Privacy Policy for Defy on Android
This policy explains how Defy handles information when you use the Android app. Contact hello@infinique.org with privacy questions or requests.
Information the app handles
- Account information: your email address, authentication identifier, and profile details you provide. Supabase processes authentication. If you choose Google sign-in, Google provides the account information needed to authenticate you.
- Training and app data: training progress, completed sessions, streaks, activity challenges, your selected practice focus, and app preferences. These are stored on your device and can sync to your account through Supabase when signed in. Android onboarding asks you to select a practice focus; it does not ask sexual-health or medical-assessment questions. If you use the same account on another platform, that account may also contain information you supplied there.
- Usage and device information: app interactions, a generated device identifier, and technical details such as operating system, device model, and language. Mixpanel processes product analytics and derives approximate city, region, and country information from your network IP address. Defy does not request GPS or precise-location access. A signed-in account identifier and email may be associated with analytics.
- Subscription information: purchase identifiers, subscription status, and entitlement information processed by Google Play and RevenueCat. Defy does not receive your full payment-card details.
- Images you select: Android's system photo picker lets you choose individual images for app features. Selected images are copied into local app storage; the picker does not give Defy unrestricted access to your photo library.
- Support messages: information you send us when requesting support or account deletion.
How information is used
We use this information to provide the app, authenticate accounts, maintain synced progress, verify subscriptions, understand product usage, fix problems, respond to support requests, and prevent abuse. We do not sell personal information or use it for advertising.
Service providers
Supabase provides authentication and database services. RevenueCat manages subscription entitlements, Google Play processes Android purchases, and Mixpanel provides product analytics. These providers receive the information needed for those functions. Information may also be disclosed when legally required or necessary to protect rights and security.
Storage and security
Account and synced app data remain while your account is active. Network communication with our services uses HTTPS. Information may be processed outside your country by our service providers. No storage or transmission system is completely secure.
Delete your account or request access
You can delete your account in Defy under Settings → Account → Delete account, or request deletion on the web without reinstalling the app. You may also email us to request access, correction, export, or deletion of your information.
Deletion removes your account and associated profile, synced training progress, streaks, goals, onboarding responses, and other account data from our active systems. Provider records may be retained where necessary for legal, billing, security, or fraud-prevention obligations. We aim to complete verified support requests within 30 days and will explain any necessary exception.
Subscriptions
Deleting an account or uninstalling Defy does not cancel a Google Play subscription. Manage renewal in Google Play subscriptions. Purchase records subject to billing or legal retention requirements may remain with the payment provider.
Children
Defy is not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it.
Policy updates
We will update the effective date when this policy changes. For questions, contact hello@infinique.org.