1. Scope and operator
This policy describes the Ataraxia mobile application and the public website at myataraxia.app. Ataraxia is operated by an individual developer in Switzerland. “MyAtaraxia App” is a public-facing brand, not a company or separate legal entity. The operator’s exact legal name must be added where the applicable transparency duty requires the controller’s identity.
Ataraxia is a practical wellbeing tool. It is not a medical service, psychotherapy or emergency support.
2. Private content that remains on your device
Your Gratitude entries, ACT-inspired reflections and Goals are stored in an account-scoped encrypted area on your device. Related drafts, private history and generated Reflection History PDF content also remain local. Ataraxia does not provide cloud journal synchronization.
This private practice content is not sent to Firebase Analytics, Family services, subscription verification or the support website. Ataraxia does not use AI to analyze private journal text.
Because the encryption key is device-bound and backups are excluded, uninstalling the app or losing the device can make this content unrecoverable.
3. Data handled by Ataraxia and its providers
| Category | Examples | Why it is used |
|---|---|---|
| Account and contact data | Firebase user ID; phone number for Phone sign-in; provider email and name when supplied by Google or Apple; provider identifiers | Sign-in, account security, provider linking and deletion |
| Profile and Family metadata | Display name; Family role, membership and invitation status; entitlement state; generic encouragement preferences and completion state | Independent Family access, membership administration and optional generic encouragement |
| Device notification data | FCM/APNs registration token and time zone, only when an eligible Family member enables encouragement notifications | Delivering and securing optional Family encouragement |
| Subscription data | Store, product, plan, entitlement, transaction proof, expiry and ownership verification; no payment-card details | Purchase, restore, eligibility, fraud prevention and Premium access |
| Optional product analytics | Allowlisted product action, platform, app/device information, coarse geography and resettable app-instance information supplied by Firebase; an optional deletion survey may add one allowlisted reason code, never free text | Aggregate product improvement after explicit opt-in |
| Security and operational data | App Check attestation; authentication and callable verification; provider-controlled operational logs | Abuse prevention, service integrity and troubleshooting |
| Support communication | Your email address and the content you choose to send | Answering a support or rights request |
Ataraxia does not use advertising identifiers, advertising tracking or third-party ad pixels. Crash reporting is not currently enabled.
4. Purposes and legal bases
Data is used only to provide and secure accounts, maintain entitlement and Family access, deliver requested notifications, process deletion, respond to support, and — if you opt in — measure aggregate product use.
Legal review item: depending on the law that applies to you, processing may rely on performance of the service contract, consent for optional Analytics or notifications, legitimate interests in security and fraud prevention, and legal obligations relating to transactions or rights requests. These classifications require confirmation by the responsible operator/legal reviewer before publication.
5. Service providers and international processing
- Google Firebase: Authentication, Cloud Functions, Firestore, App Check, Cloud Messaging and optional Analytics.
- Google: Google Sign-In, Play Integrity, Google Play Billing and Store transaction services.
- Apple: Sign in with Apple, App Attest, APNs, StoreKit and App Store transaction services.
- Cloudflare: domain registration, DNS and potentially email forwarding if that option is approved.
These providers may process data in countries outside your own under their terms and transfer mechanisms. Ataraxia does not claim that all processing occurs in one country.
6. Retention and deletion
Account and Family metadata is kept while needed to operate the account and entitlement. Family invitation links expire after seven days and are designed for one use. Invalid push tokens are removed when the messaging provider reports a permanent failure.
Ataraxia does not invent a fixed duration where the implementation or provider does not establish one. Firebase/Google, Apple and the Stores may retain security, audit and transaction records under their own policies or legal obligations.
Confirmed in-app account deletion removes the Firebase Authentication user, applicable Family backend metadata and that account’s encrypted local scope immediately. It does not cancel an Apple or Google subscription and cannot erase Store transaction records. See Delete your account and privacy choices.
7. Your choices and rights
- Turn optional Analytics on or off in Settings → Privacy. It starts off.
- Control local reminders and Family encouragement notifications in the app and operating-system settings.
- Correct your display name or linked sign-in providers through the account controls.
- Delete your Ataraxia account in the app or request help through the public deletion resource once support is operational.
- Request access, correction, deletion, restriction, objection or portability where applicable, and withdraw consent without affecting earlier lawful processing.
- Complain to the competent data-protection authority where that right applies.
8. Age and children
Ataraxia is intended for people aged 13 and over and is not directed to children under 13. Where local law requires parental or guardian authorization for a minor’s account or optional processing, that authorization is required. Platform age ratings remain separate and must reflect the application’s actual content.
9. Security
Private practice data uses device-native AES-256-GCM encryption with device-bound keys. Backend mutations require Firebase Authentication and App Check, and sensitive operations apply additional authorization and recent-login checks. No method of storage or transmission is risk-free; Ataraxia does not promise absolute security.
10. Contact and changes
Privacy and support contact: support@myataraxia.app. This mailbox is not operational yet and must be activated before publication or Store review.
Material changes will be reflected by an updated date and, where required, an in-app notice or renewed choice.