Privacy Policy

1. Who we are

Karmatica is provided by 2795748 Alberta Ltd. (“Karmatica”, “we”, “us”), [POSTAL ADDRESS]. We are responsible for the personal information described in this policy. You can reach us about privacy at support@karmatica.app.

2. Information you give us

Your account

• Your email address, and the name you choose to show in the app.
• Your password, if you sign up with your email address. We never store the password itself, only a one-way scrambled form of it (a “hash”, made with scrypt) that lets us check it when you sign in.
• Your birth year (not your full date of birth). We use it to confirm you’re old enough to use Karmatica and to make sure ads are only ever shown to adults (see Ads). Because we only ask for the year, we always assume the younger of the two possible ages.
• Your time zone, so your day starts and ends at the right time.

Logging in with Apple or Google

You can sign up or log in with Apple or Google instead of a password, and you can link either one to your account later. Apple or Google confirms who you are on its own sign-in screen, so we never see your Apple or Google password. We ask Apple only for your name and email address, and Google only for your basic profile (name, email address and profile photo, which we don’t keep). Apple or Google then sends us:

• Your name and email address. Apple shares your name only the first time. If you choose Apple’s “Hide My Email”, we get an address ending in privaterelay.appleid.com that forwards to your own. When you create your account this way, the name becomes the name you show in the app until you change it.
• An ID for your Apple or Google account, which is how we recognize you the next time you log in with it.
• The sign-in tokens Apple or Google issues, which prove the log-in. We don’t use them to read anything else from your Apple or Google account.

What you put into Karmatica

• Your activities, events and big goals: their titles, notes, categories, schedules, how you track them (check-off, count or timer), effort level, reminder times, and whether they’re active, paused, archived or removed.
• Your progress: when you complete, undo, skip or postpone something, the timers you run, the karma you earn, your streaks and the stars you collect.
• Your settings, such as reminder hours, your evening review time, theme, sounds and celebrations.

Evening reviews and your journal

• The mood you pick for the day (great, good, okay, difficult or rough), an optional journal entry, and a summary of how the day went (for example “6 of 7 done · +130 karma”).
• Your journal text is encrypted on our servers with AES-256-GCM, using a key that is kept separately from the database. Our server decrypts it only to show it to you or to include it in your data export. This isn’t end-to-end encryption, because we hold the key, so we protect that key as described in How we protect your information.
• Your mood and the day’s summary are stored with the rest of your Karmatica data, without this extra layer of encryption.
• Only you can see your journal in Karmatica. We never use your journal or mood for ads, analytics or error reports.

Weight, height and medications

• If you choose to track them: your weigh-ins (the day and your weight), your height, a weight goal (your starting weight, your goal weight and, if you set one, the date you’d like to reach it), and the days and time for weigh-in reminders.
• For each medication you add: its name, the dose you type (for example “500 mg”), the times and days you take it, how many pills make a dose, and, if you choose to count them, how many pills you have and when to remind you to refill. Each dose you mark as taken is recorded like any other completed activity, and earns karma.
• Whether you prefer metric (kg, cm) or imperial (lb, ft and in) units.
• These health details are encrypted on our servers with AES-256-GCM, like your journal, using their own key derived from a key that is kept separately from the database. Our server decrypts them only to show them to you or to include them in your data export.
• To make reminders and your progress work, some things are stored without this extra layer of encryption: that you have a medication or a weigh-in routine (under a neutral label, never the medication’s name), its schedule and reminder times, and when you marked a dose or weigh-in done.
• Dose and refill reminders on your phone show the medication’s name. Whether that shows on your lock screen is up to your phone’s notification settings.
• Only you can see these details in Karmatica. We never use them for ads, analytics or error reports, and we never share them with Google or anyone else for advertising.

