Privacy Policy

Nimea is a habit tracker built on one operating principle: collect the minimum needed for the app to work. This page explains exactly what we gather, why, who processes it, and how you can delete it.

Who we are

Nimea is made by Wolf Codes Inc., Vancouver, British Columbia, Canada. Questions: [email protected].

What we collect

Only what you put in, plus what's needed to keep you signed in and the app stable:

• Account: email address and a hashed password (or an Apple-issued identifier if you use Sign in with Apple).
• Profile: optional display name, timezone, chronotype, and the accent color you pick.
• Habit data: habits you create, completion logs, notes, mood check-ins, journal entries, streaks, Focus Lock sessions.
• Device locale: read once to pick your default language. Not stored beyond your device.
• Subscription status: whether you have an active Pro subscription (held by RevenueCat, see below).
• Location (optional, opt-in): if you enable location-cued habit reminders, the app registers geofences with iOS. The monitoring happens on your device; the coordinates you chose are also stored on our server as part of that habit, so your reminder can sync across your devices.
• Usage analytics: feature usage, screen views, and habit completions, tied to your account id so we can see what's working. Stored in our own database and in PostHog, an analytics provider.
• Feedback (optional): if you send feedback from Profile, we store the text you write along with your platform and OS version, tied to your account.
• Crash diagnostics (optional): when the app crashes or errors, we send a stack trace to Sentry so we can fix it, along with your account id so we can trace a report back to what happened. We also sample performance data (about 1 in 5 sessions in production). IP addresses and precise device IDs are explicitly not included (we set sendDefaultPii: false).

What we don't collect

• We don't track you across other apps or websites.
• We don't sell your data. Ever. To anyone.
• We don't embed ad-network SDKs.
• We don't scan or analyze your photos, camera, or microphone.
• We don't read your contacts, calendar, health data, or other installed apps.

Third parties that process your data on our behalf

Your data flows through these services only to make the app work. Each is bound by a data-processing agreement and its own policy:

• Supabase: authentication and data storage (habits, logs, profile). supabase.com/privacy
• Apple: Sign in with Apple (if you choose it), App Store / TestFlight delivery, push notification relay. apple.com/legal/privacy
• RevenueCat: in-app purchase state (subscription active, trial expiry). We never see your card number; Apple handles the charge. revenuecat.com/privacy
• AI coaching provider: powers the coaching that follows a miss and the AI habit suggestions. We send the text of your prompt and the relevant habit context; the provider does not train on this data. We can share the current provider and its policy on request.
• Sentry: opt-out crash + error reporting. sentry.io/privacy
• Vercel: hosting for this website (the iOS app talks directly to Supabase, not to Vercel). vercel.com/legal/privacy-policy

Legal basis (GDPR)

For users in the EU/UK: we process data under Contract (we can't give you a habit tracker without saving your habits) and Legitimate Interest (fixing crashes, preventing fraud). Marketing communications, none today but if ever, would require your explicit Consent.

How long we keep it

As long as your account exists. If you delete your account, your habit data, logs, notes, and mood entries are removed from the database right away, not after a waiting period. A small number of records are kept with the link to you removed instead of deleted outright: feedback text stays on file without your account id attached, and email delivery logs keep the record but not your address, so the system never re-sends to an address that bounced or unsubscribed. Crash reports are auto-purged by Sentry after 90 days. Subscription receipts are kept as long as tax law requires (typically 7 years), but anonymized to a hashed user id.

Your rights

Regardless of where you live, you can:

• Access a copy of your data: email us and we'll export it within 30 days.
• Correct anything inaccurate: most of it is editable in the app; for the rest, email us.
• Delete your account from inside the app (Profile → Account → Delete account). We'll confirm the delete took effect.
• Opt out of crash reporting by rejecting the Sentry prompt (or asking us to disable it server-side for your account).
• Revoke Apple Sign-In from iOS Settings → Apple ID → Sign in with Apple → Nimea → Stop Using. We handle the revocation event and sign you out automatically.

Children

Nimea is not directed at children under 13 (or 16 in the EU/UK/Canada depending on jurisdiction). If you believe a child has created an account, email us and we'll delete it immediately.

International transfers

Our database runs in a US region on Supabase. If you're outside the US, your data is transferred under Standard Contractual Clauses. You can ask us which SCC applies to your jurisdiction.

Changes

We'll update the "Last updated" date at the top and, if the change is material, send a note in the app and to the email you signed up with. No silent updates.

Contact us

Questions, requests, complaints, or anything that doesn't fit above: [email protected]. We read every message.

Privacy Contact

Under British Columbia's Personal Information Protection Act (PIPA), the person responsible for privacy compliance is Adam Kurtoglu, Privacy Officer, Wolf Codes Inc. Privacy contact email: [email protected].

As described above under International transfers, our database runs in a US region on Supabase, and data transferred outside the US is protected under Standard Contractual Clauses.