Privacy Policy
Introduction
Pure Path ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
We believe that privacy is a fundamental right. Pure Path is designed with privacy at its core — your personal journey is yours alone.
Information We Collect
Information You Provide
Account Information (Optional)
- Email address (if you choose to create an account)
- Google account identifier (if you sign in with Google)
Recovery Journey Data
- Journey start date, current streak count, milestone achievements, relapse events (dates only)
Habit Data
- Habit names (custom or built-in), completion dates, habit streaks
Sensitive Information (Encrypted & Never Synced)
personal reasons for recovery · relapse notes · private reflections.
We cannot access this information.
Automatically Collected Information
- Device info: device type, OS version, app version
- Analytics (minimal): crash reports (Firebase Crashlytics), basic usage events
We do NOT collect your location, contacts, browsing history, or advertising identifiers.
How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide app functionality | Journey data, habit data | Contract performance |
| Sync across devices (optional) | Non-sensitive recovery data | Your consent |
| Improve app stability | Crash reports | Legitimate interest |
| Basic analytics | Anonymous usage events | Legitimate interest |
| Send notifications | Notification settings | Your consent |
Data Storage & Security
Local Storage (Primary)
- All data is stored primarily on your device using encrypted local storage
- The app functions fully offline — no internet required
Cloud Storage (Optional)
- If you create an account, non-sensitive data may be synced to Firebase
- Cloud data is encrypted in transit (TLS 1.3) and at rest
- Sensitive data (personal reasons, notes) is NEVER synced to the cloud
Encryption
- Sensitive data is encrypted using AES-256 encryption
- Encryption keys are stored securely in the device Keychain / Keystore
- We cannot decrypt your sensitive data
Data Sharing
| Recipient | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Authentication, storage, analytics | Account info, non-sensitive data |
| RevenueCat | Subscription management | User ID, purchase receipts |
| Firebase Crashlytics | App stability | Anonymous crash data |
We do NOT share data with advertisers, data brokers, marketing companies, or any other third parties.
Your Rights
- Access: View all data stored in the app through Settings
- Delete: Delete your account and all cloud data via Settings → Account → Delete Account
- Opt-out: Disable cloud sync or analytics at any time
- Contact: Request data deletion at privacy@purepath.app
Children's Privacy
Pure Path is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe your child has provided information, contact us at privacy@purepath.app.
Data Retention
| Data Type | Retention Period |
|---|---|
| Local data | Until you delete it |
| Cloud data (with account) | Until you delete your account |
| Crash reports | 90 days |
| Analytics | 14 months (anonymized) |
European Privacy Rights (GDPR)
If you are in the European Economic Area, you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact gdpr@purepath.app.
California Privacy Rights (CCPA)
California residents may request to know, delete, or opt-out of the sale of personal information. We do not sell personal information. Contact privacy@purepath.app.
Changes to This Policy
We will notify you of significant changes via in-app notification and by updating the "Last Updated" date above.
Contact Us
- Privacy inquiries: privacy@purepath.app
- GDPR inquiries: gdpr@purepath.app
- Support: purepath.app/support
Summary
- ✅ Data stored primarily on your device
- ✅ Sensitive info encrypted, never synced
- ✅ Works fully offline
- ✅ Anonymous use supported
- ✅ Delete your data at any time
- ❌ We never sell your data
- ❌ No advertising trackers
- ❌ No location tracking
- ❌ We cannot read your personal notes
- ❌ No mandatory account required
Your journey is private. Your data is yours. — Pure Path Team