Privacy Policy

We collect only what is necessary to run the app:

• Email address — when you sign in via magic link or Google OAuth. Used only for authentication and gift notifications.
• Gratitude entries — the text you write and any name you tag. Stored so your tree can grow over time.
• Anonymous session ID — a UUID stored in your browser's local storage before you sign in. Lets your first entries persist through sign-up without linking them to a real identity until you choose to.
• Usage data — basic interaction events (e.g. "first leaf planted") to understand how the app is used. No third-party ad tracking. You can disable usage analytics at any time from Settings.

• To grow and display your personal tree.
• To send you a magic link when you sign in.
• To deliver gift notifications when someone tags you in their gratitude — the email tells you who, and links to a gift page showing their tree.
• To improve the app based on aggregate, anonymised usage patterns.

We do not sell your data. We do not use your data for advertising.

Data is stored in Supabase, a managed Postgres database hosted in the US (AWS us-east-1). Supabase is SOC 2 Type 2 certified. Data in transit is encrypted via TLS. Data at rest is encrypted by the hosting provider.

Email delivery is handled by Resend. Resend stores your email address only long enough to deliver the message.

• Access — your gratitude entries are always visible in your tree.
• Deletion — you can permanently delete your account and all associated data from the Settings panel inside the app. Deletion is immediate and irreversible.
• Export — to request a copy of your data, email us at the address below.

If you are in the EU or UK, you have rights under GDPR / UK GDPR including the right to access, rectify, erase, and port your data. Contact us to exercise these rights.

We do not use tracking cookies. We use browser local storage to hold your anonymous session ID and app preferences (e.g. sound settings). No data is shared with third parties via local storage.

The app is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

If we make material changes, we will update the "Last updated" date above. Continued use of the app after changes means you accept the updated policy.

Questions or requests: shashank.jain97@gmail.com