Brag is a personal win journal for iOS. This policy explains what data is collected, how it is used, and your rights over it.
Who this applies to
The app is intended for users aged 13 and older. By using Brag, you confirm you are at least 13 years old.
What we collect
- Account data - your email address, Apple Sign In identifier, Supabase user ID, and name or nickname if provided, used to create and identify your account.
- Journal entries - the wins you log in the app, including entry text, dates, tags, categories, icons, favorites, work/personal labels, imported entries, and generated review-prep drafts stored under your account.
- App preferences - your chosen theme, icon pack, notification settings, streak data, and similar app settings.
- Subscription data - purchase status, product identifiers, trial status, renewal status, restore state, and RevenueCat app user/purchaser identifiers.
- Usage analytics - product interaction events such as app opens, onboarding steps, entry creation, Reflect views, import/export attempts, paywall views, trial starts, and subscription results.
- Diagnostics - technical events such as failed AI requests, failed imports, failed purchases, crashes, or performance/diagnostic data collected by app services or SDKs.
How your data is used
- App functionality - to authenticate you, save your wins, sync your account, show your history, generate Reflect insights, power widgets, and provide import/export tools.
- AI-powered features - entry text and related context may be sent to Groq to generate tags, icon suggestions, polished wording, weekly recaps, pattern insights, import results, and Brag Sheet review-prep drafts. AI output is editable and should be reviewed before sharing. Your entries are not used by Brag to train AI models.
- Analytics - product interaction and diagnostic events are sent to PostHog to understand onboarding, retention, feature usage, trial conversion, and errors.
- Subscriptions - purchase and trial status are processed by RevenueCat and Apple to unlock Pro features, restore purchases, and understand subscription performance.
- Notifications - if you enable reminders, your chosen time is stored to reschedule notifications after reinstalls.
We do not sell your data or share it with advertisers.
Third-party services
The app uses the following third-party services, each governed by its own privacy policy:
- Apple - App Store purchases, Sign in with Apple, local notifications, widgets, and Siri/Shortcuts.
- Supabase - authentication, database storage, account deletion support, and row-level access control.
- Groq - AI processing for tags, icons, polishing, recaps, insights, imports, and Brag Sheet drafts.
- PostHog - product analytics and diagnostic events.
- RevenueCat - subscription management, trial status, purchase status, and restore state.
Legal basis for processing (EU/EEA users)
If you are in the EU or EEA, we process your data under the following legal bases:
- Contract performance - to provide the app's services you signed up for.
- Legitimate interests - to improve the app, prevent abuse, run analytics, and enforce rate limits.
- Consent - for optional notifications, which you can withdraw at any time in iOS Settings.
Data storage and security
Your data is stored via Supabase. Row-level security is used so other users cannot access your entries. Sessions are stored using iOS secure storage. Data is encrypted in transit.
International transfers
Your data may be processed in the United States or other countries where Supabase, Groq, PostHog, RevenueCat, Apple, or their subprocessors operate. These providers maintain appropriate safeguards where required.
Deleting your data
You can permanently delete your account and all associated data at any time from Settings -> Delete account. This removes your entries, profile, and auth record immediately and cannot be undone. You can also export your data from Settings -> Export CSV.
We retain your data for as long as your account is active. Accounts with no sign-in activity for 3 years may be deleted after reasonable notice.
Your rights
Depending on your location, you may have the right to access, correct, delete, or export your data, object to certain processing, or lodge a complaint with a data protection authority. Most of these are available directly in the app. For anything else, contact us below.
Children
Brag is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes materially, the last updated date above will be revised and the update will be noted in the app release notes.
Questions? Reach out at apps.bynicole@gmail.com