Privacy Policy
Effective: December 1, 2026
Isleday ("the Service") is a habit-tracking app operated by Gain Nam ("we"). This policy explains what we collect and why.
1. What we collect
| Data | When | Purpose | Required |
|---|---|---|---|
| Anonymous account ID (random) | First launch | Store and sync your data | Yes |
| Email and name (only what Apple/Google provide) | When you link an account | Restore data on a new device, attribute purchases and invite rewards | No |
| Habit settings and check-ins (names, targets, timestamps, values) | During use | Core functionality | Yes |
| Step count (Apple Health / HealthKit) | If you allow | Auto-complete your walking habit | No |
| Location (city-level, used on device only) | If you allow | Show real weather on your island. Never stored or sent to our servers | No |
| Push notification device token | If you allow | Deliver notifications | No |
| Device info (model, OS, app version, language, time zone) | During use | Debugging, time-zone-aware features | Yes |
| Usage events (screens, features, error logs) | During use | Improve the Service, aggregate statistics | Yes |
| Purchase records (product ID, store transaction ID, time) | On purchase | Fulfil purchases, prevent duplicates, handle refunds | Yes, on purchase |
| Invite code and invite relationships | If you use invites | Grant invite rewards | No |
| Body weight (optional) | If you enter it | Suggest a daily water goal | No |
- Payment details (card numbers) are handled by Apple/Google. We never see them.
- Health data (steps) is used only to check your walking habit. It is never used for advertising, marketing, or shared with third parties.
- The Service is not directed to children under 13 (under 14 in Korea), and we do not knowingly collect their data.
2. Retention
| Data | Kept until |
|---|---|
| Account, habits, check-ins, settings | You delete your account (deleted immediately on request) |
| Purchase records | 5 years as required by Korean e-commerce law (anonymized when you delete your account) |
| Usage events and logs | Up to 1 year |
| Push token | You disable notifications or delete your account |
3. Service providers and international transfer
| Provider | Role | Location |
|---|---|---|
| Supabase Inc. (on AWS) | Database, authentication, storage, server functions | United States or selected region |
| Apple Inc. | Sign in, payments, push (APNs), weather (WeatherKit), TestFlight | United States |
| Google LLC | Sign in, payments (Android, when available) | United States |
| Vercel Inc. | Website and admin hosting | United States |
Your data is transferred to these providers, encrypted in transit, solely to provide the Service.
4. Sharing
We do not sell or share personal data with third parties except as required by law. If you use invites, we record only the invite relationship (code and whether the reward was granted); your habits are never shared.
5. Your rights
In the app's ME tab you can at any time:
- Export your data: ME → Account → Export data (saved directly as a JSON file)
- Delete your account: ME → Account → Delete account (immediate, irreversible)
- Revoke Health, Location, or Notification permissions in iOS Settings
- For other requests (access, correction, restriction, portability, objection): support@isleday.app — we respond within 10 business days.
If you are in the EU/UK, these rights are provided under the GDPR/UK GDPR; our lawful bases are performance of contract (core features), consent (Health, Location, notifications, optional data), and legitimate interest (security, debugging). If you are in California, we do not sell personal information.
6. Security
TLS in transit; row-level access control so only you can read your records; minimal operator access with audit logs; location never leaves your device.
7. Cookies and tracking
No cookies. No advertising identifier (IDFA). No third-party analytics SDKs; analytics run on our own servers.
8. Contact
Gain Nam · support@isleday.app
9. Changes
We will notify you in the app and on the website at least 7 days before changes take effect.