Privacy Policy

Small Wins Daily is a personal habit-coaching app published by Venu Kumar Mora. We do not sell your data, we do not run ads, and we do not use third-party advertising or analytics trackers. The data we collect exists only to make the app work for you.

• No advertising identifiers (no IDFA, no GAID)
• No location, contacts, photos, microphone, or camera access
• No third-party data brokers or cross-app tracking
• Your reflections and journal entries are private to your account
• You can delete your account and all associated data at any time

To provide the Small Wins Daily service, we collect the following:

• Account information: Email address (required, via Apple Sign-In, Google Sign-In, or email + password) and, when provided by Apple or Google at sign-in, your name.
• User identifier: An internal user ID (Supabase UUID) created when your account is created. We use this only to link your data to your account.
• Profile preferences: Life stage selection (Student 14–21, Building 22–35, or Resetting 36–55), goal categories (Move More, Eat Better, Focus Deeper / Study Better, Rest Better, Feel Calmer, Build Wealth, Learn Better), intensity level (3, 5, or 7 tasks per day), wake and wind-down times, notification preferences, sound choices, and chosen avatar.
• Activity data (product interaction): Daily task completions, task status (done, postponed, skipped), timer durations, counter progress, streak counts, and weekly review stats.
• User-generated content: Daily reflections (what helped, what got in the way, energy level), weekly reflections and intentions, journal entries, and any custom tasks you create during the Reset phase.

We do not collect: location, contacts, photos, calendar events, microphone or camera input, advertising identifiers (IDFA / GAID), browsing history outside the app, or any device identifiers used for cross-app tracking.

Your data is used to:

• Generate personalized daily task plans based on your goals, life stage, and intensity preferences (the "Direction" phase of the DERR loop)
• Adapt coach messages to your progress, completion patterns, and time of day
• Track your streak, total wins, and weekly stats
• Schedule local notifications at the wake and wind-down times you choose (notifications are generated on your device — we do not currently send remote push notifications for marketing)
• Provide weekly summaries and insights based on your reflection data
• Improve the quality of task recommendations over time, in aggregate

We never sell your data, share it with advertisers, or use it to build a profile of you across other apps or websites.

The table below mirrors what we disclose on the App Store privacy nutrition label and the Google Play Data safety form.

Your data is stored on Supabase (a PostgreSQL platform hosted on AWS infrastructure). Every user-data table has Row Level Security enabled, which enforces at the database level that only your authenticated session can read or write your rows.

Task completions and journal entries are written to your device first (offline-first) and synced to our servers when a connection is available. All data in transit is encrypted with TLS. Passwords (when you sign in with email) are never stored in plain text — authentication is handled by Supabase Auth, which stores only a salted hash.

We rely on a small number of service providers to run the app. They process your data only on our behalf, under their own privacy and security commitments:

• Supabase — authentication and database hosting (operated on AWS in the United States).
• Apple and Google — sign-in providers, when you choose Apple Sign-In or Google Sign-In. They may receive limited information (typically your email and name) to authenticate you.
• Apple App Store and Google Play — app distribution and, when applicable, in-app purchase processing.

We do not integrate any third-party analytics SDKs, advertising SDKs, or social-media SDKs.

Reflections and journal entries you write inside the app are stored privately and associated only with your account. We do not read them, we do not run them through third-party AI services, and we do not share them with anyone. There is no public feed and no sharing surface — your reflections are visible only to you.

Notifications are generated locally on your device, based on the wake and wind-down times you set. The app sends at most six notifications per day, and every category is configurable in Settings. You can disable notifications entirely from your operating system at any time. We do not currently use remote push notifications for marketing.

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time:

• In the app: Settings → Account → Delete account
• On the web: smallwinsdaily.app/delete-account
• By email: admin@smallwinsdaily.app

All personal data — your profile, plans, completions, reflections, journal entries, and custom tasks — will be permanently removed within 30 days of your request. Limited records may be retained where required by law or to prevent abuse, but they will not be linked to your identity.

Depending on where you live, you may have rights under data-protection laws such as the EU GDPR, the UK GDPR, or the California Consumer Privacy Act (CCPA). These can include the right to access, correct, export, or delete your data, and the right to object to certain processing. You can exercise any of these rights by emailing admin@smallwinsdaily.app. We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA.

Small Wins Daily is rated 4+ on the App Store and Everyone (3+) on Google Play. We use a life-stage selection model (Student, Building, Resetting) rather than collecting an exact age or date of birth. The Student life stage (14–21) is designed for teenagers and young adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at admin@smallwinsdaily.app and we will delete the account.

Our servers are located in the United States. If you use the app from outside the United States, your information will be transferred to, stored, and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers from the European Economic Area or the United Kingdom.