Privacy, plainly.

Effective October 13, 2026

1. Who this policy covers

This policy covers the Quiet Growth iPhone app, its connected service, and quietgrowth.app. The developer operating Quiet Growth can be reached at [email protected].

2. What stays on your iPhone

Journal entries, behavior logs, routines, plans, and personal settings are stored locally. Sensitive app records use iOS complete file protection and are excluded from backups. Face ID app locking is optional. Session credentials are stored in the device’s Keychain.

There is no journal cloud backup or automatic journal synchronization. Losing your phone, deleting the app, or erasing app data can permanently lose local records.

3. Your choices about Pip

Pip’s AI requires a signed-in account, a connected service, and your explicit cloud-processing consent. Local recovery context, context for a current interaction, permission for an individual entry, and longer-term memory are separate choices. New onboarding recommends recovery context, explains the privacy choices, and separately asks about cloud AI processing.

You can exclude an individual entry, review what Pip can read, and choose whether Pip may learn from your journal. Entries written before consent are not analyzed unless you explicitly include them. Existing preferences are preserved. Changing privacy permissions cancels pending responses.

4. Information processed with AI enabled

Permitted journal text can be sent through our server to OpenAI for one-time analysis. Relevant check-ins, structured recovery records, allowed context, and derived information may also be processed to generate suggestions, questions, or insights. Raw journal text is not saved to our server’s database or written to our application logs.

We store derived structured information with your account, which can include brief summaries, labels, times, triggers, feelings, situations, helpfulness, and check-in answers. Derived data is sensitive even when it does not contain the original writing. Turning AI off deletes server-derived recovery data.

We request AI responses without response storage. OpenAI’s own processing and retention policies still apply, including possible retention for abuse monitoring. This is not a promise of zero retention by every provider. Deleting local or account data cannot undo processing that has already occurred. See OpenAI’s API data controls.

5. Accounts & purchases

No Quiet Growth account is needed to subscribe or use local app features. If you enable AI, Supabase supports authentication and stores account data, including a user identifier and email when provided by your sign-in method. For AI entitlement checks, our service can verify and store App Store subscription transaction information and status. Apple handles billing; we do not receive your card number.

6. Dictation & permissions

Journal dictation uses Apple’s on-device speech recognition, without a server fallback. Audio is never saved or sent by Quiet Growth. Only the recognized text becomes part of your entry, and that text follows the entry’s privacy permissions. Dictation needs microphone and speech recognition permission; reminders need notification permission. You can manage these in iPhone Settings. We do not collect precise location, contacts, or browsing history.

7. Usage analytics & operational records

Optional first-party product analytics record allowlisted feature events with limited enum, number, and boolean properties, such as opening urge help or finishing a check-in. They never contain journal text, prompts, or the content of your answers. The choice is disclosed in onboarding and Settings. Turning off Share usage analytics stops collection and deletes previously sent product analytics. You can also request deletion by email.

Content-free operational logs include route templates, status, latency, error codes, a request identifier, and a salted user hash. AI usage rows include task, model, token counts, estimated cost, and latency to operate the service and enforce spending limits; they do not contain prompts or outputs. These operational records are separate from optional product analytics.

8. Services that process data

• OpenAI: permitted AI inputs and outputs for Pip’s features.
• Supabase: authentication and account-associated structured data.
• DigitalOcean: hosting our application server.
• Apple: App Store purchases and optional Sign in with Apple; on-device iPhone features.
• DigitalOcean website hosting infrastructure: delivery of this website, which necessarily processes technical connection information such as IP address and requested URL.

These services may process information in countries other than your own under their applicable policies. We share information as needed to provide the features you choose, operate and secure the service, or meet legal obligations. We do not sell personal data, serve ads, or share data for cross-app advertising tracking.

9. Retention, deletion & your requests

Local records remain until you delete them, erase app data, or remove the app. Account and derived data remain while you use the corresponding features, unless you delete them sooner. Turning AI off removes derived recovery data from our service. Clearing memory removes learned context while retaining local entries and logs.

Settings → Account → Delete account deletes server account data and analytics, removes the Supabase user, revokes Sign in with Apple where applicable, and erases app records on this iPhone. AI usage/cost rows are retained with the user identifier removed. Operational records and service-provider backups may follow their own retention cycles; we do not claim instantaneous erasure from every infrastructure backup.

To request access, correction, or deletion, or ask about rights available where you live, email [email protected]. We may verify account ownership before acting. See the step-by-step deletion guide. Account deletion does not cancel your Apple subscription.

10. This website & support email

This website has no advertising trackers, analytics scripts, account sign-in, or forms that collect recovery records. The interactive grove preview stays in the page and is not saved or sent. Hosting providers may process technical request information for delivery and security, and may set necessary security cookies. We do not use advertising or analytics cookies. If you email support, your email address and message are processed to answer your request through the developer’s email provider. Please do not send journal text, sensitive records, or passwords.

11. Adults only & policy changes

Quiet Growth is intended for adults 18 and older. If you believe a child has provided account data, contact us. We will update this page and its effective date when practices change; material changes that require a new choice will be presented in the app.