Privacy Policy

We collect only what is necessary to run the app:

• Email address — when you sign in via magic link or Google OAuth. Used only for authentication and gift notifications.
• Gratitude entries — the text you write and any name you tag. Stored so your tree can grow over time.
• Anonymous session ID — a UUID stored in your browser's local storage before you sign in. Lets your first entries persist through sign-up without linking them to a real identity until you choose to.
• Usage data — basic interaction events (e.g. "first leaf planted") to understand how the app is used. No third-party ad tracking. You can disable collection without an account in Privacy choices, or in Settings.
• Session replays — these recordings never include your words. All text and inputs, including your entries, are blanked out before a replay is sent; we capture only how a session moves (clicks, scrolling), to see where the app confuses people. The same Privacy choices control turns off both usage analytics and masked replay.

• To grow and display your personal tree.
• To send you a magic link when you sign in.
• To deliver appreciation that someone explicitly chooses to send, in the app or by email according to preferences and availability. A gift link shows only the included appreciation and the sender’s tree; anyone with that link can open it.
• To understand usage patterns and improve the app. Usage records include pseudonymous identifiers; they are not anonymous.

We do not sell your data. We do not use your data for advertising.

Your words are stored in our Supabase database, including before you sign in. This browser stores guest access information and local recovery drafts. Signing in provides continuity across devices after the app confirms that linking is complete.

Email delivery is handled by Resend. Email addresses and delivery records are processed as part of sending those messages.

Usage analytics and session replays are processed by PostHog (US cloud), with entry text and input contents excluded from usage events and masked in replays. Usage records can include pseudonymous device, account and event identifiers.

• Access — your gratitude entries are always visible in your tree.
• Deletion — you can request account deletion in Settings. The app confirms when deletion finishes; it cannot be undone.
• Export — to request a copy of your data, email us at the address below.

If you are in the EU or UK, you have rights under GDPR / UK GDPR including the right to access, rectify, erase, and port your data. Contact us to exercise these rights.

We use cookies and browser storage to keep sign-in and guest access information, preferences and recovery drafts. When usage collection is allowed, the analytics service also uses browser storage. Your collection choice is saved on this browser when storage is available; if it is unavailable, the control explains that the choice applies only to the open page.

The app is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

If we make material changes, we will update the "Last updated" date above. Continued use of the app after changes means you accept the updated policy.

Questions or requests: shashank.jain97@gmail.com