Apple Health and Health Connect

• Only if you connect it, in the phone app under Settings → Health data, and only to read. Karmatica never writes anything to Apple Health or Health Connect.
• What it can read: your steps, your exercise minutes (on Android, the time in your exercise sessions), your walking, running and cycling workouts (their time and distance) and, only if you turn on “Bring in weigh-ins”, your weight. Your phone asks you to allow each one, and you can change that at any time in the Health app or in Health Connect.
• Only each day’s totals leave your phone, such as “6,250 steps on October 23” or “a 5.2 km run”, for the last 7 days (31 days of weigh-ins). Individual readings, routes, heart rate, locations and anything else in your health store stay on your phone.
• We use them only to tick off the activities you’ve set to track automatically, to show your progress on them, and to fill in weigh-ins on days you haven’t logged one yourself.
• These totals are health details: they’re encrypted on our servers like your weight and your journal, they’re in your data export, and they’re deleted with your account.
• We never use information from Apple Health or Health Connect for ads, analytics, error reports or marketing, never sell it, and never share it with Google, advertisers or anyone else. Karmatica’s use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
• To stop, turn off Apple Health or Health Connect in Settings → Health data, and remove Karmatica’s access in the Health app (iPhone) or in Health Connect (Android).

When you contact us

If you write to us, from Contact support in the app, the contact form on this website or by email, we receive your email address, what it’s about and whatever you choose to include, and we use it to answer you. Our answers are sent by email through Amazon SES. A message from the app is linked to your account. Email to our support address reaches us through CloudMailin, which passes it straight to our server, files included.

3. Information collected as you use Karmatica

Signing in

When you sign in, we keep a session record: a session token, when it expires, the IP address you signed in from, and the “user agent” your app or browser reports (which app or browser and operating system it is). A session ends when you sign out, when your password is reset, or after 30 days without using Karmatica.

Your phones and tablets

The iPhone and Android apps register each installation with a random ID the app creates, the platform, the app version, whether reminders are switched on for that device, and when it last connected. This is what lets you turn reminders off on one device and keep them on another. The web app doesn’t register a device.

Reminders are scheduled by the app on your device as local notifications. We don’t send them through a push-notification service, so we don’t collect push tokens.

Personal Plus subscriptions

Personal Plus is bought through the App Store or Google Play. Apple or Google handles the payment, and we never see your card or bank details. So that Plus works on all your devices, the app tags each purchase with your Karmatica account ID, and our server confirms the purchase directly with Apple or Google. We then store which store it came from, the product and plan (monthly or yearly), its status (for example active, expired or refunded), when the current period ends, the store’s original transaction ID, whether it was a test purchase, and the IDs of the store notifications we’ve already processed. Apple and Google keep telling our server about renewals, cancellations and refunds.

Security records

When the password on an account is changed or reset, when deleting an account is asked for, undone or completed, when an account is blocked or unblocked, and when we download someone’s data at their request, we record what happened, when, and the user agent. Instead of the account ID and IP address themselves, the record holds a keyed one-way code (a “hash”) made from each. We use these records to investigate misuse and keep accounts safe, and we keep them after an account is deleted (see How long we keep it).

Each time someone tries to log in with an email and password, we also record the email typed, the IP address, whether it worked and, if not, why. This lets us spot someone guessing passwords. We keep these log-in records for 30 days.

When you use the app

We note when your account last used the app and which days it was used, so we can count how many members are active. This is kept with your account and deleted with it.

Server logs

Our servers log each request they receive: the time, the address requested, the result, and technical details such as the IP address and user agent. The logs don’t contain the contents of what you send us, such as your journal or password, and they don’t contain your cookies or sign-in tokens. The web server for this website keeps similar standard access logs.

Error reports

When the app or our server runs into an error, it sends a report to Sentry, our error-tracking service: what went wrong and where in our code, the app version, and details about the device or browser. We set Sentry up so it doesn’t receive the contents of your requests, cookies, request headers, screenshots of the app, or your name and email address.

The app also reports crashes straight to our own server: the error message and where in our code, the app version, and whether it’s iPhone, Android or the web. These reports don’t include your name, your email or anything you typed. When our server itself runs into an error, it records the error and which account it happened to. We keep both for 90 days.

On your device

So that Karmatica opens quickly and works offline, the app keeps a copy of your recent Karmatica data (up to 7 days old) in the app’s storage on your device, or in your browser’s storage when you use the web app. On iPhone and Android this copy can include your weigh-ins, height and medications. In a browser it never does, and your medications appear in it only as “Medication”, because a shared computer can keep that storage after you close the tab. Your journal entries and moods aren’t part of it: the app fetches them from our servers when it needs them and keeps them only in memory while it’s open. If you save an evening review while offline, it waits on your device until it can be sent, and is then removed. Signing out, or deleting your account, removes the copy from that device. On iPhone and Android your sign-in is kept in the system’s secure storage (Keychain or Keystore).

