Privacy Policy

👋 Introduction

Welcome to Fact of the Day ("the App", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.

📦 Information We Collect

Information you provide directly:

• Email address — required to create an account and log in (via email/password or Google Sign-In)
• Display name and avatar emoji — optional profile personalisation you set within the app
• Password — stored as a secure, one-way cryptographic hash; never stored in plain text. Not collected when using Google Sign-In.
• Feedback messages — if you submit feedback via the in-app form

Information collected automatically:

• Usage data — which facts you view, like, or save (bookmark)
• Streak and achievement data — your daily streak count, milestones reached, and achievements unlocked
• App preferences — theme (light/dark), notification settings, favourite categories
• Session data — login sessions stored locally on your device via AsyncStorage
• Subscription status — whether you hold an active Pro subscription (stored server-side)

We do NOT collect:

• Precise GPS location or location data of any kind
• Camera, microphone, or photos
• Contacts or address book
• Biometric data
• Financial payment card data (handled entirely by Google Play Billing)
• Advertising identifiers — this app does not serve or display any advertisements

⚙️ How We Use Your Information

⭐ Subscriptions and Payments

The App offers an optional Pro subscription (£4.99/month) that unlocks additional features including 4 bonus daily facts, streak freeze protection, and a Pro badge.

• Subscriptions are processed exclusively through Google Play Billing (Android)
• We never receive, store, or process your payment card details
• We store only your subscription status (active/inactive) linked to your user account
• You may cancel your subscription at any time through your device's app store subscription settings
• Refunds are handled by Google Play per their refund policy

🔗 Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We share data only in these limited circumstances:

Service providers:

• Supabase (OnSpace Cloud) — our backend infrastructure provider. Hosts the database containing your account data, usage statistics, and subscription status. Data is stored on servers in the EU/US. Supabase is SOC 2 Type II certified.
• Google Play Billing — processes subscription payments. Subject to Google's own Privacy Policy. We store only your subscription status, not payment details.
• Google Sign-In (OAuth 2.0) — if you choose to sign in with Google, Google authenticates you and shares your email address with us. We do not receive your Google password. Google's practices are governed by their Privacy Policy.
• Expo / React Native — handles push notification delivery. Device tokens are only used to send your requested daily reminder and are not shared with third parties.

Legal requirements:

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of our users or the public.

🗓️ Data Retention

• Your account data is retained for as long as your account is active
• Usage data (viewed facts, likes, favourites) is retained indefinitely to maintain your statistics
• If you delete your account, all associated data is permanently and irreversibly deleted from our servers within 30 days
• Anonymised, aggregated analytics data (not linked to you personally) may be retained indefinitely

🔒 Data Security

We implement industry-standard security measures to protect your personal information:

• Passwords are hashed using bcrypt — never stored in plain text
• All data transmission uses HTTPS/TLS encryption
• Database access is protected by Row Level Security (RLS) policies — each user can only access their own data
• Authentication tokens are stored securely on your device using AsyncStorage
• We conduct periodic security reviews of our infrastructure

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

⚖️ Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate data (via Profile > Edit Profile in the app)
• Deletion — permanently delete your account and all associated data (via Profile > Delete Account in the app)
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — disable notifications at any time in Profile > Settings

EU/EEA residents have additional rights under the General Data Protection Regulation (GDPR). UK residents have rights under the UK GDPR. To exercise any of these rights, contact us at mission.otd@gmail.com.

👶 Children's Privacy

The App is not intended for children under 13 years of age (or under 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If we become aware that a child has provided us with personal information, we will take steps to delete such information immediately. If you believe a child has submitted their information to us, please contact us at mission.otd@gmail.com.

📱 Device Permissions

📊 Analytics

This app does not display advertisements of any kind and does not integrate any advertising SDKs. No advertising identifier (GAID or IDFA) is collected or used.

First-party analytics

Usage statistics (which facts are most viewed or liked) are collected first-party through our own backend solely to improve the App. This data is not shared with advertising networks or data brokers. We do not use Google Analytics or Firebase Analytics.

🗑️ Account Deletion

You can permanently delete your account directly within the App:

1. Open the App and go to Profile tab
2. Scroll to Account section
3. Tap Delete Account
4. Type DELETE to confirm

This permanently deletes your account and all associated data including streaks, achievements, liked facts, and favourites. This action cannot be undone.

Alternatively, you may request account deletion by emailing mission.otd@gmail.com with the subject line "Account Deletion Request". We will process your request within 30 days.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where material changes are made, we will notify you via the App or by email. Your continued use of the App after any changes constitutes acceptance of the updated policy.

✉️ Contact Us

Developer: Fact of the Day App
Email: mission.otd@gmail.com
App name: Fact of the Day
Package ID: com.factoftheday.app