Winter Arc Logo Winter Arc

Privacy Policy

 

Privacy Policy for Winter Arc Tracker

Last Updated: October 2026

Effective Date: October 2026

Welcome to Winter Arc Tracker ("we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you may share with us. This Privacy Policy outlines how your data is collected, used, stored, and protected when you use the Winter Arc Tracker mobile application (the "App") and our related services.

By installing, accessing, or using Winter Arc Tracker, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

1. Overview & Offline-First Principle

Winter Arc Tracker is designed with an offline-first and privacy-focused architecture.

  • Your core journey is private: All your daily habits, streaks, sleep logs, focus sessions, checklist notes, and progress photos are stored locally on your device.

  • Zero external database storage for personal habits: We do not host your personal tracking logs, check-in photos, or habit history on private external application servers.

  • Optional Login: You may use the App entirely in Guest Mode without creating an account or providing an email address.

2. Information We Collect

A. Information You Provide to Us

  1. Authentication Data (Optional):

    • If you choose to log in using Google Sign-In or Email/Password, we authenticate your account using Firebase Authentication (provided by Google LLC).

    • Collected information includes your email address, display name, and profile picture URL associated with your Google account.

    • If you use Guest Mode, no personal contact credentials or identifying details are collected.

  2. User Profile Information:

    • Custom profile name and optional custom avatar set within the application. These details remain saved locally on your device storage.

  3. Daily Proof Photos & Habit Records:

    • Daily check-in photos captured for your visual accountability cards, streak summaries, sleep records, and customized habits are saved directly into your device's local application sandbox or gallery. They are not uploaded to our private servers.

B. Information Collected Automatically

  1. Device & Diagnostics Data:

    • When interacting with Firebase services, basic technical information may be collected automatically, including your device model, operating system version, anonymous unique device identifiers, and system crash logs to improve app reliability.

  2. Push Notification Tokens:

    • If you enable push notifications, Firebase Cloud Messaging (FCM) generates an anonymous registration token to deliver scheduled motivational prompts and local reminder triggers to your device.

3. Device Permissions We Request

To provide core features such as daily photo check-ins, social share card generation, and task reminders, the App requests the following device permissions:

  • Camera (CAMERA):

    • Purpose: Required strictly to allow you to take your daily check-in proof photos inside the App.

    • Usage: Photos captured with the camera are processed on your device to create custom social cards. They are not transmitted to us.

  • Photos / Media / Storage (READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE):

    • Purpose: Required to allow you to select existing photos for your profile or check-ins, save generated social share cards to your gallery, and export printable 90-day wall chart PDFs and dossier reports.

  • Notifications (POST_NOTIFICATIONS):

    • Purpose: Required on modern Android versions (Android 13+) to deliver timely local reminders for your 10 daily non-negotiable habits and morning/evening motivation alerts.

You can modify or revoke these permissions at any time through your device settings; however, disabling them may limit certain features (such as daily photo card generation).

4. How We Use Your Information

We use the minimal information collected solely for the following purposes:

  1. App Functionality: To manage your optional account login, display dynamic quotes, calculate completed versus remaining days of the Winter Arc, and track your streaks.

  2. On-Device Media Processing: To render custom glassmorphic social share cards (with zoom, crop, and filter overlays) and generate downloadable PDF reports.

  3. Notifications & Reminders: To trigger local reminders at the times you configure for your non-negotiable tasks.

  4. App Stability & Performance: To monitor application performance, resolve crashes, and ensure system compatibility via Google Firebase Spark services.

5. Third-Party Service Providers

We utilize trusted third-party SDKs strictly for authentication and messaging infrastructure under Google's enterprise terms:

  • Google Play Services: Used to support core Android platform capabilities.

    Google Play Services Privacy Policy

  • Firebase Authentication: Used to securely handle Google Sign-In and Email registration without exposing passwords.

    Firebase Privacy Information

  • Firebase Cloud Messaging (FCM): Used to deliver reminder tokens and notification signals.

These third parties have access to specific device data only to perform these operational tasks on our behalf and are obligated not to disclose or use it for any other purpose.

6. Social Sharing & Image Export

When you generate a Daily Proof Social Card or export a PDF dossier, the compilation and rendering happen entirely on-device using your phone's graphics canvas.

When you tap "Share to Instagram," "WhatsApp," or any external app:

  • You initiate the direct transfer through the Android native share sheet.

  • The Winter Arc Tracker App does not retain a copy on external cloud servers, nor do we track what or where you post.

7. Data Retention & Account Deletion

  • Local Data: You have full control over your local data. Clearing application data/cache or uninstalling the App permanently deletes all local habits, sleep logs, timer history, and proof photos stored on that device.

  • Firebase Authentication Accounts: If you created an account via Google or Email and wish to delete your account record completely:

    • You can delete your account directly inside the App settings via the "Delete Account" option, or

    • You can submit an account deletion request by emailing our support group at winter-arc@googlegroups.com with the subject line "Delete My Account". Upon receipt, your authentication credentials will be permanently removed from Firebase Auth within 30 days.

8. Children’s Privacy

Winter Arc Tracker is not directed to children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personally identifiable information from children. If we discover that a child has provided us with personal data, we will immediately delete such information from our records. If you are a parent or guardian and are aware that your child has provided personal information, please contact us.

9. Security

We take the security of your data seriously. Because your habit tracking data and photos remain stored locally within your device's secured app sandbox, they benefit directly from your device’s built-in operating system security (such as biometric locks, encryption, and sandboxing). For network-based authentication, all data is transferred using secure TLS/SSL encryption protocols via Google Firebase.

10. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect new features, legal requirements, or architectural changes. Any updates will be posted directly to this page with an updated "Last Updated" date. We encourage you to review this policy periodically for any changes.

11. Contact Us & Support Community

If you have any questions, suggestions, feedback, or account deletion inquiries regarding this Privacy Policy, please reach out to us: