Privacy Policy
The short version
- Act Two asks personal questions (your situation, body, sleep, dating and intimacy). We use your answers for one thing: to build and run your 90-day program.
- We don't sell your data and we don't share it for advertising. There are no ad SDKs in the app.
- Your progress photos stay on your phone. We never receive the image files.
- Your sensitive answers are never sent to analytics and never shown in a notification.
- We measure anonymous usage (which screens and steps are used). You can turn that off in Me → Help → Share anonymous usage.
- You can delete your account and its data from inside the app: Me → Delete account.
1. Who we are
Act Two (“the app”) is published by Korix (Tom Plaes, an individual developer) (“we”, “us”), which decides how your data is used. For any privacy question or request, write to plaes.dev@gmail.com.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, sign-in method (Apple, Google or email), account id, creation date. With Apple or Google we receive the identifier and email they release to us, never your password. | To create your account, sign you in and restore your program on a new phone. |
| Your answers | The onboarding and set-up answers: age range, your situation, whether you have children and which days, sleep, activity, body and clothes questions, dating and intimacy questions (each has “Prefer not to say”), how much time you have, your reminder time. | To build your plan and choose your moves. |
| Program activity | Start date, your plan, the days you marked done or skipped, steps you ticked, your habits, the lines you write at checkpoints and on Sundays (“Someone noticed?”), what the move tools keep. | To show your progress and keep it in step across phones. |
| Purchase status | Plan, store (App Store, Google Play or web), purchase and expiry dates, renewal status, a transaction id, held for us by RevenueCat. We never receive your card number. | To unlock the app, restore purchases and handle renewals and refunds. |
| Anonymous usage (PostHog) | Events such as “screen opened”, “paywall viewed”, “purchase started”, “move done”, “returned after time away”, with only a screen name, a day number or a plan tier. No answers, no notes, no photos, no email, no account id. Not linked to you as a person. | To see which parts of the app are used and where people stop. You can switch this off (section 8). |
| Crash reports (Sentry) | When the app crashes: the kind of error, the screen, the app version, the device model and system version. Messages, request contents, IP address and your answers are removed before sending. | To find and fix bugs. |
| Support | Whatever you write to us by email. | To answer you. |
Photos. Your progress photos (Day 0, 30, 60, 90 and later monthly ones) are kept in the app's storage on your phone. They are not uploaded to our servers. We store only that a photo exists for a given checkpoint, and its date. Your phone's own backup (iCloud or Google backup) may include the app's files, photos included, under your Apple or Google account's rules, not ours. Deleting the app or your account clears them from the phone; it does not remove copies already in a backup you made.
What we don't collect: precise location, contacts, your photo library (the app reads only the photo you choose or take for a checkpoint), microphone, health-app data, advertising identifiers. We don't record your screen.
3. Sensitive information
Some of your answers are sensitive: they can reveal information about your body, health, family situation, dating and sex life. We use them only to build and run your program. They are never sent to analytics, never put in a notification and never used for advertising. Even the fact that you saw a screen that depends on a private answer is not sent to analytics. We don't sell them, and we share them only with the service providers in section 5. Sensitive questions are optional where the app says so, and you can withdraw an answer later in Me → Preferences or delete everything with your account.
4. How we use your data
- To provide the service: build your plan, show your daily move, track completion, send the reminders you turn on.
- To manage your subscription and prevent misuse of purchases.
- To keep the service secure, fix crashes and understand, in aggregate and anonymously, how the app is used.
- To answer support requests and send essential service messages.
We send no marketing email unless you separately opt in. We make no automated decisions with legal or similarly significant effects on you. Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you, your explicit consent for sensitive answers you choose to give, our legitimate interests in security, crash fixing and anonymous measurement, and legal obligations.
Notifications
Reminders are local notifications scheduled on your phone; they don't go through our servers. They use generic wording. “Show action titles” in Me → Reminders can name a move, but never one about dating, intimacy or health: those always stay generic on your lock screen.
