Privacy, in plain words.
Last updated: August 26, 2026
What this policy covers
This policy covers the 30DayHero marketing site and the native iOS and Android app, including account recovery, private Ally features, notifications, and purchases. If the data flow changes, this page is updated before the change ships.
Waitlist and campaign information
If a waitlist is connected, we receive the email address you submit, signup source, selected challenge, time, referral information, and bounded campaign attribution such as UTM parameters or an advertising click identifier. Campaign information is kept for the browser session and submitted only if you choose to join. If the endpoint is unavailable, the site says so and does not store the submitted email.
Free tools, quiz answers, and tracker marks
The Quest Finder, challenge generator, hard-day builder, if–then builder, and printable tracker run in your browser. Raw answers, generated plan text, and individual tracker marks are not sent to us. The printable tracker saves its plan and marks in local browser storage on that device until you reset it or clear site data. If you allow optional analytics, we may record the recommended Quest and broad plan need to measure whether the tool is useful; we do not send the individual answers or use them to create sensitive advertising audiences.
App account and Arc data
The app may process an anonymous account identifier, optional email account, timezone, Quest, vow, cue, reminder time, dated check-ins, Rest Shields, misses, numeric evidence, private notes, Reveal reflection, self-trust ratings, entitlement state, and account lifecycle timestamps. This information exists to operate, recover, export, and delete your Arc.
Private Allies
An accepted Ally sees only the shared Quest, Arc day, and current completion status, plus curated boosts, acknowledgements, and Day-30 thanks. Allies do not receive commitments, notes, evidence, identity reflections, ratings, email addresses, or account details. Invitations require consent and can be declined, disconnected, blocked, or reported.
Notifications and device information
If you opt in, the app processes notification permission state, preferred reminder time, timezone, Expo push token, platform, build environment, and delivery or receipt state. This is used only for the daily Arc reminder and explicitly enabled private Ally moments. Notifications can be disabled in the app or device settings.
Analytics and campaign measurement
Product analytics and crash reporting are disabled by default in current app builds and require explicit release flags. On the marketing site, optional PostHog analytics and configured Google or Meta measurement can run only after you choose “Allow measurement.” Advertising tags do not receive your email, quiz answers, tracker marks, vows, notes, evidence, reflections, or raw Arc identifiers. You can choose “Essential only” or reopen Privacy choices from the footer.
Purchases
Apple or Google processes payment details. RevenueCat may process the store customer identifier, product, entitlement, purchase, renewal, expiration, and restore state. 30DayHero does not receive your full payment-card number.
Service providers
The product uses Firebase for authentication, database, Functions, security, analytics, and crash reporting; Expo for application and notification infrastructure; RevenueCat for subscription entitlements; and Apple or Google for store distribution and payments. A waitlist email provider will be named here before production email begins. These providers process data to deliver the service, not to sell 30DayHero advertising.
Retention and your controls
Arc and account data is kept while needed to provide your current and finished-Arc history and recover your account. The app provides data export and permanent account deletion. Waitlist unsubscribe and deletion will be available through email or by contacting us. Security, fraud, financial, or legal records may need limited retention where required.
What we do not do
We do not sell personal information, turn quiz answers into psychological profiles, use sensitive tool answers to build advertising audiences, expose a public activity feed, or give Allies access to private notes and reflections. Optional website campaign measurement is consent-based and is not used to send raw tool answers to advertising platforms.
Questions or requests
Email hello@30dayhero.com. Thomas reads privacy requests directly. App Store support uses the same address.