Legal

Privacy Policy

2026-11-04 Contact: support@everydayapainting.app.

Everyday A Painting helps you discover one painting each day, save your progress, receive optional reminders, and manage your account. This policy explains what data the app processes and why.

Data We Process

• Account data, including email/password authentication; the name and email address supplied through Sign in with Apple or Google sign-in; and a Google profile image if Google supplies one.
• Product-interaction data linked to your account, including saved paintings, daily views and claims, streak state, and local-reminder preferences.
• Daily-calendar and local-reminder settings, including the current time zone used to unlock paintings at local midnight, whether reminders are enabled, and the chosen reminder time. Changing time zones never removes paintings that have already become available. Reminders are scheduled on your device; the app does not store a push token or use remote push delivery.
• Purchase data, including RevenueCat subscription entitlement status, product status, restore state, and related store transaction signals.
• Support data, including the email address and message content you send to our support address.
• Other Diagnostic Data linked to your account, including content or image error categories, the affected painting and app surface, a hashed remote-image URL, and diagnostic details needed to keep the service reliable.
• Optional app-analytics data. Only after you turn on Share usage data, the app sends PostHog the screens and feature actions listed below, a randomized PostHog device ID, and app/device metadata such as app version, operating system, device model, locale, and time zone.
• Anonymous app diagnostics and statistics. Share anonymous diagnostics and statistics is on by default and can be disabled in Profile, Legal. It sends only predefined categories of synchronization failures, retries when loading account data, and conflicts between account sessions, plus anonymous counts of onboarding and subscription steps: which onboarding screen was reached (onboarding_step_viewed); whether a sign-in attempt with Apple, Google, or email succeeded or failed, with a general failure category such as cancelled, wrong credentials, network, or rate limited, but no email address or account (sign_in_finished); when the subscription screen or the one-time discount offer is shown, and when the onboarding subscription screen is closed (paywall_viewed, paywall_dismissed); when a purchase is started, cancelled, or fails (checkout_started, checkout_cancelled, checkout_failed) and when a subscription becomes active (subscription_activated), with the subscription offering and, where applicable, the plan kind and plan ID; and when restoring a purchase starts or fails (subscription_restore_started, subscription_restore_failed). These events carry the randomized PostHog identifier and app/device metadata such as app version, operating system, device model, locale, and time zone. They do not include your account ID, raw error messages, artwork or Story text, or screen recordings.
• EAS Update checks send Expo the device operating system, the Expo project ID, and a randomized app-install token. Expo uses this unlinked identifier only to deliver and measure app updates; it is not used for tracking.

For Apple's App Privacy label, Name, Email Address, Photos or Videos, and Other Diagnostic Data are linked to your account and used for App Functionality. User ID, Purchase History, and Product Interaction are linked and used for App Functionality and Analytics. Device ID is unlinked and used for App Functionality and Analytics. No category is used for tracking.

Device ID covers the randomized EAS Update app-install token and the randomized PostHog identifier. Neither is associated with your app account. PostHog receives a fresh random identifier when the signed-in account or product-analytics consent changes, and the identifier is replaced at least every 12 months.

How We Use Data

• To create and secure your account through Supabase.
• To keep your saved paintings, daily view and claim history, streak, and reminder preferences available across sessions.
• To schedule local reminders on your device only when you choose to enable them.
• To provide subscriptions, restore purchases, and sync entitlement status through RevenueCat.
• To answer support requests and investigate operational issues.
• To comply with legal, fraud-prevention, platform, and store-review obligations.

Service Providers

Everyday A Painting uses Supabase for authentication, database, storage, and Edge Functions; RevenueCat for in-app purchase and subscription entitlement handling; Expo Notifications only to schedule local reminders on your device; Apple and Google for provider sign-in when you choose those flows; and Cloudflare Pages to host this website.

Expo also processes the limited, unlinked EAS Update request data described above as a service provider so the app can receive software updates.

PostHog processes enabled anonymous diagnostics and optional product analytics in its European Union cloud region. The app never sends PostHog your Supabase user ID, email address, or RevenueCat identifier. RevenueCat remains separate and does not send subscription lifecycle events to PostHog. These providers act on our instructions and are not used for advertising.

Website Analytics

This website uses Cloudflare Web Analytics to understand aggregate page views, referrers, browser information, and page-performance measurements. When you follow an App Store link on this website, we also count that click in aggregate, recording only which link and page it came from and the country; no cookies, identifiers, or IP addresses are stored. Cloudflare Web Analytics does not use cookies, local storage, or fingerprinting, and we do not use any of this data to identify you or for advertising. We use this aggregate data to improve the website.

App Diagnostics, Statistics And Optional Analytics

Anonymous diagnostics and statistics are on by default and limited to the three reliability event families and the onboarding and subscription steps described above. They let us count how many people reach each step and are never linked to your account. Product analytics is off by default. If you enable Share usage data, we also collect screen views and product actions such as daily reveals, Story starts and completions, collections, share-sheet outcomes, and review-request opportunities. We do not send account details, support messages, artwork or Story text, raw error messages, advertising identifiers, precise location, touch autocapture, or screen recordings. PostHog retains these events for up to 12 months, and the random identifier is replaced at least every 12 months. Turning off Share anonymous diagnostics and statistics in Profile, Legal stops all of the anonymous diagnostics and statistics described above. You can disable either setting independently; disabling product analytics rotates the random identifier before anonymous diagnostics and statistics continue.

Advertising And Tracking

The app does not sell personal data, track you across other companies’ apps or websites, or include third-party advertising SDKs. We advertise the app on the App Store with Apple Ads. If you install it after tapping or seeing one of those ads, Apple tells our subscription provider RevenueCat which of our campaigns, ad groups and search keywords led to the install, and we use that only to measure our own ads. Apple states that this attribution is not tracking under its App Tracking Transparency rules, and no advertising identifier is used. If our advertising or tracking practices change, this policy and the App Store privacy disclosures will be updated before release.

Retention And Deletion

Account, app-activity, and entitlement data are kept while your account is active. Linked diagnostic data is deleted after 90 days. Optional PostHog app analytics is retained for up to 12 months. You can delete your account in the app from Profile, Account, Delete account. The server marks the account for deletion, scrubs app-owned user data, revokes sessions where possible, and schedules hard deletion after 30 days. If you cannot access the app, contact support.

Your Choices

• You can choose whether to use Apple, Google, or email/password sign-in where available.
• You can disable local reminders in the app.
• In Profile, Legal, you can turn anonymous diagnostics and statistics, and usage analytics, on or off separately, at any time. Turning off anonymous diagnostics and statistics stops all of them.
• You can restore or manage purchases through the store and in-app subscription controls.
• You can request help, correction, or deletion by emailing our support address.

Children

Everyday A Painting is not directed to children under 13. If you believe a child has provided personal data, contact support so we can review and delete it where appropriate.

Changes

We may update this Privacy Policy as the app, store requirements, or service providers change. The current version is always available on this page.