Stoic - Privacy Policy
Stoic - Privacy Policy
Stoic Privacy Policy
Stoic Privacy Policy
Effective date: July 16, 2026 (replaces the version last updated July 2, 2026)
Effective date: July 16, 2026 (replaces the version last updated July 2, 2026)
Introduction
Introduction
This Privacy Policy describes how Stoic (“Stoic”, “the App”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you use the Stoic iOS application and related services (together, the “Service”). By using the Service you agree to the practices described in this Policy. If you do not agree, do not use the Service.
This Privacy Policy describes how Stoic (“Stoic”, “the App”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you use the Stoic iOS application and related services (together, the “Service”). By using the Service you agree to the practices described in this Policy. If you do not agree, do not use the Service.
1. Summary
1. Summary
• We collect the minimum information needed to run the App. By default your account is anonymous.
• We collect the minimum information needed to run the App. By default your account is anonymous.
• Your camera is used only to count exercise repetitions on your device. Camera frames are never recorded, stored, or transmitted. No photo or video ever leaves your device.
• Your camera is used only to count exercise repetitions on your device. Camera frames are never recorded, stored, or transmitted. No photo or video ever leaves your device.
• Motion, step, and Screen Time data never leave your device.
• Motion, step, and Screen Time data never leave your device.
• Your tasks, notes, alarms, and routine are stored locally on your device.
• Your tasks, notes, alarms, and routine are stored locally on your device.
• We do not sell your personal information, and we do not use third-party advertising or cross-app tracking.
• We do not sell your personal information, and we do not use third-party advertising or cross-app tracking.
2. Account Information
2. Account Information
By default, Stoic creates an anonymous account for you, consisting of a randomly generated account identifier. You may optionally provide a display name, handle, short bio, and profile photo. If you choose to sign in with an authentication provider, we receive the identifier associated with that sign-in method. We do not require your real name.
By default, Stoic creates an anonymous account for you, consisting of a randomly generated account identifier. You may optionally provide a display name, handle, short bio, and profile photo. If you choose to sign in with an authentication provider, we receive the identifier associated with that sign-in method. We do not require your real name.
3. Information We Collect
3. Information We Collect
Information stored on our servers (via our hosting provider):
Information stored on our servers (via our hosting provider):
• Your anonymous account identifier and optional profile details (display name, handle, bio, avatar);
• Your anonymous account identifier and optional profile details (display name, handle, bio, avatar);
• Progress and activity data used for core features: focus session totals, XP, streak, discipline metrics, and leaderboard standing;
• Progress and activity data used for core features: focus session totals, XP, streak, discipline metrics, and leaderboard standing;
• Credit balances and related economy events, to the extent needed to operate the Service;
• Credit balances and related economy events, to the extent needed to operate the Service;
• Creator or promotional code redemptions linked to your account identifier;
• Creator or promotional code redemptions linked to your account identifier;
• Encrypted messages, if you use messaging features (see Section 8).
• Encrypted messages, if you use messaging features (see Section 8).
Information stored only on your device:
Information stored only on your device:
• Tasks, notes, daily routine, goals, and plans;
• Tasks, notes, daily routine, goals, and plans;
• Alarm configurations and challenge settings;
• Alarm configurations and challenge settings;
• App-blocking selections and Screen Time configuration (see Section 6);
• App-blocking selections and Screen Time configuration (see Section 6);
• Camera, motion, and pedometer data (see Sections 4 and 5);
• Camera, motion, and pedometer data (see Sections 4 and 5);
• Local preferences and settings.
• Local preferences and settings.
We do not collect your contacts, location, browsing history, or advertising identifiers.
We do not collect your contacts, location, browsing history, or advertising identifiers.
4. Camera (Exercise Verification)
4. Camera (Exercise Verification)
Certain alarm challenges use your device camera to verify physical exercises (for example push-ups, squats, sit-ups, or jumping jacks).
Certain alarm challenges use your device camera to verify physical exercises (for example push-ups, squats, sit-ups, or jumping jacks).
• All processing happens entirely on your device using Apple’s Vision framework (on-device body-pose detection).
• All processing happens entirely on your device using Apple’s Vision framework (on-device body-pose detection).
• Camera frames are analyzed in real time and immediately discarded. No photo, video, or camera frame is ever recorded, saved to your device, stored by us, or transmitted to us or to any third party.
• Camera frames are analyzed in real time and immediately discarded. No photo, video, or camera frame is ever recorded, saved to your device, stored by us, or transmitted to us or to any third party.
