Privacy Policy

The short version

• Your entries are yours. Nobody else can read them.
• They are stored in the EU — eu-central-1 (Frankfurt, Germany).
• There is no advertising and no tracking. We count overall use, like how many people checked in this week, to improve the app. Never what anyone wrote.
• Nothing is sold or shared with anyone for marketing.
• You can download everything, or delete all of it, at any time.

What is stored

Your account:

• Email address and a password, used to sign you in
• First name, and last name if you give one
• Which avatar you picked

What you record:

• Mood check-ins: the mood, when you logged it, and — if you add them — your energy level, what was going on (such as work or sleep), and a short note
• Journal entries: the title and text you write, and the date
• Things you save to bring up later, and whether you've marked them as talked about
• Your plan for hard days, if you write one. It can include the names and phone numbers of people you choose to add; they are stored only for you, nobody else can see them, and they are deleted with your account. A copy is kept on your device so it opens without a connection, and removed when you sign out.
• Your reminder settings and quiet hours. If you turn reminders on in a web browser, also your time zone and that browser's push address (see below)

Your moods and journal entries say something about your mental health. Under the GDPR that makes them special category data, which is why the app asks for your explicit agreement before storing any of it, and records which version of this policy you agreed to and when.

Why it is allowed to be stored

• Your account and the service itself — because you asked for an account, and it cannot work without one (GDPR Art. 6(1)(b)).
• Your moods and journal entries — because you explicitly agreed to it when you signed up (GDPR Art. 9(2)(a)). You can withdraw that agreement at any time by deleting your account, which removes the data.

Where it is stored, and who can see it

Data is held in Postgres, hosted by Supabase in eu-central-1 (Frankfurt, Germany), and protected row by row so that a signed-in account can only ever read its own rows. Passwords are stored hashed by Supabase and are not readable by anyone, including us. Traffic is encrypted in transit.

Two companies process data on our behalf:

• Supabase — the database and sign-in system
• Vercel — serves the app itself; it handles web requests but does not receive your entries

Both are bound by a data processing agreement that only allows them to handle your data on our instructions. Each uses its own suppliers in turn — for the database that means the underlying cloud infrastructure — and those are listed on Supabase's legal pages and Vercel's.

Your entries are stored in the EU. Both companies are based in the United States, so some support or administrative access can happen from outside the EU; where it does, it is covered by the data processing agreements above and the European Commission's Standard Contractual Clauses.

Reminder notifications on Android are scheduled on your own device and their content is never sent to a server.

Reminders in a web browser. A browser can't schedule them itself, so if you turn them on there, our server sends them at your chosen times through the browser's own push service, run by the company that makes the browser (such as Google, Microsoft, Mozilla or Apple). For that we store the browser's push address and its keys, and your time zone, so reminders arrive at your local times. A reminder only asks “How are you right now?” and offers feeling buttons: it never contains anything you have written, and it is encrypted so the push service cannot read it. The push address is deleted when you turn reminders off, when you sign out in that browser, or when the push service says it no longer works.

In a browser the app also keeps a copy of its own files (not your data) so it opens quickly; your entries always come from the server.

Error reports, only if you agree. If you turn on “Send error reports” (at sign-up, or any time in Settings → Your data), then when something breaks the app sends a report to Sentry (Functional Software, Inc.), which processes it on our behalf under a data processing agreement. A report holds the error message and where in the app it happened, your device type, operating system and app version, and an anonymous account number. It never includes your name, email address, IP address, or anything you write or choose in the app. Reports are stored in the EU (Frankfurt) and deleted after 30 days. Turning the setting off stops reports straight away.

If you buy Pro, the purchase is made from Paddle (Paddle.com Market Ltd), which sells it to you as the merchant of record and handles payment, tax and invoices under its own privacy notice. Paddle receives your email address, payment details and billing country from you at checkout, plus an account identifier from us so the purchase unlocks Pro. It never receives your check-ins, notes or anything else you record. Paddle tells us only whether your Pro is active and until when. If you never buy, Paddle gets nothing.

If you join the waitlist

Before word for it is on Google Play, you can leave your email on our homepage to hear when it's out, and tick a box if you'd like to test it early. This is separate from having an account.

• What's kept: your email address, whether you want to test early, when you signed up and confirmed, when we invited you to test (if you asked to), and the wording you agreed to. Nothing else.
• Why: only to email you about the launch, and about testing if you asked. That's based on your consent (GDPR Art. 6(1)(a)), which you confirm by clicking the link in the first email; unconfirmed sign-ups are deleted after 7 days.
• Who sends the emails: Resend, which also sends the account emails, from the EU, under a data processing agreement. To stop the form being abused, a scrambled form of your connection's address is kept for a day; the address itself isn't stored.
• How long: until the launch email has gone out, or, if you're testing, until testing ends (we'll ask once if you want to stay for updates). Then it's deleted.
• Stopping: every email has a one-click unsubscribe link, which deletes you from the list straight away. If you test through Google Play, Google shows us the email of the Google account you test with; that's how Play testing works.

Counting overall use

To see whether the app is working for people, we count totals from what the app already stores:

• how many accounts there are, and how many are new each week
• how many people checked in today, this week and this month, and whether people come back
• how many use each part of the app, like feeling words, notes, the journal, saved items, the hard-day plan and reminders

These are totals only. They never include what you wrote or which moods you chose, and they never single out one person. Nothing extra is recorded to do this. The counts are worked out inside the database, in the EU, and no other company is involved.

The totals are used only to understand and improve the app. They aren't sold, shared, used for advertising, or used to contact you.

We do this to keep the app working and improve it (GDPR Art. 6(1)(f)). Because the counts come from your check-ins, it is also covered by the agreement you give to this policy (Art. 9(2)(a)). If you'd rather your account wasn't counted, write to privacy@wordforit.app and we'll leave it out.

What is not done

• No advertising, and no advertising identifiers
• No analytics tools, and nothing records what you tap or which screens you open. Error reports are off unless you turn them on, and you can turn them off any time in Settings → Your data
• No cookies beyond the one that keeps you signed in
• No selling or sharing of your data
• No automated decisions about you, and no profiling. The app describes patterns in your own entries; it does not diagnose, assess, or draw conclusions about you.

How long it is kept

For as long as your account exists, except a browser's push address, which goes when reminders are turned off there (above). When you delete your account, your entries, journal, settings, profile, and login are all removed straight away. Encrypted backups held by Supabase may retain a copy for a short period afterwards before they age out; nobody reads those, and they are not used to restore deleted accounts.

Your rights

Under the GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, restrict how it is used, or object to its use. Two of those are buttons in the app, under Settings → Privacy & Security:

• Export my data — downloads everything as a JSON file
• Delete my account — permanently removes everything

For anything else, or to complain, write to privacy@wordforit.app. You also have the right to complain to your national data protection authority.

Children

This app is not intended for anyone under 16, and accounts should not be created for them.

This is not medical care

word for it is a place to record and review how you feel. It is not a medical device, it does not diagnose or treat anything, and it is not a substitute for professional care. If you are struggling, Settings → Find someone to talk to lists helplines.

Changes

If this policy changes in a way that affects what you agreed to, we will ask you again rather than assume. The version and date at the top of this page tell you which one is current.