Privacy policy

Who is responsible for your data

Rejection Quest is a personal project by Bernardo Paulino, the controller of your data. For any privacy question, write to bernardo.sobral7@gmail.com.

The app is distributed on the App Store through another entity's developer account, shown as the seller on the App Store page, which has no access to your data. That doesn't change who is responsible for it.

What we store

Account: your name, your email and your password, stored in an irreversible form (hash): not even we can read it.

Profile and preferences: language, the areas you want to train, the tone and length you prefer for challenges, answers to the initial assessment and check-ins, contexts from your routine (categories only, such as "gym" or "public transport"), weekly goal, notification time and the date you accepted this policy.

Activity: the challenges you get and your records (outcome, predicted and actual discomfort, dates), including the reflections you write.

Technical data: a session identifier, so you don't have to sign in every time. Your IP address is only used to limit abusive attempts (for example, at sign-in) and is deleted automatically within a few hours; sessions don't store your IP address or device, and the server doesn't keep request logs. To limit password reset emails, we keep for one day a counter linked to an irreversible code (hash) of your email.

We don't collect location, contacts, photos, advertising identifiers or usage data (analytics).

How we use your data

To make the app work: creating your account, picking challenges that suit you, saving and syncing your records and showing your progress. This is the service you ask for when you create an account (performance of a contract, Article 6(1)(b) GDPR).

Your assessment answers, the discomfort you record and your reflections may reveal information about your health, such as anxiety. We only process them with your explicit consent, which you give in the confirmation when you sign up (Article 9(2)(a) GDPR). You can withdraw it at any time by deleting your account (which deletes everything); reflections can also be deleted one by one in the history.

To protect the app and its accounts, with attempt limits and abuse prevention (legitimate interest, Article 6(1)(f) GDPR).

To email you a code when you ask to reset your password. We don't send newsletters or ads.

Challenges are picked automatically from your answers and records, with no legal or similarly significant effects on you.

Where your data is kept and who processes it

On your phone: a copy of your data is kept in a local database, protected by the system's encryption, so the app works offline. Each account has its own. When you sign out, the copy is deleted if everything has been sent (it comes back when you sign in again); if there are records still to send, it stays for when you sign back in. When you delete your account, it is deleted. Your iPhone's backups (for example, in iCloud) may include this database, depending on your phone's settings.

Cloudflare (API hosting and database): your data is stored in the European Union, encrypted at rest and in transit. Requests travel through Cloudflare's global network, with the GDPR safeguards for international transfers. To protect the network, Cloudflare may briefly log the IP address of requests blocked as abusive.

Resend (sending password reset emails): receives your email address and the code, and keeps sent emails for a limited period, under its own policy. It may process them outside the European Union, with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.

Apple: distributes the app on the App Store, under its own privacy policy. The app's notifications are local: they are scheduled on your phone and don't go through any server. If you turn on sharing analytics with developers in your iPhone settings, Apple may share anonymous crash reports with us.

We don't sell your data or share it with anyone else, unless the law requires it.

How long we keep it

For as long as you have an account. When you delete it, your data is removed from the database straight away, and automatic backups expire within 30 days.

Reset codes expire after 10 minutes, and the data used to limit attempts, including your IP address, is deleted automatically within a few hours (the reset email counter, within a day). The database's automatic backups, which may include this data, expire within 30 days. A session expires after 30 days without use, or when you sign out.

Your rights

In the app, at any time: export all your data as a JSON file (Profile → Policy, notice and export), edit your reflections in the history and delete your account with all its data (Profile → Delete account).

To ask for access, rectification, restriction or objection, or to exercise any other right, write to bernardo.sobral7@gmail.com. We reply within one month at most.

You can also lodge a complaint with the Portuguese data protection authority (CNPD, www.cnpd.pt) or with the authority in the country where you live.

Minimum age

The app is only for people aged 18 or over. If we learn that an account belongs to someone younger, we delete it.

Security

We use encrypted connections (HTTPS), passwords stored with an algorithm built for that purpose (scrypt), attempt limits and access to data only through your session. No system is completely secure: if there's a data breach that affects you, we'll tell you and the authorities, as the law requires.

Changes to this policy

If this policy changes in an important way, the app will let you know and ask you to accept it again before you carry on.