Privacy Policy

Nimea is a habit tracker built on one operating principle: collect the minimum needed for the app to work. This page explains exactly what we gather, why, who processes it, and how you can delete it.

Who we are

Nimea is made by Wolf Codes (operating under TheWolfCodes), based in Vancouver, British Columbia, Canada. Questions: hello@nimea.app.

What we collect

Only what you put in, plus what's needed to keep you signed in and the app stable:

• Account: email address and a hashed password (or an Apple-issued identifier if you use Sign in with Apple).
• Profile: optional display name, timezone, chronotype, and the accent color you pick.
• Habit data: habits you create, completion logs, notes, mood check-ins, journal entries, streaks, Focus Lock sessions.
• Device locale: read once to pick your default language. Not stored beyond your device.
• Subscription status: whether you have an active Pro subscription (held by RevenueCat, see below).
• Location (optional, opt-in): if you enable location-cued habit reminders, the app registers geofences with iOS. Coordinates stay on your device; only a label ("Saved location") lives on our server.
• Crash diagnostics (optional): when the app crashes or errors, we send a stack trace to Sentry so we can fix it. IP addresses and precise device IDs are explicitly not included (we set sendDefaultPii: false).

What we don't collect

• We don't track you across other apps or websites.
• We don't sell your data. Ever. To anyone.
• We don't embed ad-network SDKs.
• We don't scan or analyze your photos, camera, or microphone.
• We don't read your contacts, calendar, health data, or other installed apps.

Third parties that process your data on our behalf

Your data flows through these services only to make the app work. Each is bound by a data-processing agreement and its own policy:

• Supabase — authentication and data storage (habits, logs, profile). supabase.com/privacy
• Apple — Sign in with Apple (if you choose it), App Store / TestFlight delivery, push notification relay. apple.com/legal/privacy
• RevenueCat — in-app purchase state (subscription active, trial expiry). We never see your card number — Apple handles the charge. revenuecat.com/privacy
• Anthropic (Claude API) — the AI coaching that follows a miss and the AI habit suggestions. We send the text of your prompt and the relevant habit context; Anthropic does not train on this data. anthropic.com/legal/privacy
• Sentry — opt-out crash + error reporting. sentry.io/privacy
• Vercel — hosting for this website (the iOS app talks directly to Supabase, not to Vercel). vercel.com/legal/privacy-policy

Legal basis (GDPR)

For users in the EU/UK: we process data under Contract (we can't give you a habit tracker without saving your habits) and Legitimate Interest (fixing crashes, preventing fraud). Marketing communications — none today, but if ever — would require your explicit Consent.

How long we keep it

As long as your account exists. If you delete your account, all your habit data, logs, notes, and mood entries are removed from the database within 30 days. Crash reports are auto-purged by Sentry after 90 days. Subscription receipts are kept as long as tax law requires (typically 7 years), but anonymized to a hashed user id.

Your rights

Regardless of where you live, you can:

• Access a copy of your data — email us and we'll export it within 30 days.
• Correct anything inaccurate — most of it is editable in the app; for the rest, email us.
• Delete your account from inside the app (Profile → Account → Delete account). We'll confirm the delete took effect.
• Opt out of crash reporting by rejecting the Sentry prompt (or asking us to disable it server-side for your account).
• Revoke Apple Sign-In from iOS Settings → Apple ID → Sign in with Apple → Nimea → Stop Using. We handle the revocation event and sign you out automatically.

Children

Nimea is not directed at children under 13 (or 16 in the EU/UK/Canada depending on jurisdiction). If you believe a child has created an account, email us and we'll delete it immediately.

International transfers

Our database runs in a US region on Supabase. If you're outside the US, your data is transferred under Standard Contractual Clauses. You can ask us which SCC applies to your jurisdiction.

Changes

We'll update the "Last updated" date at the top and — if the change is material — send a note in the app and to the email you signed up with. No silent updates.

Contact us

Questions, requests, complaints, or anything that doesn't fit above: hello@nimea.app. We read every message.