Winter Arc 26 — Privacy Policy

Information you give us

• Username — a public handle you choose. Visible to all users on the community feed and leaderboard.
• Age — a number you enter during setup, used to personalise your results screen. We do not store your date of birth.
• Sign in with Apple identifier — and an email address if you choose to share it. If you use Apple's Hide My Email, we only ever see the relay address.
• Your tasks and daily progress — the habits you configure, which you complete each day, and your alarm times.
• Your commitment pledge — the sentence you type during setup.
• Setup answers — such as your estimated distraction hours and the habit you want to quit.
• Community content — posts, replies and reactions you choose to publish.
• Motivation media — any images or video you upload to the Jarvis feature.

Information created by using the app

• ELO score, rank, streak, and daily completion history.
• Focus session records (start time, duration, outcome).
• Subscription status.

Information collected automatically

• A Firebase anonymous user ID, created on first launch before you sign in.
• A push notification token, if you allow notifications.
• Basic technical information needed to deliver the service, such as app version and device type.

What we do not collect

• We do not collect your location.
• We do not collect your contacts, calendar, or photo library. The app cannot access your camera roll.
• We do not use advertising identifiers (IDFA) and do not track you across other apps or websites.
• We do not use analytics or crash-reporting SDKs.

Winter Arc 26 uses Apple's Screen Time (Family Controls) framework to block apps during a focus session.

Your app selections never leave your device. Apple provides them to us as opaque tokens that cannot be read or reversed. We cannot see which apps you chose, we do not transmit that selection to our servers, and it is never stored in our database. We use this data only to power the blocking feature you asked for, and for nothing else.

If you try to open a blocked app, the app may present a short conversation with an AI coach.

Your messages, along with limited context about your current progress (such as how many tasks you have left today and your streak length), are sent to OpenAI to generate a response. Conversations are not stored on our servers after the session ends.

Please don't share sensitive personal information — financial details, passwords, health information — with the coach.

The following are visible to other users of the app:

• Your username, ELO score, rank, streak and equipped cosmetics.
• Your posts, replies and reactions on the community feed.
• Your public profile, including your activity heatmap.

Your task photos, pledge, age, email address and blocked-app selections are never public.

Community content is automatically screened for harmful and explicit material before it appears. Content that breaks our rules may be removed and may affect your score.

Under UK and EU data protection law we rely on:

• Contract — to give you an account, run your tasks and streaks, and manage your subscription.
• Legitimate interests — to keep the community safe, prevent abuse, and keep the app working.
• Consent — for camera access, notifications and Screen Time, each of which you grant through an iOS prompt and can withdraw in Settings at any time.
• Legal obligation — where we must keep records or respond to lawful requests.

We do not sell or rent your personal data. We share it only with the following providers, each acting on our instructions:

We never see your card details. Payments are handled entirely by Apple.

We may also disclose data where required by law, or to protect the rights and safety of our users.

Firebase and OpenAI process data on servers in the United States. Where personal data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses to protect it.

• Account data — for as long as your account exists.
• Task photos — not retained. Analysed and discarded.
• Coach conversations — not retained after the session.
• Community posts — until you delete them or your account.

When you delete your account we delete your profile, history and community content, except where we must keep something to meet a legal obligation.

You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time.

You can delete your account and all associated data yourself: Profile → Settings → Delete my account.

For anything else, email ilya@incognitolabs.org We will respond within one month.

If you're unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you're in the EEA.

Winter Arc 26 is not intended for children under 13, and you must be at least 13 to create an account. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, email us and we will delete it.

We use encryption in transit, Apple's Sign in with Apple for authentication, and database rules that prevent one user reading another's private data. No system is completely secure, but we work to keep your data protected and will notify you and the relevant authority if a breach affects your rights.

We may update this policy. The date at the top shows when it last changed, and we'll tell you in the app if a change is significant.