PRACTICE

PRACTICE Privacy Policy

Effective date: 1 November 2026
Last updated: 1 November 2026

This policy explains what PRACTICE ("PRACTICE", "we", "us") collects, why, how long we keep it, and what you can do about it. It covers the PRACTICE app for Android and the website at www.practicecardgame.app.


The short version


1. Who we are

PRACTICE is operated from Connecticut, USA, by an individual developer. If PRACTICE moves to a company, that company will take over this policy and we will update this page to name it.

Questions about this policy: support@practicecardgame.app


2. What is saved on your phone

These are saved on your phone, not on our servers. We do not receive them. Unless an item below says it is left out, your phone's own backups may include it; we never receive those backups.

Three features below (logging a card from a printed deck, sharing an image of your sky, and the home-screen widget) may not be in your version of the app yet. If your version has them, this is how they work.

If you export your journal, the file goes wherever you choose to save or send it. That copy is then yours to look after.


3. What our servers hold

WhatWhyHow long
Account id (a random identifier) for your guest accountTo run your account and keep your practice daysUntil you delete it. A guest account you stop using is deleted automatically, within 99 days of the last day the app reached us for it
Sign-in records for your guest account: sign-in tokens, with the IP address and device type of your phoneKeeping you signed in; securityUntil the account is deleted
Sign-in security log kept by our database provider (the account id, IP address and time of a sign-in event)SecurityFor the short period our database provider keeps its logs
Time zone and when it last changed. We count it as approximate location in the app stores' privacy formsShowing the right card for your day: the card turns over at 3:00 a.m. in this time zone. When your phone's time zone changes, for example when you travel, the app asks us to follow it the next time PRACTICE starts or opens Today with a connection. We accept at most one change every 24 hours; until then your card follows the time zone we had. We also use it to stop back-datingUntil the account is deleted
Age check result: that you confirmed you are 18 or over, when, and which version of the question you saw. If your app store gives the app an age answer, the app checks it on your phone and we receive only the outcome (adult, under 18, or no answer) and which store gave it. An under-18 outcome deletes the account in the same step, so we keep only adult or no answer. Neither the app nor our servers keep the store's age rangeShowing that the adults-only check ran. We do not collect or store your date of birthUntil the account is deleted
Last active date (a date, not a time)Removing guest accounts that are no longer usedUntil the account is deleted
Practice records: the dates on which you marked a card as done (today's card, or one from your own printed deck)Your practice days, rest days and your current runUntil the account is deleted. If you undo a mark before the card turns over at 3:00 a.m., we remove that date's record
Deletion record: a short record that a deletion happened (how and when it was requested and finished). It does not hold your account idProof that deletion happenedRemoved within 91 days of the deletion
Deletion code, if you ask the app for one: kept only in scrambled form, with when it was madeSo you can delete your account by email without the appUntil it is used, a new code replaces it, or the account is deleted
Abuse limit counters (scrambled keys)Stopping spam and attacksRemoved within 26 hours
Hosting and server logs (IP address, the web address or function requested, and the time)Keeping the service running and secureFor the short period our database provider and web host keep their logs
Messages you send us at our support address: your email address, your message and our reply. The app never sends these; they exist only if you write to usAnswering you, and keeping a record of privacy and deletion requests and what we did about themIn our support mailbox until you ask us to delete them, or until we no longer need them for that record
Backups of our databaseRecovering from failuresUntil the backup expires on our database provider's schedule. Deleted data can remain in a backup until then; a backup is used only to recover from a failure, never to bring deleted data back into use

We do not keep the time of day you practiced, and we do not store which card you practiced, only the date (the card for each date is the same for everyone). If you log a card from a printed deck, its number stays on your phone.


4. What we never collect

Your date of birth; your name, email address or phone number (unless you write to us, and then only what your message holds; see section 3); your contacts; your location beyond your phone's time zone setting (no GPS, no location permission, and we do not work out where you are from your IP address); advertising identifiers; photos, camera images or microphone audio; your journal or mood in any form.

We do not use third-party analytics, advertising or tracking tools in the app or on the website.


5. Where it comes from

From you (what you choose in the app), from your phone (time zone, device type), and from your app store when the app asks it for an age answer (checked on your phone; see section 3).


6. Who we share it with

We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for profiling that makes decisions about you.