Cookies and this website

The web app uses one cookie, which keeps you signed in. It’s strictly necessary, it can only be sent over a secure connection, and scripts on the page can’t read it. This website, karmatica.app, uses no cookies and no third-party fonts.

This website runs one script: Umami, a privacy-friendly analytics tool that we run on our own server, so the information doesn’t go to an analytics company. Umami counts visits without cookies and without keeping your IP address. For each page view it records the page, the site that linked you here, your browser, operating system, device type, screen size and language, and an approximate location (country, region and city) worked out from your IP address. We only look at the totals, such as how many people visited this week. If your browser sends a “Do Not Track” signal, Umami doesn’t count your visit. The Karmatica apps don’t use Umami or any other analytics.

4. What we don’t collect or do

• We don’t collect your location (only your time zone), your contacts, photos, camera or microphone.
• Karmatica reads from Apple Health or Health Connect only if you connect it, never writes to them, and keeps only each day’s totals (see Apple Health and Health Connect).
• Karmatica isn’t a medical device and doesn’t give medical advice. Medication reminders are a convenience; always follow the instructions from your doctor or pharmacist.
• The apps don’t use product analytics, tracking pixels or social-media trackers. To understand how Karmatica is used, we look at totals counted in our own database (for example, how many activities were completed in a day). To help people who contact us and keep accounts safe, we can also look up an account’s email address, when it was created and when it last used the app. This website has no tracking pixels or social-media trackers either. It counts visits with Umami, as described in Cookies and this website.
• Karmatica itself doesn’t collect your device’s advertising identifier. Google’s ad software, which only runs for adults on the free plan, may read it to limit how often you see an ad and to prevent fraud (see Ads). We don’t ask for permission to track you across other companies’ apps and websites.
• We don’t sell your personal information.

5. How we use your information

• To provide Karmatica: keep your account, sync your activities across your devices, work out your day, karma, streaks, stars and progress, and show you your evening reviews.
• To schedule the reminders you ask for, at the times you choose.
• To apply our age rules: people under 13 can’t create an account, and ads are only shown to adults.
• To confirm Personal Plus purchases and keep them up to date on all your devices.
• To let you log in with Apple or Google, if you choose to.
• To send account emails, such as a password reset link you’ve asked for.
• To keep Karmatica secure and working: protect accounts, limit abuse, find and fix errors, and restore data after a failure.
• To answer you when you contact us, and to meet our legal obligations.

We don’t make decisions about you that have legal or similarly significant effects based solely on automated processing. The age check at sign-up is automatic, and only decides whether an account can be created.

Legal bases (EEA, UK and Switzerland)

[Note for review: keep or adapt this part depending on the regions where Karmatica is offered.] If data protection laws such as the GDPR apply to you, we rely on these legal bases:

• Contract: to provide the Karmatica features you sign up for, including Personal Plus.
• Legitimate interests: to keep Karmatica secure, prevent abuse, fix errors and understand overall use, in ways that don’t override your rights.
• Consent: for ads, where the law requires it (see Ads).
• Legal obligation: where the law requires us to keep or disclose information.

Journal entries and moods may reveal things about your health or wellbeing. We process them only to provide the journal you choose to keep, and you can stop at any time by leaving the journal empty. [Note for review: confirm the basis for processing journal and mood data.]

Your weight, height, medications and the daily totals you bring in from Apple Health or Health Connect are health information. We process them only to provide the tracking and reminders you choose to set up, and you can remove them at any time. [Note for review: under the GDPR these are special-category health data; confirm the basis, likely explicit consent when someone first adds them.]

6. Ads

On iPhone and Android, the free plan shows a few ads from Google AdMob, only to people who are 18 or older. There are no ads on the web, for anyone under 18, for Personal Plus members, in the evening review and journal, or after you take a medication dose or log a weigh-in. When you complete an activity, the celebration shows an ad at most once in every three completions and at least five minutes apart, and never on your first completion of the day. A small banner may also appear on the timer screen.

