Privacy Policy

Radbit has two layers: a local-first productivity app and an optional social layer. What we collect depends entirely on which you use.

Without an account (the default)

Your goals, tasks, habits, sessions, notes, and titles never leave your device unless you export them or sync via your own iCloud. Everything below about accounts and social features applies only if you choose to sign in.

We collect a small amount of anonymous usage data to improve the app:

• Anonymous device identifier — Apple's per-app identifierForVendor. Counts unique devices without knowing who you are; resets if you uninstall all our apps.
• App usage events — actions like "started a Pomodoro" or "created a habit." We record that an action happened, never its title or content.
• Device + app metadata — iOS version, app version, device model, locale, timezone.
• Coarse country — derived server-side from your IP when an event arrives; only the country is stored. No GPS, no location permission.

Opt out anytime: Settings → Privacy → Anonymous analytics off.

With an account (the social layer)

If you sign in with Apple or Google to use the feed, we additionally store on our servers (pouyaeti.com, hosted on AWS in the United States):

• Account data — your chosen username (handle), display name, bio, the email address provided by Apple or Google, and an identifier from the sign-in provider. We never see or store a password.
• Profile photo — if you upload one, it's stored on our server storage and is publicly accessible via its link (that's how other users see it).
• Content you choose to share — posts, comments, reactions, published goals/habits ("commitments"), supporter relationships, live focus-session presence (a short label and timing — never the content of your work), and any stat snapshots you attach to posts (e.g. "2h focus"). Sharing is always an explicit action — nothing is posted automatically.
• Social graph & safety data — who you follow, follow requests, blocks, posts you hide, and reports you file.
• Engagement data — reactions, comment likes, and post view counts (impressions). Impressions are counted as "this account saw this post once" and shown as an aggregate number.
• Push token — if you allow notifications, Apple's device token so we can deliver them. It identifies your device to Apple's push service, not your identity.

What we still never collect

• The titles or contents of your private goals, tasks, habits, sessions, or notes — private items stay on your device even when you have an account
• Your precise location, contacts, calendar, photos (other than an avatar you upload), microphone, or health data
• Anything from outside the app (no browsing history, no cross-app tracking)

Who can see what

Accounts are private by default — only approved followers see your posts. Per-post you can choose "Followers" or "Public." Public posts may appear in other users' discovery feed. Your profile's counts (posts, badges, followers) are visible to any signed-in user; the content behind them respects your privacy setting.

Sharing & selling

We don't sell your data. We don't share it with third parties except the infrastructure that runs the service (AWS hosting, Apple's push service) and where the product requires it (your shared content is, by design, shown to other users per your visibility choices). No third-party analytics or advertising SDKs.

Moderation

Users can report posts, comments, and accounts. Reports are reviewed by a human within 24 hours; content that violates our Terms is removed and repeat offenders lose access. Report contents are stored for this purpose.

Retention & deletion

• Delete your account anytime in-app: Settings → Account & security → Delete account. This permanently removes your account, posts, comments, reactions, follows, and profile from our servers.
• Deleting a post or comment removes it from all feeds immediately.
• Anonymous usage events are kept up to 24 months, then deleted.

iCloud sync

If enabled, your private data syncs across your own devices via your private iCloud database. We have no access to it.

Children

The social features require you to be at least 13 (or the minimum age in your country). We don't knowingly collect data from children under that age.

Your rights

You can access everything we hold about your account inside the app (it's your profile and content), correct it by editing, and erase it with account deletion. For anything else — including data questions under GDPR/CCPA — email support@pouyaeti.com.

Changes

If we change what we collect, we'll update this page and its date; material changes are announced in the app's release notes.