• Body-pose data derived from the camera (joint positions) exists only momentarily in device memory for counting repetitions and is never persisted or transmitted.
• Body-pose data derived from the camera (joint positions) exists only momentarily in device memory for counting repetitions and is never persisted or transmitted.
• Camera access is optional. You may choose non-camera challenges, and you can revoke camera permission at any time in iOS Settings. Revoking access disables camera-verified challenges only.
• Camera access is optional. You may choose non-camera challenges, and you can revoke camera permission at any time in iOS Settings. Revoking access disables camera-verified challenges only.
5. Motion and Fitness Data
5. Motion and Fitness Data
Step-based challenges and focus-session motion alerts use your device’s motion sensors and pedometer (Apple Core Motion). This data is read and processed only on your device, solely to count steps or detect device movement during a session. It is never collected, stored on our servers, or transmitted off the device. You can revoke Motion & Fitness permission at any time in iOS Settings.
Step-based challenges and focus-session motion alerts use your device’s motion sensors and pedometer (Apple Core Motion). This data is read and processed only on your device, solely to count steps or detect device movement during a session. It is never collected, stored on our servers, or transmitted off the device. You can revoke Motion & Fitness permission at any time in iOS Settings.
6. Screen Time, App Blocking, and Focus Shield
6. Screen Time, App Blocking, and Focus Shield
Stoic’s blocking features use Apple’s Screen Time frameworks (Family Controls, Managed Settings, and Device Activity). The apps and categories you select for blocking are represented by opaque tokens that Apple designs to be unreadable by us. Your app selections, blocking schedules, shield status, and any related Screen Time information remain on your device and are never transmitted to us or to any third party. Apple’s frameworks technically prevent this data from leaving your device.
Stoic’s blocking features use Apple’s Screen Time frameworks (Family Controls, Managed Settings, and Device Activity). The apps and categories you select for blocking are represented by opaque tokens that Apple designs to be unreadable by us. Your app selections, blocking schedules, shield status, and any related Screen Time information remain on your device and are never transmitted to us or to any third party. Apple’s frameworks technically prevent this data from leaving your device.
7. AI Features
7. AI Features
If you use AI-powered features (for example generating a step-by-step path from a goal you type), the text you submit is sent to our AI provider (OpenAI) to generate the result. This content is processed transiently to provide the feature and is not used by us to build profiles about you. Do not include sensitive personal information in text you submit to AI features. AI outputs are generated automatically and are provided for informational purposes only.
If you use AI-powered features (for example generating a step-by-step path from a goal you type), the text you submit is sent to our AI provider (OpenAI) to generate the result. This content is processed transiently to provide the feature and is not used by us to build profiles about you. Do not include sensitive personal information in text you submit to AI features. AI outputs are generated automatically and are provided for informational purposes only.
8. Messages
8. Messages
If and where messaging features are available, messages are protected with end-to-end encryption. Encryption keys are generated and stored on your device. We store only the encrypted form of messages for delivery and synchronization and we never have access to your keys or to readable message content.
If and where messaging features are available, messages are protected with end-to-end encryption. Encryption keys are generated and stored on your device. We store only the encrypted form of messages for delivery and synchronization and we never have access to your keys or to readable message content.
9. Purchases, Subscriptions, and Paywall Analytics
9. Purchases, Subscriptions, and Paywall Analytics
Payments are processed exclusively by Apple through your App Store account. We never receive or store your payment card details.
Payments are processed exclusively by Apple through your App Store account. We never receive or store your payment card details.
We use Superwall, a paywall management service, to display subscription offers and measure their performance. In connection with purchases and paywall views, Superwall may process device-level identifiers, device and app metadata, and subscription events (for example trial started, subscribed, cancelled). This is used for the operation and analytics of our paywall and subscription business, not for third-party advertising. Superwall’s privacy practices are described in its own privacy policy.
We use Superwall, a paywall management service, to display subscription offers and measure their performance. In connection with purchases and paywall views, Superwall may process device-level identifiers, device and app metadata, and subscription events (for example trial started, subscribed, cancelled). This is used for the operation and analytics of our paywall and subscription business, not for third-party advertising. Superwall’s privacy practices are described in its own privacy policy.
Creator and promotional codes: if you redeem a code, we record the code, the time of redemption, and your account identifier, to grant the associated benefit and prevent abuse.
Creator and promotional codes: if you redeem a code, we record the code, the time of redemption, and your account identifier, to grant the associated benefit and prevent abuse.
