1. What we collect

When you create an account and use Progress Vault, we collect:

Account information: your email address, display name (if provided), and profile photo URL (if you sign in with Google).
Activity data: activity logs you create (type, duration, notes, effort tags, XP earned), character progression, quest and journey progress, world state, and app preferences.
Subscription data: your current plan tier, billing status, and Stripe customer ID. Payment card details are handled entirely by Stripe — we never see or store them.
Technical data: authentication tokens and standard Firebase usage metadata (timestamps, session identifiers).
Usage and analytics data: actions you take within the app — such as logging an activity, completing a quest, leveling up, or changing settings — along with page visits and session information. This is collected through PostHog, a product analytics tool we use to understand how the app is being used and improve it over time.

2. How we use your data

We use your data only to provide and improve Progress Vault:

To calculate XP, level up attributes, generate quests, and track journeys
To personalize narrative content based on your tone and world theme preferences
To process and manage your subscription through Stripe
To respond to support requests you submit
To generate monthly and yearly progress statistics
To understand how the app is being used and improve it over time (via PostHog analytics)

3. We never sell or share your data

We do not sell, rent, trade, or share your personal data with any third parties for marketing, advertising, or any other commercial purpose. Full stop.

We use Firebase (Google) for authentication, database, storage, and hosting. We use Stripe for payment processing. We use PostHog for product analytics. These services are infrastructure and analytics providers bound by their own privacy policies — data is shared with them only to the extent necessary to operate and improve the app.

4. Data encryption

Your Progress Vault data (activity logs, character progression, preferences) is stored in Google Firebase Firestore, which provides industry-standard security at the infrastructure level. Your data is transmitted over HTTPS and protected by Firebase security rules that restrict access to your own user account.

We do not apply additional application-level encryption to your activity data. Progress Vault is designed to log general lifestyle activities (exercise, reading, cleaning, rest) — not sensitive clinical, medical, or personally identifiable health information. If you choose to log sensitive personal notes, do so with the understanding that they are stored as plain text in your Firestore documents.

5. Data retention and deletion

Your data is retained as long as your account is active. You may delete your account at any time from Settings → Danger Zone. Account deletion permanently and irreversibly removes all your data from our systems, including all activity logs, character data, and preferences.

6. Children's privacy

Progress Vault is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us and we will promptly remove it.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of Progress Vault after a change takes effect constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Use the Help & Support form in Settings, or email us at therapycornerdev@gmail.com.