-party providers access your data only to perform their services and are contractually prohibited from using it for other purposes.
• Legal Requirements: We may disclose your information if required to do so by applicable law, a court order, or other valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will notify you before your personal data is subject to a different privacy policy.

Data Retention and Deletion

We retain your personal data for as long as your account is active. When you delete your account — either through Settings > Account > Delete Account in the app or by contacting us — your personal data is deleted within 30 days. Encrypted backups may retain your data for up to 90 additional days before being permanently purged.

Some anonymized, aggregated data (e.g., overall feature usage statistics) that cannot identify you may be retained for longer periods to improve the app.

Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data. You can update your profile directly in the app.
• Deletion: Request deletion of your personal data. You can delete your account directly in the app via Settings > Account > Delete Account.
• Data Portability: Request a copy of your data in a machine-readable format.
• Opt-Out of Notifications: Disable push notifications at any time through your iPhone Settings > Notifications > Thankful.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@thankfuldaily.com. We will respond within 30 days.

California Residents (CCPA): California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

EEA/UK Residents (GDPR): If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation, including the rights listed above. Our legal basis for processing your data is the performance of our contract with you (providing the app's services) and, where applicable, your consent. You also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

Thankful is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us: