App privacy

This policy covers The 5AM Warrior app on the web at app.the5amwarrior.com, iPhone and Android. It is published by Two Steps Forward, LLC (“we”), Franklin, Tennessee. The website you are reading has its own short site privacy page.

The short version

• Everything you write in the app is encrypted on your device before it is backed up. We cannot read it.
• The app works without an account. You only sign in to back up and sync, or to buy.
• We count which steps people take (for example, “a day was opened”), never what anyone wrote.
• We don't sell your data, and there are no ads.

On your device

Your commitment, your progress and everything you write are saved on your device. If you never sign in, that is the only place they exist. Settings → Erase everything on this device removes them.

If you sign in

Signing in turns on backup and sync, and ties your purchases to you so they open on every device. You can sign in with an email link, your phone number, Google, or Apple. Our sign-in provider (Google Firebase Authentication) keeps the email address or phone number you use, or the account identifier Google or Apple gives us.

With sync on, we store the following in Google Cloud Firestore, in the United States:

• Encrypted, readable only by you: your journal pages, Account lines, “where I compromised today”, Watch Accounting answers, and your person's name and phone number.
• Not encrypted, so the app can schedule your day: your first hour, your time zone, which volume you're reading and how many times you have started it, and the times each day was opened and reported.
• Your purchases, written only by our server.

The encryption key is made on your device and locked with a passphrase you choose and a recovery code shown to you once. We never see either. If you lose both, your journal cannot be recovered by anyone, including us.

Purchases

Purchases are handled by Apple (App Store), Google (Google Play) or Stripe (on the web), and recorded by RevenueCat so the app knows what you own. We receive a record of what was bought and when, linked to your sign-in. We never see your card number.

Usage counts and crash reports

The app sends a short list of events to Google Analytics for Firebase so we can see whether the app is helping: a commitment was made, a day was opened, the Rep was done, the report was sent, a day or watch was finished, the purchase screen was seen, a purchase was made, a reminder was tapped, sync was turned on. These events never contain anything you wrote. Google signals and ad personalization are turned off. Like any web service, Google receives your IP address and device type, and Analytics assigns an app-instance identifier.

On iPhone and Android, Firebase Crashlytics sends a report if the app crashes: the device model, system version, app version and where in the code it failed. Crash reports contain nothing you wrote.

What we don't do

• Your report. “Done” or “Failed” is sent from your own messaging app, to the person you chose. It doesn't pass through us.
• Reminders are scheduled on your device. We don't send them.
• Links out to a Bible app or website open that service, which has its own privacy policy.
• We don't sell or share your data for advertising, and we don't use it to train anything.

Deleting your data

To erase what's on a device: Settings → Erase everything on this device. To delete your account and everything stored with it, email jeff@the5amwarrior.com from the address or phone number you signed in with, and we will delete it within 30 days and confirm when it's done. Records of purchases that Apple, Google, Stripe and RevenueCat must keep for tax and accounting are kept by them under their own policies.

Children

The app is not directed to children under 13, and we don't knowingly collect information from them. If you believe a child has signed in, email us and we will delete the account.

The services we use

Google Firebase (sign-in, database, hosting, Analytics, Crashlytics), RevenueCat (purchase records), Stripe (web payments), Apple and Google (store payments). Each processes data on our behalf, or as the seller of record for store purchases, under its own privacy policy.

Changes and contact

If this policy changes, we'll update it here and change the date at the top. Questions: jeff@the5amwarrior.com, or the form on the About page.

Two Steps Forward, LLC · Franklin, Tennessee