PRACTICE Privacy Policy
This policy explains what PRACTICE ("PRACTICE", "we", "us") collects, why, how long we keep it, and what you can do about it. It covers the PRACTICE app for Android and the website at www.practicecardgame.app.
The short version
- Your journal and mood are saved on your phone, not on our servers. They are not sent to us, and we cannot read them.
- Our servers keep very little: a random account id, your phone's time zone, the dates you marked a card as done, and the result of the age check. No name, no email address, no birth date. If you email us, we keep your message so we can answer it.
- We do not sell your data, we do not show ads, and we do not use your data to train AI models.
- You can delete your account and the data we hold about it in the app, under Settings > Delete my account and data. You can also ask us by email; section 9 explains what we can do with an email request. A few records stay for a short time afterwards; section 3 lists them.
- PRACTICE is for adults (18 and over) in the United States.
1. Who we are
PRACTICE is operated from Connecticut, USA, by an individual developer. If PRACTICE moves to a company, that company will take over this policy and we will update this page to name it.
Questions about this policy: support@practicecardgame.app
2. What is saved on your phone
These are saved on your phone, not on our servers. We do not receive them. Unless an item below says it is left out, your phone's own backups may include it; we never receive those backups.
Three features below (logging a card from a printed deck, sharing an image of your sky, and the home-screen widget) may not be in your version of the app yet. If your version has them, this is how they work.
- Your journal entries and mood, whether you write them on the back of a card or in the Journal tab. Your journal is saved on this phone, not on our servers, and we cannot read it. On Android, we ask your phone to leave it out of backups and phone-to-phone transfers, so use Export before you change or reset your phone. Erasing your journal in the app removes it from this phone.
- Your sign-in on this phone. PRACTICE has no sign-in yet. The first time you mark a card done, the app makes a guest account and keeps its sign-in on this phone. On Android, we ask your phone to leave the sign-in out of backups and phone-to-phone transfers, so a new or restored phone starts a new guest account.
- Your age check answer. If you passed, a note that you did (never the date). If you did not, a note that keeps PRACTICE closed on this phone. We ask your phone to include this note in its backups, so it can return after a restore or on a new phone.
- Today's card, a mark that has not reached us yet, and an undo waiting to reach us. Today's card is saved for when you are offline. A waiting mark or undo counts only if it reaches us before the card turns over at 3:00 a.m.; after that the app removes it from the phone and tells you. Your phone's backup may carry these too.
- Your sky and a few small notes. Your sky is drawn on your phone from your practice days. The app also keeps a few small notes so it shows things once: the newest star your sky has shown, the date you last pulled from the deck, and whether you have seen the evening note. These are dates or yes-or-no notes only.
- Your settings. Your reminder time, and your sound and haptics settings. Reminders are scheduled on your phone, not sent by our servers, and show only the app's name and the card's date. Hear this card uses a speech voice on your phone, and the app gives it only the words of the card.
- Cards you log from a printed deck, by number. Our servers receive only the date, as a practice day. The numbers are kept with your journal: on Android they are left out of backups and phone-to-phone transfers, they are included when you use Export, and Erase journal on this phone removes them. They stay on the phone when you delete your account, unless you tick "Also erase my journal on this phone". The number of a mark that did not count may be removed.
- A shared image of your sky goes only where you choose to send it. The image shows the month and your stars, and never your journal, moods or dates. The app keeps the last image it made in its own storage on the phone until the app next starts, and then removes it.
- The home-screen widget, if you add one. It holds the date and title of today's card and whether you practiced today. It is saved on the phone for the widget and left out of backups. It is cleared when you delete your account, and shows only the app's name while PRACTICE is closed on that phone for age. Anyone who can see your home screen can see what it shows.
If you export your journal, the file goes wherever you choose to save or send it. That copy is then yours to look after.