Ads in Karmatica are non-personalized. We don’t share your Karmatica data (your activities, journal, mood or anything else) with Google for advertising. Google’s ad software still collects some information from your device to show ads, limit how often you see them, measure them and prevent fraud, such as your IP address, your device’s advertising identifier, the type of device and operating system, and how you interact with the ads. Google uses that information under its own policies; you can read how Google uses information from apps that use its services.

Where the law requires consent (for example in the EEA, the UK and Switzerland), Google’s consent message asks for your choices before any ad is shown, and you can change them later in the app’s settings. You can also remove ads completely with Personal Plus.

7. Who we share it with

We share personal information only as described here. Service providers process it on our behalf, under contract, and only to provide their service to us:

• Hostinger hosts our servers and database in North America [confirm the data-centre country], and our support email inbox, which gets a copy of each support message you send us.
• Amazon Web Services (Amazon SES, in the United States) sends account emails, such as password resets, our answers when you contact us, and a copy of each support message to our support inbox. It receives your email address and the message.
• CloudMailin (in the [confirm CloudMailin’s region]) receives email sent to our support address and passes it to our server. It receives the email and anything attached.
• Sentry (Functional Software, Inc.) receives the error reports described above.
• Amazon Web Services (Amazon S3, in the United States) stores the encrypted nightly backups of our database.

We also share information with:

• Apple and Google, when you buy Personal Plus. They process your payment, and we exchange purchase details with them to confirm and update your subscription. Their own privacy policies cover what they collect in their stores.
• Apple and Google, when you log in with them. You confirm who you are on their sign-in screen, and our server checks the result with them, so they know you use Karmatica. Their own privacy policies cover what they collect when you sign in.
• Google AdMob, as described in Ads.
• Authorities or others, when required: if the law requires it, or if it’s needed to protect the rights, property or safety of our users, the public or Karmatica, or to enforce our Terms of Service.
• A new owner: if Karmatica is sold or merged, your information may move to the new owner, who will remain bound by this policy. We’ll tell you before that happens.

We don’t sell your personal information and we don’t share it for targeted advertising. [Note for review: confirm this statement for US state privacy laws, given that AdMob collects device information for non-personalized ads.]

8. Where your information is stored

Our servers and database are in North America [COUNTRY]. Some of the service providers above may process information in other countries. If you live elsewhere, your information is transferred to and stored in those countries, which may have different data protection laws from yours. Where the law requires it, we protect these transfers with appropriate safeguards [for example, standard contractual clauses].

9. How long we keep it

• Your account and everything in it is kept while your account exists. When you remove an activity, its past completions and karma stay in your history (that’s how your progress keeps counting) until you delete your account.
• After you delete your account, it’s locked and kept for 7 days, so you can reactivate it if you change your mind or someone else deleted it. Then it and everything in it are deleted for good.
• Journal entries: you can change or clear a day’s journal on that day and the next. Older entries are kept until you delete your account, or until you ask us to delete them.
• Weight, height and medications: you can change or remove a weigh-in, your height or your goal at any time. When you remove a medication it stops appearing, and the doses you took stay in your history like any removed activity, until you delete your account.
• Daily totals from Apple Health or Health Connect: kept until you delete your account. A day’s total can go up as your phone syncs, but it never goes down, so a second phone or tablet can’t wipe it.
• Sign-in sessions stop working when you sign out, when your password is reset, or after 30 days without use. A session’s record, with its IP address and the app or browser it came from, is deleted within a day of it expiring.
• Password reset links work once and expire after 1 hour.
• A linked Apple or Google log-in (its account ID and sign-in tokens) is kept until you unlink it in Settings or delete your account. You can’t unlink your last way to log in. The name and email address it gave us stay with your account until you delete it.
• Device and subscription records are kept until you delete your account. Apple and Google keep their own purchase records under their policies.
• Support messages from the app are kept with your account until you delete it. Messages from the website’s contact form are kept for [RETENTION PERIOD], or until you ask us to delete them.
• Email to our support address, and our replies, are kept for [RETENTION PERIOD], or until you ask us to delete them. Email we delete is gone for good after 30 days.
• Security records are kept for two years, including after an account is deleted. Log-in records are kept for 30 days.
• Crash and error records on our own server are kept for 90 days. The days you used the app are kept for about a year, or until you delete your account.
• Website visit counts from Umami are kept for [RETENTION PERIOD]. They don’t contain your IP address or anything that names you.
• Server logs are kept for [RETENTION PERIOD], and error reports in Sentry for [RETENTION PERIOD].
• Backups: we keep encrypted nightly backups of our database for 30 days, so information you delete is gone from our backups within 30 days.

