Privacy Policy

AngerEase (“AngerEase,” “we,” “us,” “our”) is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. This Privacy Policy explains what information the AngerEase mobile app collects, why we collect it, who we share it with, and the choices you have.

AngerEase is an emotional-wellbeing app. What you write in it — your moods, your triggers, your journal — is personal. We treat it that way. We do not sell your data, we do not show you ads, and we do not run analytics or tracking SDKs in the app.

If you have questions about this policy, contact us at privacy@angerease.app.

1. Summary

2. Information we collect

We only collect what the app needs to work. There are four groups.

2.1 Account information

To use AngerEase you create an account. Depending on how you sign up, we receive:

• Your name — the name you enter at sign-up (“What should we call you?”). We use it to greet you in the app. It is shown only to you.
• Your email address — used to identify your account, sign you in, and reset your password.
• Your password — if you sign up with email and password. Passwords are handled and stored by Google Firebase Authentication in hashed form. We never see or store your plaintext password.
• Sign in with Google / Sign in with Apple identifiers — if you choose one of those methods, we receive an account identifier and, where you allow it, your email address and name. If you use Apple’s Hide My Email, we only ever see the private relay address Apple gives us.
• Member-since date — when your account was created.

2.2 Content you create in the app

This is the wellbeing data you enter yourself:

• Onboarding answers — your responses to the setup questions (what brought you to AngerEase, anger intensity and frequency, pre-anger emotion, triggers, physical signs, reaction behaviour, aftermath, calming methods, what you’ve tried before, goals, obstacles, confidence, time commitment, who would benefit, readiness).
• Mood check-ins — the emoji you tap and when you tapped it.
• Trigger logs — where you were, who was involved, time of day, intensity rating, and any note.
• Reset sessions — when you started and finished a reset, which steps you completed, and the outcome you chose at the end.
• Journal entries — your free-text reflections, the prompt you picked, the mood and intensity you attached, and any linked trigger.
• Daily habit loop entries — your morning intention, midday check-in, and evening reflection.
• Saved quotes and achievement unlocks.
• Your check-in times — the three reminder times you choose.

2.3 Purchase and subscription information

AngerEase requires an active subscription or lifetime purchase.

• We never receive your card, bank, or payment details. All payments are processed by the Apple App Store or Google Play, under their own terms and privacy policies.
• We use RevenueCat to check whether your purchase is active. RevenueCat receives a customer identifier linked to your account, and the transaction status returned by the store (which product you bought, whether it is active, whether you are in a free trial, renewal and expiry dates, and country of purchase). It does not receive your journal, moods, triggers, or any other content from §2.2.
• Before you create an account, the app asks RevenueCat for prices using an anonymous identifier, so plan prices can load without identifying you. Once you sign up, that anonymous identity is linked to your account.

2.4 Limited technical information

• Offline/connectivity status — checked on your device only, to show the “You’re offline” banner. It is not sent anywhere.
• Your device time zone — used on your device to schedule your local reminders at the right time.
• Invite code redemption records (Android only) — if you redeem a friends-and-family invite code, we record the code, your account ID, the time, and best-effort context to prevent abuse: platform, app version, country code from your device locale, and device model (for example “iPhone15,2” or “Pixel 7”). This is not a persistent device or advertising identifier and is not used for tracking or profiling. Invite codes do not exist on iOS; on iOS the equivalent link opens Apple’s own offer-code redemption sheet and no such record is created by us.

2.5 What we do not collect

• No advertising identifiers (IDFA / AAID). The app does not request App Tracking Transparency permission because it does not track you.
• No location data. Trigger “where” options (Home / Work / Traffic / Public) are labels you tap — not GPS.
• No contacts, photos, camera, microphone, or health-app data.
• No behavioural analytics, session recording, heatmaps, or crash-analytics SDK.
• No biometric data.

3. Where your data is stored

Your account and content are stored in Google Cloud Firestore, under a private path scoped to your account (users/{your account id}/…). Security rules enforce that only your signed-in account can read or write your data.

The app is offline-first: your entries are written to a local cache on your device first, so the app works without a connection, and sync to Firestore when you reconnect.

A small amount of device-local information is also kept on your phone in standard app storage (SharedPreferences): your dark-mode and sound preferences, your reminder times, a copy of your name for fast startup, and — before you create an account — a temporary buffer of your onboarding answers. That pre-account buffer stays on your device only and is uploaded to your account (and then cleared) once you complete sign-up and purchase. If you never complete sign-up, it never leaves your device, and it is removed when you delete the app.