The app sends data to one service provider:

ProviderWhat forData location
SupabaseDatabase, guest sign-in and server functions for the appUnited States

Each provider that receives data from the app is bound by its terms with us to use that data only to provide its service to us, and to protect it at least as well as this policy describes.

Our website is hosted by Vercel. When you visit www.practicecardgame.app, Vercel receives what any website receives (your IP address, the page you asked for and the time) and handles it under its own terms. The app itself does not send your data to Vercel.

Our support mailbox. If you email support@practicecardgame.app, your message is carried and stored by our email provider, under its terms, so we can read and answer it.

Your app store. Google runs Google Play, where you downloaded PRACTICE, and handles your store account, downloads and any age answer it gives the app under its own privacy policy. We do not send Google the data in section 3.

No one else in PRACTICE can see your account, your practice days or your journal.

Legal reasons. We disclose data if the law requires it (for example a valid court order), or where needed to protect someone's safety. Because we hold so little, there is little to disclose.

If PRACTICE moves to a company owned by the person who operates PRACTICE, your data moves with it under this policy.

AI training. We do not use your personal data to train large language models or other AI models, and we do not sell or give it to anyone to do so.


7. Cookies and similar

The app stores your settings on your phone. The website sets no cookies and uses no advertising or analytics tools.

Global Privacy Control: we do not sell data or use it for targeted ads, so there is nothing to opt out of. If your browser sends a GPC signal, we treat it as an opt-out request anyway.


8. Adults only

PRACTICE accounts are for people 18 and over. We ask your date of birth once, on your phone, check it there, and send us only whether you passed; your birth date is not stored. If your app store gives the app an age answer, the app checks it on your phone too, and an under-18 answer from the store counts even if the date you typed says otherwise.

If you are under 18, the app does not make an account. If one was already made, the app locks at once and asks us to delete the account, and we delete it the next time your phone reaches us; a phone that is offline keeps asking until we confirm. If a phone restored from a backup can no longer reach a guest account made before the restore, that account is deleted with other unused guest accounts, within 99 days of the last day the app reached us for it.

The lock does not erase a journal already on the phone, or the printed card numbers kept with it. They stay on the phone, where we cannot read them, until the app is removed.

A phone that did not pass keeps a note that holds PRACTICE closed, and we ask your phone to include that note in its backups, so it can return on a restored or new phone. We do not knowingly collect personal data from anyone under 18. If you think someone under 18 is using PRACTICE, write to support@practicecardgame.app. A guest account holds no name or email, and the app does not show its id, so today we cannot tell from a message which account it is. The surest way to delete it is in the app on that phone: Settings > Delete my account and data.


9. Your choices and rights

Wherever you live in the US, you can:

How:

We respond within 45 days, and tell you if we need up to 45 more days. If we decline, we explain why, and you can appeal by replying to our answer with "Appeal". We decide appeals within 45 days. If you are in Connecticut and we deny your appeal, you can contact the Connecticut Attorney General at portal.ct.gov/ag. We will not treat you differently for using these rights.


10. Security

We keep server data to a minimum and limit who can read each table. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.


11. United States only

PRACTICE is offered in the United States. The app's data is stored in the United States. Our website is served by our web host's network, which may answer a page request from a location near the visitor.


12. Consumer health data

See our separate Consumer Health Data Notice at www.practicecardgame.app/health-data. In short: your journal and mood never reach our servers; we do not sell any health-related data; we do not use location to track you.


13. Changes

We will post changes here and update the date at the top. If a change is material, we will tell you in the app before it takes effect. We will not apply a material change to data we already hold without your consent.


Notice for Connecticut residents

This notice covers what the Connecticut Data Privacy Act asks us to tell you.

ItemAnswer
Categories of personal data we processIdentifiers (a random account id); session and device data (IP address, device type); account settings (time zone, which we treat as approximate location); age-check result (no birth date); practice records (dates); if you write to us, your email address and message
PurposesRunning the app and its features; sign-in and security; deletion; preventing abuse; answering messages you send us (section 3)
How to use your rights and appealSection 9
Categories of personal data soldNone
Third parties we share withService providers only (section 6); no sale; no targeted advertising
Targeted advertising or saleWe do neither
Training large language modelsWe do not collect, use or sell personal data to train large language models
Sensitive dataWe do not collect sensitive data on our servers. Journal and mood are saved on your phone, not on our servers
Contactsupport@practicecardgame.app
Last updated1 November 2026