Privacy policy
In short
- We store your account and your practice sessions so they sync and are never lost.
- We do not sell your data, show ads, or use advertising trackers.
- Which apps you use during deep work never leaves your phone.
- You can export your sessions or delete everything at any time.
This policy explains how the Ayuta app and the website at ayuta.app (together “Ayuta”, “we”, “us”) handle your information. Ayuta is built and run by an independent developer in Illinois, United States. Questions go to privacy@ayuta.app.
What we collect
Account information
Your email address and display name. If you sign in with Google, Google gives us your email address and name. If you sign in with email and a password, the password is stored by our sign-in provider as a salted hash; we never see it.
What you record in the app
- The skills you create: name, colour, icon and order.
- Your practice sessions: start and end time, planned and actual length, your time-zone offset, the skill, and an optional rating, tag and note.
- Badges you earn, your daily minimum and reminder settings, and which skill you chose as your life’s task.
What stays on your phone
If you turn on deep work, Ayuta notes which apps you open during a session, to count distractions. App names and counts are stored only on your device and are never uploaded. Theme and similar preferences also stay on the device.
What we do not collect
No location, contacts, photos, microphone, or advertising identifiers. Ayuta contains no advertising SDKs.
Why we use it
- To run your account and sync your sessions to our server, so your hours survive a lost or replaced phone.
- To work out your hours, ranks, badges and streaks.
- To show the reminders and timer notifications you ask for. These are scheduled on your phone.
- To answer you when you write to us.
We process this information because it is needed to provide the service you signed up for. We do not use it for advertising, and we do not sell or rent it.
Who processes it for us
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and account deletion | United States (Ohio) |
| “Continue with Google”, only if you use it | Google’s servers | |
| Cloudflare | Hosting this website and forwarding email | Global network |
If we add crash reporting or product analytics, we will list the provider here before it ships. Those reports would not contain your name, email, notes or the names of your skills.
Security
Everything sent between the app and our server is encrypted in transit (HTTPS). The database enforces row-level security, so an account can read and write only its own data. On your phone, data is kept in the app’s private storage.
How long we keep it
We keep your data while you have an account. When you delete your account, it is removed from our live database straight away; copies in our hosting provider’s encrypted backups expire within 30 days. Signing out removes your data from the phone.
Your choices and rights
- Export: Settings → Export sessions gives you every session as a CSV file.
- Correct: edit your skills in the app, and a session’s rating, note or tag within 24 hours of it ending. For anything else, write to us.
- Delete: Settings → Delete account, or see how to delete your account without the app.
- Anything else: write to privacy@ayuta.app. We reply within 30 days.
Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.
Children
Ayuta is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes, we will update the date at the top. For significant changes, we will tell you in the app before they take effect.