Introduction

Redbud Works LLC ("we", "us", or "our") operates YearOn! Challenge Planner ("the App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App. By using YearOn! Challenge Planner, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Account information (email, username, display name)
• Profile information (avatar, bio)
• Challenge data (activities, tallies, progress)
• Messages sent to other users
• Content you upload (photos, avatars)

Health and Fitness Data

• Steps, distance, stairs climbed
• Activity data from HealthKit (iOS) or Google Fit (Android)
• Manual activity entries

Automatically Collected Information

• Device information (type, OS version)
• App usage data and analytics
• Error logs and performance data
• IP address and general location (city/state level)

Device Identifiers & Attribution

We collect device identifiers for app functionality, fraud prevention, and marketing attribution:

• iOS: Identifier for Vendor (IDFV) - unique to our apps, used for subscription management and attribution
• Android: Android ID - used for subscription management and attribution
• Campaign tracking data (UTM parameters, referrer information)

We use this data to understand which marketing campaigns lead to app installs and subscriptions. We do NOT collect advertising identifiers (IDFA/AAID) that would require permission prompts.

How We Use Your Information

We use your information to:

• Provide and maintain the App
• Create and manage your account
• Enable challenge participation and tracking
• Display your progress to challenge participants
• Send notifications about challenges and app updates
• Improve and optimize the App
• Ensure safety and prevent abuse
• Comply with legal obligations
• Send feature updates and occasional marketing (opt-out available)

Information Sharing

We do not sell your personal information. We share information only in these circumstances:

With Other Users

• Challenge participants can see your progress and activity data
• Friend groups can see your profile (if not private)
• Public profiles are searchable by username

Service Providers

• RevenueCat for subscription management and attribution
• PostHog for analytics (anonymized data)
• Google Vision API for content moderation
• Supabase for data storage and authentication

Legal Requirements

We may disclose information if required by law, court order, or to protect rights and safety.

Data Storage and Security

Your data is stored securely using industry-standard encryption. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

• Data encrypted in transit and at rest
• Secure authentication
• Regular security updates and monitoring
• Limited access to personal data

Data Retention

We retain your information for as long as necessary to provide the App's services:

• Active account data: Retained while account is active
• Deleted accounts: Personal data anonymized after 30-day recovery period
• Challenge history: Anonymized data retained for integrity
• Reported content: 90 days after resolution
• Audit logs: 1 year for security purposes

Your Rights and Choices

Access and Export

You can access your data through the App and request a data export in Settings.

Update and Correction

You can update your profile and account information at any time.

Deletion

You can delete your account in Settings. After a 30-day recovery period, your personal data will be anonymized.

Opt-Out Options

• Analytics: Disable in Settings > Privacy
• Marketing emails: Unsubscribe link or Settings
• Push notifications: Device settings

Privacy Controls

• Set profile to private
• Control who can send friend requests
• Manage challenge visibility

Children's Privacy

YearOn! Challenge Planner is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete that information. If you believe we have information from a child under 13, please contact us.

Analytics and Cookies

We use PostHog for analytics to understand how users interact with the App. This helps us improve features and user experience. PostHog collects anonymized usage data. You can opt-out of analytics in Settings.

The App may use local storage and similar technologies to enhance your experience, but we do not use tracking cookies for advertising.

Third-Party Services

The App integrates with third-party services that have their own privacy policies:

• Apple HealthKit
• Google Fit
• Fitbit
• Supabase
• PostHog

We encourage you to review their privacy policies.

Fitbit Data

When you connect your Fitbit account, YearOn! accesses specific health and fitness data to enable challenge tracking and progress display.

Data We Collect from Fitbit

• Daily activity data (steps, distance, floors climbed)

How We Use Fitbit Data

• Automatically sync your activity to active challenges
• Display your progress in the app and widgets
• Calculate challenge rankings and streaks

Fitbit Data Storage & Security

Fitbit authentication tokens are encrypted and stored in our secure database. Your activity data is processed by our servers to update challenge tallies but is not stored permanently beyond what's needed for challenge tracking.

Fitbit Data Sharing

Your Fitbit data is only shared with challenge participants as part of normal challenge functionality (displaying your progress). We do not sell, share, or use your Fitbit data for advertising purposes.

Disconnecting & Deleting Fitbit Data

You can disconnect your Fitbit account at any time in Settings → Health. When disconnected:

• Your connection credentials are deleted
• No further data syncing occurs
• Previously synced challenge tallies remain (as they're part of challenge history)

Fitbit Developer Policy Compliance

The use of information received from Fitbit APIs adheres to the Fitbit User Data and Developer Policy, including the Limited Use requirements.

International Data Transfers

Your information may be transferred to and maintained on servers located outside your country. By using the App, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or email. Your continued use after changes means you accept the updated policy.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold (we do not sell data)
• Right to opt-out of sale (not applicable as we don't sell data)
• Right to delete personal information
• Right to non-discrimination for exercising privacy rights

Contact Us

For questions about this Privacy Policy or our data practices, contact us at: