Privacy Policy

1. What We Collect

• Identity: Your name and email address, provided via Google Sign-In or Sign in with Apple. If you use Sign in with Apple and choose to hide your email, Apple provides a private relay address instead.
• Apple Sign-In data: A stable Apple user identifier to recognise you on subsequent sign-ins. We do not store your Apple refresh token.
• App content: Tasks, goals, habits, journal entries, brain dump content, meal plans, shopping lists, finance notes, and AI conversation history that you create within the app.
• AI-processed content: When you use the in-app AI assistant — including brain dump parsing and the AI chat — the content you submit is transmitted to a third-party AI provider (Anthropic) for processing. This content leaves your device and is subject to Anthropic's data handling practices. See §3 and §5 for details. Anthropic's commercial API terms prohibit training on customer-submitted data by default.
• Guest mode: If you use Centred without signing in, your data is stored only in your browser's local storage on your device. It is not transmitted to our servers and is lost if you clear your browser data.
• Subscription status: Whether your account is Premium, via RevenueCat (iOS) or PayFast (web). We do not store your card number or banking details — these are handled exclusively by Apple or PayFast.
• Technical data: IP address, device type, and access logs collected automatically by our hosting provider (Vercel) for security and operational purposes.

2. How We Use Your Data

• To authenticate you and provide access to your account across devices.
• To store and sync your tasks, goals, habits, and other app content.
• To transmit your messages and brain dump content to a third-party AI provider so Centred's AI assistant can respond. This is core to the service and cannot be disabled while using AI features.
• To manage your Premium subscription via RevenueCat (iOS) or PayFast (web).
• To monitor service reliability and security.

We do not use your content to train AI models. The AI provider's commercial API terms prohibit training on customer-submitted data by default. Your messages and tasks are used solely to provide the service to you.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

4. Data Storage and Security

Your app content is stored in Google Firestore, with per-user access controls. All data is encrypted in transit using TLS. No system is perfectly secure — while we take reasonable steps to protect your data, we cannot guarantee absolute security.

We will notify affected users without undue delay if we become aware of a security breach involving their personal information, as required by section 22 of POPIA.

5. International Data Transfers

Anthropic, Google Firebase, RevenueCat, and Vercel process data on servers located primarily in the United States. By using Centred, you consent to your personal data — including content submitted to the AI assistant — being transferred to and processed in these jurisdictions. We rely on each provider's contractual commitments and applicable safeguards to ensure your data is protected to a standard comparable to that required under applicable data protection law.

6. Account Deletion

You can permanently delete your account at any time from within the app: tap your avatar (top-right) → Delete Account. This permanently removes your Firebase Auth record and all Firestore data.

If you cannot access the in-app deletion flow, email potfiction@gmail.com and we will delete your account within 30 days. Account deletion is permanent and cannot be undone.

Note: Deleting your account does not cancel an active Premium subscription. To cancel your iOS subscription, go to Settings → Apple ID → Subscriptions before deleting.

7. Your Rights

Under applicable data protection law — including POPIA (South Africa) and, where it applies, the GDPR — you have the right to: access a copy of the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data; and object to certain processing. To exercise any of these rights, email potfiction@gmail.com.

If you believe your data has been processed unlawfully you may lodge a complaint with the supervisory authority in your country. South African users may contact the Information Regulator: inforegulator.org.za · POPIAComplaints@inforegulator.org.za.

8. Information Officer

For the purposes of POPIA, the designated Information Officer for Centred is Jaco Rossouw. Contact: potfiction@gmail.com.

9. Children

Centred is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. Contact potfiction@gmail.com if you believe a child has provided us with personal information.

10. Retention

We retain your data for as long as your account is active. When you delete your account, your Auth record and all Firestore data are removed immediately. Payment records may be retained for up to 7 years as required by South African financial regulations.

11. Contact

Questions? Email potfiction@gmail.com.