Back to home

Privacy Policy

Last updated: July 21, 2026

Your privacy matters to us. This policy describes, in plain language, what we collect and why.

1. Introduction

This Privacy Policy explains what data Iniscia collects, how we use it, and the choices you have. We collect only what's needed to run the service.

2. Data We Collect

Account data: your email, display name, and password (or OAuth identity if you sign in with Google or Apple). Profile data: an optional avatar photo and bio. Habit data: the habits, categories, and completions you log, and your timezone (used to determine your "today"). Notification data: your push notification subscription, if you enable push reminders. Payment data: handled entirely by Stripe — we never see or store your card number.

3. How We Use Your Data

We use your data to operate your account, calculate your streaks/XP/badges and dashboard, send the weekly email digest and daily reminder if you've enabled them, process your subscription, and, if you make your profile public, display the information you've chosen to share at your public profile link.

4. Who We Share Data With

We share data only with the service providers that run Iniscia's infrastructure: Supabase (database, authentication, and file storage), Vercel (hosting and cookieless audience measurement), Stripe (subscription payments), Resend (transactional emails), Sentry (error monitoring), Cloudflare (anti-bot protection on the sign-in and sign-up forms), and your browser's push notification service (to deliver web push reminders). We don't sell your data.

5. Cookies and Local Storage

We use a small number of essential cookies to keep you signed in (via Supabase Auth) and to remember your language and theme preference. We don't use third-party advertising or tracking cookies. Our audience measurement (Vercel Web Analytics) sets no cookie and records no identifier, so it can't follow you across sites or sessions.

6. Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed; some badge and activity records may be retained in anonymized or aggregated form as described in Settings.

7. Your Rights

You can access and update most of your data directly from Settings. You can permanently delete your account and associated data at any time from Settings → Account. If you have questions about your data, contact us using the details below.

8. Children's Privacy

Iniscia isn't directed at children under 16, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

9. International Transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you before they take effect.

11. Contact

Questions about this Privacy Policy or your data? Contact us at contact@iniscia.com. The data controller is Elias Imougar, sole trader, Montpellier, France.