10. Your choices and rights

Get a copy of your data

Email support@karmatica.app from the address on your account, and we’ll send you a copy within 30 days, at no cost: one file (JSON) with your account details, profile, settings, categories, activities, completions, skips and postpones, timers, reminder rules, evening reviews (with your journal readable), karma history, stars, your weigh-ins, height, weight goal and medications (readable), the daily totals from Apple Health or Health Connect (readable), your support messages, your days off, the items on your lists, your Betterment cards, your registered devices, your subscriptions (store, plan, status and renewal date), your sign-in sessions (when each began and expires, its IP address and the app or browser it came from), the ways you log in (your password and any linked Apple or Google account, with the date each was added) and, if you signed up with Apple or Google, the name they gave us then. It leaves out internal reference numbers that only matter to Apple and Google, such as their purchase and account IDs.

Correct your information

You can change most of your information in the app’s Settings. For anything you can’t change there, such as your email address or birth year, contact us.

Delete your account

In the app (on any device, including the web app), go to Settings → Privacy & data → Delete account, and confirm with your password. If you log in only with Apple or Google, there’s no password: log in with them again, then delete your account within 10 minutes. You’re signed out on every device straight away, your account is locked, and we email you to say so. We keep it for 7 days in case you change your mind or someone else deleted it: log in during that time with your usual details and choose to reactivate it. After 7 days, your account and everything in it are removed from our database for good, and your information leaves our backups within 30 days after that. Security records stay, holding only the one-way codes described above.

Deleting your account doesn’t cancel a Personal Plus subscription. Cancel it in your App Store or Google Play account settings, or you may keep being charged. If you can’t use the app, email us from the address on your account and we’ll start the same deletion for you, with the same email and the same 7 days to change your mind. The steps are also at karmatica.app/delete-account.

Notifications and ads

Reminders only arrive if you allow notifications. Each phone or tablet has its own reminders switch in Settings, and you can turn notifications off at any time in your device’s settings. For ads, see Ads.

Rights where you live

Depending on where you live (for example in the EEA, the UK, Canada, or California and other US states), you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to how we use it, to withdraw consent you’ve given, and not to be treated differently for using these rights. To use them, contact us. We may need to confirm it’s really you, and we’ll answer within [30 days]. You can also complain to your local data protection authority.

11. Children and teens

Karmatica is for people aged 13 and over. Sign-up asks for your birth year, and someone under 13 can’t create an account; nothing they entered is saved. People aged 13 to 17 never see ads. If you believe a child under 13 has given us personal information, contact us and we’ll delete it. [Note for review: some countries set a higher age for consenting to data processing, up to 16 in parts of the EEA. Confirm the minimum age for each region.]

12. How we protect your information

• Every connection to Karmatica is encrypted (HTTPS).
• Passwords are stored only as scrypt hashes.
• Journal entries and health details (weight, height, medications and daily health totals) are encrypted with AES-256-GCM, and the key is kept outside the database, in a file only the server’s administrator account can read.
• On phones, your sign-in is kept in Keychain or Keystore. On the web, the sign-in cookie is only sent over secure connections and can’t be read by scripts.
• Every request is checked so that an account can only ever reach its own data, and requests are rate-limited to slow down abuse.
• Backups are encrypted, and passwords and keys are never stored in our code.

No system is perfectly secure. If a security breach affects your personal information, we’ll tell you and the authorities as the law requires.

13. Changes to this policy

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell you in the app or by email before it takes effect.

14. Contact us

Questions or requests about your privacy: support@karmatica.app, or write to 2795748 Alberta Ltd., [POSTAL ADDRESS].