4. How we use your information

We use your information only to:

1. Create and secure your account and sign you in.
2. Store and show you your own content — moods, triggers, resets, journal, habits, streaks and progress.
3. Personalise your experience inside the app on your own data — for example greeting you by name, building your plan from your onboarding answers, and surfacing patterns like “Most triggered by Work on Monday evenings this week.” This is not shared with anyone and is not used to profile you for advertising.
4. Send you the reminders you asked for (a maximum of three recurring daily reminders, plus a single one-time nudge if you leave a reset unfinished).
5. Verify your subscription or lifetime purchase, and restore it when you reinstall or change device.
6. Prevent abuse of invite codes (Android only).
7. Respond to you when you contact support.
8. Comply with legal obligations and enforce our Terms of Use.

We do not use your journal entries, moods, or trigger logs to train machine-learning models, and we do not use them for marketing.

5. Legal bases (UK/EEA users)

Where the UK GDPR or EU GDPR applies, our legal bases are:

• Performance of a contract — creating your account, storing your content, delivering the subscription you paid for.
• Consent — push notifications (you opt in, and can withdraw any time in the app or in your device settings). Withdrawing consent does not affect processing that already happened.
• Legitimate interests — keeping the service secure and preventing abuse of invite codes, on the basis that the impact on you is minimal and the data involved is limited.
• Legal obligation — where we must retain records (for example tax records relating to purchases).

6. Who we share information with

We do not sell, rent, or trade your personal information. We share it only with the service providers below, only for the purposes described, and only under contracts requiring them to protect it.

We may also disclose information if we are legally required to (for example a valid court order), or where necessary to protect the rights, safety, or property of our users or ourselves. If AngerEase is ever involved in a merger, acquisition, or asset sale, your information may transfer to the acquiring entity — you will be notified before it becomes subject to a different privacy policy.

International transfers. Our providers may process data in the United States and other countries. Where data leaves the UK/EEA, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

7. How long we keep your data

• While your account exists: we keep your content so it is there when you open the app.
• When you delete your data in the app: we permanently erase your account content and your authentication account (see §8).
• Invite code redemption records (Android): retained for up to 24 months for abuse prevention, then deleted.
• Purchase records: retained by Apple, Google, and RevenueCat under their own policies, and by us where required for tax and accounting (typically up to 7 years).
• Backups: deleted data may persist in encrypted provider backups for a short period before being overwritten.

8. Your choices and rights

Delete everything, from inside the app

Go to Profile → Delete all data. After you confirm (and re-authenticate, if your sign-in is old), this permanently erases:

• your entire users/{your account id} subtree in Firestore — moods, triggers, reset sessions, journal entries, habit entries, saved quotes, onboarding answers, check-in times, and profile;
• your local cache on the device; and
• your Firebase Authentication account.

You are then signed out and returned to the start of the app. This cannot be undone. Deleting your data does not automatically cancel your store subscription — see §9 of the Terms of Use for how to cancel.

Other controls in the app

• Edit your name — Profile → Edit name.
• Turn reminders on or off, or change their times — Settings → Notifications, or your device’s notification settings.
• Turn calming sounds and dark mode on or off — Settings.

Your legal rights

Depending on where you live, you may have the right to: access a copy of your data; correct it; delete it; restrict or object to processing; receive it in a portable format; and withdraw consent. If you are in California, you have the rights to know, delete, correct, and to opt out of “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not discriminate against you for exercising your rights.

To exercise any right, email privacy@angerease.app from the address on your account. We respond within 30 days (or the period your law requires). We may need to verify your identity first.

If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk).

9. Security

• All traffic between the app and our providers is encrypted in transit (TLS). Data is encrypted at rest by Google Cloud.
• Firestore security rules restrict every document to the account that owns it — no other user can read your data.
• We never store your plaintext password.
• We collect as little as possible in the first place, which is the strongest protection of all.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant regulator where the law requires it.

10. Children

AngerEase is not intended for children. You must be at least 13 years old (or 16, where your country sets a higher minimum age for consent to data processing) to create an account. We do not knowingly collect personal information from children under those ages. If you believe a child has created an account, email privacy@angerease.app and we will delete it.

11. Not a medical service

12. Changes to this policy

If we change this policy, we will update the “Last updated” date above and post the new version at angerease.app/privacy. For material changes we will give you notice in the app before the change takes effect. Continuing to use AngerEase after that means you accept the updated policy.

13. Contact us

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Support: support@angerease.app

UK/EEA users: our data protection contact is the privacy address above.

Note: the legal entity name and registered address referenced in this policy are placeholders to be finalized before public release.