Privacy Policy

Last updated: June 10, 2026

Short version: AddLevel stores your data locally on your device by default. We only sync to the cloud when you opt in. We never sell your data. You can delete everything in one tap.

1. Who we are

AddLevel ("we", "us", "our") is a mobile productivity application developed by an independent developer. Contact: privacy@addlevel.app.

2. What data we collect

We collect only what is necessary to provide the service:

Account data: Email address, display name, username — collected when you create an account.
App data: Quests, notes, habits, calendar events, XP history, and room state — stored locally on your device (SQLite). Synced to Firestore only if you enable cloud sync.
AI memory: Summaries you provide to the AI coach, stored locally and optionally in Firestore. Sensitive fields (finances, personal struggles) are never sent to external AI APIs unless you explicitly share them in a message.
Usage analytics: Crash reports via Firebase Crashlytics (anonymous). No behavioral tracking without consent.

3. How we use your data

To provide, maintain, and improve the app
To process AI coach requests — messages you send are forwarded to Anthropic's API via our server-side proxy (your data is governed by Anthropic's Privacy Policy)
To send account-related emails (password reset, account deletion confirmation)
We do not sell your data. We do not use it for advertising.

4. Data sharing

We share data only with:

Firebase / Google: Authentication, Firestore (optional cloud sync), Crashlytics
Anthropic: AI chat messages you send (never includes private fields without your consent)

We do not share data with any other third parties.

5. Public profile

If you create a username, your public profile shows: username, level, room, and any content you explicitly choose to share. It never shows journal entries, financial goals, failure notes, private tasks, wallet transactions, or contact details.

6. Data retention

We retain your data for as long as your account exists. Local data remains on your device until you uninstall the app or request deletion. Cloud-synced data is deleted within 30 days of an account deletion request.

7. Your rights (GDPR / CCPA)

Access: Request a copy of your data at privacy@addlevel.app
Correction: Update your data in the app settings
Deletion: Tap "Delete Account" in app settings — all data is permanently deleted
Portability: Request a JSON export at privacy@addlevel.app

8. Children

AddLevel is not directed at children under 17. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.

9. Security

We use industry-standard security: HTTPS for all transmissions, Firebase Security Rules for Firestore, and Firebase Authentication for identity. API keys are stored server-side only — never in the app binary.

10. Changes to this policy

We will notify you of material changes via in-app notification or email. Continued use after changes constitutes acceptance.

11. Contact

Questions? Email privacy@addlevel.app or write to us at the address on file with Apple Inc. (App Store Connect).