5. Who processes your data for us
| Provider | Role | Data |
|---|---|---|
| Supabase | Database, sign-in and server functions, hosted in the United States (AWS us-east-1). | Account, your answers, program activity, settings, purchase status. |
| RevenueCat | Subscription management on all platforms. | Account id, purchase history and status. |
| Apple / Google | Sign in with Apple, Google Sign-In, App Store and Google Play billing. | Sign-in tokens and purchases, under their own privacy policies. |
| Stripe, through RevenueCat Web Billing | Payment processor for web purchases. | Card and billing details you type into the checkout. We never see them. |
| PostHog | Anonymous usage measurement, hosted in the United States (PostHog US cloud). Not started for anyone who opts out. | The anonymous events in section 2. |
| Sentry | Crash reports, personal data scrubbed before sending. Hosted in the European Union (Germany). | The crash reports in section 2. |
| Expo (EAS Update) | Delivers app updates. | Technical request data such as IP address, app version and platform. |
| Cloudflare | Hosts this website. | Technical request data such as IP address. |
We may also disclose data if the law requires it, or to a successor if the app is transferred, in which case this policy keeps applying to your existing data until you are told otherwise. We do not sell personal information and we do not share it for cross-context behavioral advertising.
6. International transfers
Our database and analytics are hosted in the United States; crash reports are hosted in the European Union. If you use the app from another country, your data is transferred to and stored there, under the providers' standard contractual clauses or equivalent safeguards where required.
7. How long we keep it
- Account, answers and program data: until you delete your account.
- Purchase records: deleted with your account; Apple, Google, RevenueCat and Stripe keep their own transaction records as the law requires.
- Crash reports: 90 days at Sentry. Anonymous usage events: not linked to you, so they cannot be found per person; kept for 12 months.
- Support email: up to 12 months after the last exchange.
- Provider backups are overwritten on a rolling basis, so deleted data can remain briefly in a backup.
8. Your choices and rights
Delete your account
In the app: Me → Delete account. This permanently deletes your account and the data we hold about you, and clears the app on your phone, photos included. A copy may remain in your phone's own backup. You can also email us from the address on the account. Deleting your account does not cancel a subscription: cancel it first in your App Store or Google Play subscriptions.
Turn off anonymous usage
Me → Help → Share anonymous usage. When it is off, the analytics tool is not started and nothing is sent. The choice is saved on your phone. Crash reports are separate and contain none of your answers.
Remove one kind of answer
Me → Preferences lets you withdraw a personal answer without deleting everything else.
Access, correction, portability, objection
Email us to ask for a copy of your data, a correction, or to object to or restrict a use. We answer within 30 days (45 where US state law allows) and won't discriminate against you for using a right. If we decline, you can appeal by replying; we answer the appeal within 45 days.
US state privacy laws
Residents of California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws have the rights above, plus the right to opt out of “sale”, “sharing” and targeted advertising. We do none of those. In the last 12 months we collected the categories in section 2 for the purposes in section 4 and disclosed them only to the providers in section 5.
Consumer health data (Washington, Nevada and similar laws)
Some answers (body, sleep, activity, injury or health flags, intimacy) may be consumer health data. We collect it with your consent to provide the program, share it only with the providers in section 5, and never sell it. You can withdraw consent and have it deleted by deleting your account or emailing us.
EEA, UK and Switzerland
You can also complain to your local data protection authority. We have not appointed an EU or UK representative; write to the email address below for any request.
9. Security
Data is encrypted in transit and at rest by our database provider, and each account can read and write only its own rows. Passwords are hashed by the authentication provider; we never see them. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
10. Children
Act Two is for adults. It is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has an account, email us and we will delete it.
11. Changes
If we change this policy in a way that matters, we will update this page and its date, and tell you in the app before the change applies.
12. Contact
Korix (Tom Plaes) · plaes.dev@gmail.com