privacy policy

Overview

Kintsugi ("we", "our", "the app") is a habit tracker built with care. We respect your privacy deeply and want to be transparent about what data is collected, what is not, and how everything is handled.

Authentication & Your Google Account

Kintsugi uses Google Sign-In (via Firebase Authentication) to let you create an account and sign in. Here is exactly what happens during that process:

What we receive from Google:

• Your display name (so we can greet you)
• Your email address (used as your unique account identifier)
• Your profile photo URL (displayed in the app)

What we DO NOT receive, store, or have access to:

• Your Google account password
• Your Gmail messages, drafts, or email contents
• Your Google contacts or address book
• Your Google Drive files or documents
• Your Google Calendar events
• Your Google search history or browsing data
• Your Google Pay or financial information
• Your location data from Google services
• Any other data from your Google account beyond the basic profile listed above

Google Sign-In is used solely to create a secure, passwordless login experience. We request only the minimum permissions needed to identify your account. We cannot and do not access any other part of your Google account.

Data Storage & Firebase

Your app data is stored securely using Google Firebase (Firestore database and Firebase Authentication). Here is how that works:

What is stored in Firebase:

• Your habit entries and check-ins (what you create in the app)
• Your journal/reflection entries (what you write)
• Your shrine progress and stage
• Your app preferences and settings
• Basic account info (display name, email, profile photo URL from Google)

How your data is protected:

• All data is stored in Google Firebase, which uses industry-standard encryption at rest and in transit
• Firebase Security Rules restrict access so that only you can read and write your own data
• We (the developers) do not have a dashboard or admin panel that displays your personal entries, reflections, or habit details
• Your private content (journal entries, habits, reflections) is not visible to us in any readable format during normal operations
• Firebase Authentication credentials (like tokens and session data) are managed entirely by Google's infrastructure, not by us

What We Do NOT Do

To be clear and specific:

• We do not sell your data to anyone, ever
• We do not share your data with third-party advertisers
• We do not use your data for targeted advertising
• We do not track you across other websites or apps
• We do not use analytics tools that profile your behavior
• We do not store your Google account password or security credentials
• We do not access your Gmail, Google Drive, Google Contacts, or any other Google service
• We do not read your journal entries or personal reflections

Cookies & Local Storage

Kintsugi is a Progressive Web App (PWA). It may use browser local storage and service worker caching to:

• Keep you signed in between sessions
• Cache app assets for offline use and faster loading
• Store your app preferences locally on your device

We do not use third-party tracking cookies. Any local data stored on your device is for app functionality only.

Data Deletion

You have the right to have your data deleted. If you want your account and all associated data removed from our systems, please contact us at sydney@saa-media.com and we will delete your account and all stored data from Firebase.

Children's Privacy

Kintsugi is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete that information.

Changes to This Policy

If we update this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.