3. What our servers hold
| What | Why | How long |
|---|---|---|
| Account id (a random identifier) for your guest account | To run your account and keep your practice days | Until you delete it. A guest account you stop using is deleted automatically, within 99 days of the last day the app reached us for it |
| Sign-in records for your guest account: sign-in tokens, with the IP address and device type of your phone | Keeping you signed in; security | Until the account is deleted |
| Sign-in security log kept by our database provider (the account id, IP address and time of a sign-in event) | Security | For the short period our database provider keeps its logs |
| Time zone and when it last changed. We count it as approximate location in the app stores' privacy forms | Showing the right card for your day: the card turns over at 3:00 a.m. in this time zone. When your phone's time zone changes, for example when you travel, the app asks us to follow it the next time PRACTICE starts or opens Today with a connection. We accept at most one change every 24 hours; until then your card follows the time zone we had. We also use it to stop back-dating | Until the account is deleted |
| Age check result: that you confirmed you are 18 or over, when, and which version of the question you saw. If your app store gives the app an age answer, the app checks it on your phone and we receive only the outcome (adult, under 18, or no answer) and which store gave it. An under-18 outcome deletes the account in the same step, so we keep only adult or no answer. Neither the app nor our servers keep the store's age range | Showing that the adults-only check ran. We do not collect or store your date of birth | Until the account is deleted |
| Last active date (a date, not a time) | Removing guest accounts that are no longer used | Until the account is deleted |
| Practice records: the dates on which you marked a card as done (today's card, or one from your own printed deck) | Your practice days, rest days and your current run | Until the account is deleted. If you undo a mark before the card turns over at 3:00 a.m., we remove that date's record |
| Deletion record: a short record that a deletion happened (how and when it was requested and finished). It does not hold your account id | Proof that deletion happened | Removed within 91 days of the deletion |
| Deletion code, if you ask the app for one: kept only in scrambled form, with when it was made | So you can delete your account by email without the app | Until it is used, a new code replaces it, or the account is deleted |
| Abuse limit counters (scrambled keys) | Stopping spam and attacks | Removed within 26 hours |
| Hosting and server logs (IP address, the web address or function requested, and the time) | Keeping the service running and secure | For the short period our database provider and web host keep their logs |
| Messages you send us at our support address: your email address, your message and our reply. The app never sends these; they exist only if you write to us | Answering you, and keeping a record of privacy and deletion requests and what we did about them | In our support mailbox until you ask us to delete them, or until we no longer need them for that record |
| Backups of our database | Recovering from failures | Until the backup expires on our database provider's schedule. Deleted data can remain in a backup until then; a backup is used only to recover from a failure, never to bring deleted data back into use |
We do not keep the time of day you practiced, and we do not store which card you practiced, only the date (the card for each date is the same for everyone). If you log a card from a printed deck, its number stays on your phone.
4. What we never collect
Your date of birth; your name, email address or phone number (unless you write to us, and then only what your message holds; see section 3); your contacts; your location beyond your phone's time zone setting (no GPS, no location permission, and we do not work out where you are from your IP address); advertising identifiers; photos, camera images or microphone audio; your journal or mood in any form.
We do not use third-party analytics, advertising or tracking tools in the app or on the website.
5. Where it comes from
From you (what you choose in the app), from your phone (time zone, device type), and from your app store when the app asks it for an age answer (checked on your phone; see section 3).
6. Who we share it with
We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for profiling that makes decisions about you.
The app sends data to one service provider:
| Provider | What for | Data location |
|---|---|---|
| Supabase | Database, guest sign-in and server functions for the app | United States |
Each provider that receives data from the app is bound by its terms with us to use that data only to provide its service to us, and to protect it at least as well as this policy describes.
Our website is hosted by Vercel. When you visit www.practicecardgame.app, Vercel receives what any website receives (your IP address, the page you asked for and the time) and handles it under its own terms. The app itself does not send your data to Vercel.
Our support mailbox. If you email support@practicecardgame.app, your message is carried and stored by our email provider, under its terms, so we can read and answer it.
Your app store. Google runs Google Play, where you downloaded PRACTICE, and handles your store account, downloads and any age answer it gives the app under its own privacy policy. We do not send Google the data in section 3.
No one else in PRACTICE can see your account, your practice days or your journal.
Legal reasons. We disclose data if the law requires it (for example a valid court order), or where needed to protect someone's safety. Because we hold so little, there is little to disclose.
If PRACTICE moves to a company owned by the person who operates PRACTICE, your data moves with it under this policy.
AI training. We do not use your personal data to train large language models or other AI models, and we do not sell or give it to anyone to do so.
7. Cookies and similar
The app stores your settings on your phone. The website sets no cookies and uses no advertising or analytics tools.
Global Privacy Control: we do not sell data or use it for targeted ads, so there is nothing to opt out of. If your browser sends a GPC signal, we treat it as an opt-out request anyway.
8. Adults only
PRACTICE accounts are for people 18 and over. We ask your date of birth once, on your phone, check it there, and send us only whether you passed; your birth date is not stored. If your app store gives the app an age answer, the app checks it on your phone too, and an under-18 answer from the store counts even if the date you typed says otherwise.
