Privacy Policy

1. Overview

This Privacy Policy explains how GTFO ("we," "us") collects, uses, and protects your information when you use the GTFO mobile app and the usegtfo.com website (together, the "Service"). The short version: we collect only what we need to run the app, we don't sell your data, and you can delete your account and data at any time.

2. Information We Collect

• Account information. When you sign in with Apple or an email magic link, we receive your email address and, if you share it, your name. Sign in with Apple lets you hide your real email address.
• Habit and activity data. The habits you create, your schedules, completions, chains, and related notes.
• Preferences. Settings such as notification preferences, reminder times, and timezone.
• Purchase status. Your subscription status (e.g., trial, active, expired). Payment is processed by Apple; we never see your payment card details.
• Website email signup. If you join the waitlist on usegtfo.com, your email address is collected and stored by our email provider, Resend.
• Website usage. Our website may use Google Analytics to measure visits in aggregate (pages viewed, approximate region, device type).

We do not collect your precise location, contacts, photos, or health data.

3. How We Use Your Information

• To provide the Service: storing your habits, syncing across sessions, and calculating chains.
• To send local reminders and notifications you have enabled.
• To manage your subscription and trial status.
• To respond to support requests.
• To send product updates to waitlist subscribers (you can unsubscribe anytime).

4. Third-Party Services

• Supabase: hosts our database and authentication. Your account and habit data are stored there.
• Apple: handles Sign in with Apple and all subscription payments.
• RevenueCat: manages subscription entitlements (receives your app user ID and purchase status, not your habit data).
• Resend: manages the website email waitlist and sends our emails.
• Cloudflare: hosts the website and processes waitlist signups.
• Google Analytics: aggregate website measurement, where enabled.

These providers process data on our behalf under their own security and privacy commitments. We do not sell or rent your personal information to anyone.

5. Data Retention and Deletion

We keep your data while your account is active. You can permanently delete your account and all associated data at any time from the Profile screen in the app (Profile > Delete Account). Deletion is immediate and cannot be undone. You can also email us at [email protected] to request deletion, including removal from the waitlist.

6. Security

Your data is transmitted over encrypted connections (HTTPS) and protected by row-level security in our database, which restricts access to your own records. No system is perfectly secure, but we design for least access.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

8. Your Rights

Depending on where you live (for example, the EU/EEA under GDPR or California under CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. You can exercise most of these directly in the app, or by emailing [email protected]. We do not sell personal information as defined by the CCPA.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and provide notice through the Service.

10. Contact

Privacy questions: [email protected]

Terms of Service