Privacy Policy

What we collect

Account

If you create an account, we store your email address and a securely hashed password. Authentication is handled by Supabase; we never see your password in plain text. You can also use the app without an account, in which case your data stays on your device only.

Your focus data

When you are signed in, we store the records that make your map work:

• Focus sessions — the date, your goal, minutes focused, and the resulting tile state (paradise, cursed, partial, or pending).
• Monthly worlds — the year and month, your completion stats, and any name you give a world.
• Preferences — your daily focus goal and chosen world theme.

On your device

The app keeps a local cache of the above, plus timer state (whether a session is running, paused, or how long it has accumulated), so the timer survives closing the app. This lives on your device and is removed when you delete the app.

Waitlist

If you enter your email on this site, we store only that email address, and only to tell you when Isleo launches. No newsletter, no other mail.

What we never collect

• No analytics, telemetry, or behavioural tracking SDKs — the app contains none.
• No advertising, ad identifiers, or cross-app tracking.
• No location, contacts, photos, microphone, or camera access.
• No screen or app-usage monitoring. Isleo only knows whether it is in the foreground, which is how the timer pauses when you leave.

Where your data lives

Account and focus data are stored with Supabase, which hosts our database and handles sign-in. Every table uses row-level security, so each account can read and write only its own rows. Supabase is our only third-party processor — no one else receives your data.

Notifications

If you allow notifications, Isleo sends local notifications only — generated on your device, for example to tell you the timer paused because you left the app. There is no push server and no marketing notifications. You can turn them off in iOS Settings at any time.

Your rights

You can ask us for a copy of your data or ask us to delete your account and everything attached to it. Email privacy@isleo.app and we will action it within 30 days. Deleting the app removes all locally cached data immediately.

Children

Isleo is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, email us and we will remove it.

Changes

If we add anything that changes what we collect — for example paid subscriptions or AI-generated artwork, neither of which is active today — we will update this page and change the date above before that feature ships.

Contact

Questions about privacy: privacy@isleo.app