10. Notifications
10. Notifications
With your permission, we schedule local notifications (alarms, reminders, streak and focus nudges, and similar). These are generated on your device. You can disable them at any time in iOS Settings or in the App’s own settings.
With your permission, we schedule local notifications (alarms, reminders, streak and focus nudges, and similar). These are generated on your device. You can disable them at any time in iOS Settings or in the App’s own settings.
11. Third-Party Service Providers
11. Third-Party Service Providers
We share information only with the service providers needed to operate the App:
We share information only with the service providers needed to operate the App:
Provider
Provider
Purpose
Purpose
What it processes
What it processes
Supabase
Supabase
Hosting, authentication, database, server functions
Hosting, authentication, database, server functions
Account identifier, profile, progress data, encrypted messages, code redemptions
Account identifier, profile, progress data, encrypted messages, code redemptions
Superwall
Superwall
Paywall display and subscription analytics
Paywall display and subscription analytics
Device identifiers, device/app metadata, subscription events
Device identifiers, device/app metadata, subscription events
OpenAI
OpenAI
AI content generation
AI content generation
Text you submit to AI features (transient)
Text you submit to AI features (transient)
Apple
Apple
Payments, notifications, alarms, Screen Time, on-device machine learning
Payments, notifications, alarms, Screen Time, on-device machine learning
Per Apple’s own terms and privacy policy
Per Apple’s own terms and privacy policy
We do not sell personal information to anyone, and we do not share personal information with data brokers or advertising networks.
We do not sell personal information to anyone, and we do not share personal information with data brokers or advertising networks.
12. Data Retention and Deletion
12. Data Retention and Deletion
We retain server-side data for as long as your account exists. You can delete your account at any time from within the App (Settings). Deletion removes your account record and associated server-side data within a reasonable period, except where retention is required by law or for legitimate security purposes (for example fraud prevention logs). Data stored only on your device is deleted when you delete the App.
We retain server-side data for as long as your account exists. You can delete your account at any time from within the App (Settings). Deletion removes your account record and associated server-side data within a reasonable period, except where retention is required by law or for legitimate security purposes (for example fraud prevention logs). Data stored only on your device is deleted when you delete the App.
13. Security
13. Security
We use industry-standard safeguards, including encryption in transit, encrypted storage with our hosting provider, end-to-end encryption for messages, and row-level access controls that restrict data access to your own account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We use industry-standard safeguards, including encryption in transit, encrypted storage with our hosting provider, end-to-end encryption for messages, and row-level access controls that restrict data access to your own account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Children
14. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it. Users under the age of majority in their jurisdiction must have consent from a parent or legal guardian.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it. Users under the age of majority in their jurisdiction must have consent from a parent or legal guardian.
15. International Data Transfers
15. International Data Transfers
Our service providers may store and process data in countries other than your own, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses implemented by our providers.
Our service providers may store and process data in countries other than your own, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses implemented by our providers.
16. Your Rights
16. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing.
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing.
• EU / UK (GDPR): you have the rights listed above and the right to lodge a complaint with your supervisory authority. Our legal bases are performance of a contract (operating the App), legitimate interests (security, service improvement), and consent (where requested, for example camera access).
• EU / UK (GDPR): you have the rights listed above and the right to lodge a complaint with your supervisory authority. Our legal bases are performance of a contract (operating the App), legitimate interests (security, service improvement), and consent (where requested, for example camera access).
• California (CCPA/CPRA): you have the right to know, delete, and correct personal information, and the right to opt out of “sale” or “sharing”. We do not sell or share personal information as defined by the CCPA.
• California (CCPA/CPRA): you have the right to know, delete, and correct personal information, and the right to opt out of “sale” or “sharing”. We do not sell or share personal information as defined by the CCPA.
You can exercise most rights directly in the App (including account deletion). For anything else, contact us at the address below and we will respond within the time required by applicable law.
You can exercise most rights directly in the App (including account deletion). For anything else, contact us at the address below and we will respond within the time required by applicable law.
17. Changes to This Policy
17. Changes to This Policy
We may update this Policy from time to time. Material changes will be indicated by updating the effective date above and, where appropriate, by notice in the App. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
We may update this Policy from time to time. Material changes will be indicated by updating the effective date above and, where appropriate, by notice in the App. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
18. Contact
18. Contact
For privacy inquiries, requests, or complaints:
For privacy inquiries, requests, or complaints:
Email: shavitsappscompany@gmail.com
Email: shavitsappscompany@gmail.com
This Policy is governed by the laws of the State of Israel.
This Policy is governed by the laws of the State of Israel.