Privacy policy
In short
- We store your account and your practice sessions so they sync and are never lost.
- We do not sell your data, show ads, or use advertising trackers.
- Which apps you use during deep work never leaves your phone.
- Anonymous crash reports are on and usage statistics are off until you choose otherwise. Both switches are in Settings.
- You can export your sessions or delete everything at any time.
This policy explains how the Ayuta app and the website at ayuta.app (together “Ayuta”, “we”, “us”) handle your information. Ayuta is built and run by an independent developer in Illinois, United States. Questions go to privacy@ayuta.app.
What we collect
Account information
Your email address and display name. If you sign in with Google, Google gives us your email address and name. If you sign in with email and a password, the password is stored by our sign-in provider as a salted hash; we never see it.
Launch waitlist
If you ask on ayuta.app to be told when the app launches, we store the email address you enter and use it only to tell you about the launch. To be taken off the list, write to privacy@ayuta.app.
What you record in the app
- The skills you create: name, colour, icon and order.
- Your practice sessions: start and end time, planned and actual length, your time-zone offset, the skill, and an optional rating, tag and note.
- Badges you earn, your daily minimum and reminder settings, and which skill you chose as your life’s task.
Crash reports and usage statistics
Crash reports (on unless you turn them off): when the app hits an error, it sends what went wrong: the error and where in the code it happened, the app version, your phone model and Android version, and a short trail of the app’s recent technical steps. Turn them off in Settings → Privacy → Send crash reports.
Usage statistics (off unless you turn them on): counts of things like sessions started and finished, their length and tag, ratings, and ranks and badges reached, tied to a random identifier that is not linked to your account. Turn them on or off in Settings → Privacy → Share usage statistics. Turning them off also discards that identifier.
Neither ever includes your name, email, account identifier, notes, the names of your skills, or which apps you use. We ask both providers not to store your IP address.
What stays on your phone
If you turn on deep work, Ayuta notes which apps you open during a session, to count distractions. App names and counts are stored only on your device and are never uploaded. Theme and similar preferences also stay on the device.
What we do not collect
No location, contacts, photos, microphone, or advertising identifiers. Ayuta contains no advertising SDKs.
Why we use it
- To run your account and sync your sessions to our server, so your hours survive a lost or replaced phone.
- To work out your hours, ranks, badges and streaks.
- To show the reminders and timer notifications you ask for. These are scheduled on your phone.
- To answer you when you write to us.
We process your account and practice data because it is needed to provide the service you signed up for. We send crash reports because we have a legitimate interest in finding and fixing faults, and you can object at any time by turning them off. We collect usage statistics only with your consent, which you can withdraw at any time in Settings. We do not use any of it for advertising, and we do not sell or rent it.
Who processes it for us
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and account deletion | United States (Ohio) |
| “Continue with Google”, only if you use it | Google’s servers | |
| Cloudflare | Hosting this website and forwarding email | Global network |
| Sentry | Crash reports, unless you turn them off | United States |
| PostHog | Usage statistics, only if you turn them on | United States |
Each provider processes data only on our instructions, under a data processing agreement. If you are outside the United States, your data is transferred there; for transfers from the European Economic Area, the United Kingdom and Switzerland we rely on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, as each provider offers.
Security
Everything sent between the app and our server is encrypted in transit (HTTPS). The database enforces row-level security, so an account can read and write only its own data. On your phone, data is kept in the app’s private storage.
How long we keep it
Crash reports are kept for up to 90 days and usage statistics for up to 12 months, then deleted by the provider. We keep your account data while you have an account. When you delete your account, it is removed from our live database straight away; copies in our hosting provider’s encrypted backups expire within 30 days. Signing out removes your data from the phone.
Your choices and rights
- Export: Settings → Export sessions gives you every session as a CSV file.
- Correct: edit your skills in the app, and a session’s rating, note or tag within 24 hours of it ending. For anything else, write to us.
- Delete: Settings → Delete account, or see how to delete your account without the app.
- Anything else: write to privacy@ayuta.app. We reply within 30 days.
Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.
Children
Ayuta is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes, we will update the date at the top. For significant changes, we will tell you in the app before they take effect.