Last updated: October 14, 2026
Your privacy matters to us. This policy describes, in plain language, what we collect and why.
This Privacy Policy explains what data Iniscia collects, how we use it, and the choices you have. We collect only what's needed to run the service.
Account data: your email, display name, and password (or OAuth identity if you sign in with Google or Apple). Profile data: an optional avatar photo and bio, and, only if you choose to fill them in, your first and last name, phone number, country and currency. Habit data: the habits, categories, completions, goals, tasks and teams you create or join, and your timezone (used to determine your "today"). Notification data: on the web, your push notification subscription, if you enable push reminders; in the iOS app, reminders are scheduled on your device and we only store the times you choose. Payment data: on the web, payments are handled entirely by Stripe — we never see or store your card number; in the iOS app, subscriptions are purchased through Apple's In-App Purchase, and we receive your subscription status, never your payment details. Ad measurement data (iOS app, from version 1.1, only with your consent): app installs and app opens, and, only if you also allow tracking in Apple's prompt, your device's advertising identifier (IDFA) — see section 4.
We use your data to operate your account, calculate your streaks/XP/badges and dashboard, send the weekly email digest and daily reminder if you've enabled them, process your subscription, and, if you make your profile public, display the information you've chosen to share at your public profile link.
We share data only with the service providers that run Iniscia: Supabase (database, authentication, and file storage), Vercel (hosting and cookieless audience measurement), Metricool (cookieless audience measurement of our public pages), Stripe (subscription payments on the web), Apple (Sign in with Apple and In-App Purchase in the iOS app), RevenueCat (management of subscriptions purchased in the iOS app — it receives your account identifier and your purchase history), Google (if you sign in with Google), Resend (transactional emails), Sentry (error monitoring), Cloudflare (anti-bot protection on the sign-in and sign-up forms), and your browser's push notification service (to deliver web push reminders). Each provider may use your data only to provide its service to us, and must protect it at a level consistent with this policy. If you join a team, its members can see your display name, username, avatar, and your completions of the team's habits. We don't sell your data. Meta (Facebook) is a separate case, in the iOS app only, from version 1.1: its SDK measures which of Iniscia's ads on Facebook and Instagram bring new people to install the app. With your consent, given at the end of sign-up or in the app's Settings, it sends Meta the app install and app opens, plus your device's advertising identifier if you also allowed tracking in Apple's prompt; Meta may link this data to your Facebook or Instagram account and uses it under its own privacy policy. Without your consent, none of these events is sent; the SDK still contacts Meta when the app opens to fetch its settings, which, like any connection, transmits your IP address and technical details such as the app and system version.
We use a small number of essential cookies to keep you signed in (via Supabase Auth) and to remember your language and theme preference. We don't use third-party advertising or tracking cookies. Our audience measurement (Vercel Web Analytics, plus Metricool on our public pages) sets no cookie and records no identifier, so it can't follow you across sites or sessions. In the iOS app, the Meta ad measurement described in section 4 only happens with your consent. You can withdraw it at any time in the app's Settings (“Help Iniscia grow”), and withdraw tracking permission in your iPhone's Settings (Privacy & Security → Tracking).
We keep your data for as long as your account is active. If you delete your account, your account and associated data are permanently deleted. Payment records held by Stripe, Apple or RevenueCat are retained by them as required by law.
You can access and update most of your data directly from Settings. You can permanently delete your account and associated data at any time, from Settings → My account in the iOS app or Settings → Data on the website. If you have questions about your data, contact us using the details below.
Iniscia isn't directed at children under 16, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.
Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you before they take effect.
Questions about this Privacy Policy or your data? Contact us at contact@iniscia.com. The data controller is Elias Imougar, sole trader, Montpellier, France.