Privacy Policy

Last updated: May 23, 2026

1. What we collect and why

Gracias collects only the data needed to provide a gratitude journaling and Circle-sharing experience:

• Email address — for magic-link authentication (via Supabase Auth).
• Nickname and avatar color — shown to you and your Circle friends.
• Gratitude entries — up to 3 text items per day, stored locally and optionally synced to Supabase if you sign in.
• Friend relationships — follower/following connections in your Circle.
• Likes — when you like a friend's entry on the Circle feed.
• Notification token — used only to send your scheduled daily reminder.

We do not collect location data, browsing history, contacts, photos, or any analytics telemetry. No advertising SDKs are used.

2. How we store it

Gratitude entries are stored locally on your device in SQLite. If you sign in with email, entries are also stored securely in Supabase (encrypted at rest, SOC 2 compliant infrastructure). Your email and authentication credentials are managed by Supabase Auth.

3. Sharing

Your nickname, avatar color, and gratitude entries are shared only with the friends you manually add to your Circle. We never sell your data. No third party has access to your personal information except Supabase as our hosting infrastructure provider.

4. Voice data

Gracias offers optional voice input via the iOS Speech API. Audio is transcribed on-device and discarded immediately. Voice recordings are never transmitted or stored on our servers or anywhere else.

5. Data retention

Your data is kept for as long as your account exists. When you delete your account (see section 6), all personal data is erased from Supabase within a reasonable timeframe. Local SQLite data on your device is deleted when you delete your account from within the app.

6. Your rights

You can delete your account at any time from the app: Settings → Delete Account. This removes your profile, entries, friendships, and likes from our servers. If you have trouble, email us at the address below.