If you are under 18, the app does not make an account. If one was already made, the app locks at once and asks us to delete the account, and we delete it the next time your phone reaches us; a phone that is offline keeps asking until we confirm. If a phone restored from a backup can no longer reach a guest account made before the restore, that account is deleted with other unused guest accounts, within 99 days of the last day the app reached us for it.
The lock does not erase a journal already on the phone, or the printed card numbers kept with it. They stay on the phone, where we cannot read them, until the app is removed.
A phone that did not pass keeps a note that holds PRACTICE closed, and we ask your phone to include that note in its backups, so it can return on a restored or new phone. We do not knowingly collect personal data from anyone under 18. If you think someone under 18 is using PRACTICE, write to support@practicecardgame.app. A guest account holds no name or email, and the app does not show its id, so today we cannot tell from a message which account it is. The surest way to delete it is in the app on that phone: Settings > Delete my account and data.
9. Your choices and rights
Wherever you live in the US, you can:
- See what we hold about you. Your practice days are shown in the app under History. Section 3 lists everything else our servers hold for a guest account.
- Get a copy in a portable form. Your journal is on your phone, and Export makes a file of it at any time, free. For the records on our servers, History shows your practice days; we cannot send a copy by email, because a guest account has no name or email we could match a message to.
- Correct it. Your time zone follows your phone's setting (section 3), and you can undo a mark until 3:00 a.m.
- Delete it, in the app, or by asking us (see below).
- Opt out of sale, targeted advertising and profiling. We do none of these.
- Withdraw consent for anything we ask your consent for.
How:
- Delete in the app: Settings > Delete my account and data. This deletes your guest account and the records our servers hold for it (section 3), turns off your reminders and clears the home-screen widget if you added one. On the same screen you can also tick "Also erase my journal on this phone"; if you do not, your journal and any printed card numbers you logged stay on the phone. Deleting needs a connection, and it cannot reach backups your phone has already made.
- Ask us by email: write to support@practicecardgame.app with the subject "Delete my account". You do not need the app to ask. If your version of the app has Get a deletion code (Settings > Delete my account and data), send us that code and we delete the account it belongs to. A guest account holds no name or email, so without a code we cannot tell from a message which account is yours, and we delete an account only when we can be sure it is yours. If we cannot match your request, the account is still deleted automatically, within 99 days of the last day the app reached us for it. www.practicecardgame.app/delete explains both routes.
- Questions and appeals: email support@practicecardgame.app. You do not need to make an account to ask. For the same reason, we cannot send a copy of, or change, a guest account's records by email; use the app for those.
We respond within 45 days, and tell you if we need up to 45 more days. If we decline, we explain why, and you can appeal by replying to our answer with "Appeal". We decide appeals within 45 days. If you are in Connecticut and we deny your appeal, you can contact the Connecticut Attorney General at portal.ct.gov/ag. We will not treat you differently for using these rights.
10. Security
We keep server data to a minimum and limit who can read each table. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
11. United States only
PRACTICE is offered in the United States. The app's data is stored in the United States. Our website is served by our web host's network, which may answer a page request from a location near the visitor.
12. Consumer health data
See our separate Consumer Health Data Notice at www.practicecardgame.app/health-data. In short: your journal and mood never reach our servers; we do not sell any health-related data; we do not use location to track you.
13. Changes
We will post changes here and update the date at the top. If a change is material, we will tell you in the app before it takes effect. We will not apply a material change to data we already hold without your consent.
Notice for Connecticut residents
This notice covers what the Connecticut Data Privacy Act asks us to tell you.
| Item | Answer |
|---|---|
| Categories of personal data we process | Identifiers (a random account id); session and device data (IP address, device type); account settings (time zone, which we treat as approximate location); age-check result (no birth date); practice records (dates); if you write to us, your email address and message |
| Purposes | Running the app and its features; sign-in and security; deletion; preventing abuse; answering messages you send us (section 3) |
| How to use your rights and appeal | Section 9 |
| Categories of personal data sold | None |
| Third parties we share with | Service providers only (section 6); no sale; no targeted advertising |
| Targeted advertising or sale | We do neither |
| Training large language models | We do not collect, use or sell personal data to train large language models |
| Sensitive data | We do not collect sensitive data on our servers. Journal and mood are saved on your phone, not on our servers |
| Contact | support@practicecardgame.app |
| Last updated | 1 November 2026 |