Privacy Policy

1. Data We Collect

• Account data: email and authentication identifiers when you sign in with email, Google, or Apple. In guest mode, Firebase anonymous authentication assigns a user identifier without an email until you create a full account.
• Content data: text prompts, decompositions, comparisons, and notes you create. Registered users may sync saved content to the cloud; guest saves generally remain on the device only.
• Usage and limits data: workspace session identifiers, AI token usage counts, save attempt counts, and cooldown/block timestamps — to enforce free-tier rules, subscription access, and abuse prevention.
• Technical and diagnostic data: app version, operating system, locale/language, timestamps, crash reports, and related diagnostics (for example via Firebase Crashlytics).
• Analytics data: pseudonymized product events such as screen views, onboarding steps, paywall impressions, and UI errors (Firebase Analytics).
• Voice input: microphone permission and speech processing only when you use voice input features.
• Subscriptions: purchase and entitlement status processed by Apple App Store, Google Play, and RevenueCat. We do not receive your full payment card details.
• Support and feedback: if you email us, we receive the information you choose to send (optionally including app and device details you attach).

2. Purposes of Processing

• Provide core app features (decomposition, comparisons, AI assistance, authentication, cloud sync for registered users, subscriptions).
• Process AI requests through a secure backend proxy to model providers.
• Enforce free-tier limits, cooldowns, and premium access.
• Protect the service (App Check, abuse prevention, fraud and security monitoring).
• Diagnostics, analytics, and product improvement.
• Legal and regulatory compliance.

3. Legal Bases (where applicable)

We process personal data under applicable legal bases, including:

• contract performance and pre-contractual steps;
• legal or regulatory obligations;
• legitimate interests, subject to necessity and proportionality;
• consent, where required (for example, device permissions).

4. Processors and Third-Party Services

We use processors and service providers to operate Reasonly, including:

• Google Firebase — Authentication, Firestore, Cloud Functions, Analytics, Crashlytics, App Check;
• Google Sign-In and Sign in with Apple — account sign-in;
• Apple App Store and Google Play — in-app purchases and subscriptions;
• RevenueCat — subscription and entitlement management;
• AI infrastructure providers — processing your prompts behind a secure server-side proxy when you use AI features.

Platform integrity services (such as Play Integrity on Android and DeviceCheck / App Attest on iOS) may be used to validate app requests.

5. Sharing, Retention, and Security

We do not sell personal data. We share data only with necessary providers, when legally required, or to protect rights and security. Guest content may remain on your device; registered-user content may be synchronized to the cloud. We apply reasonable technical and organizational safeguards and retain data only as long as needed for the purposes above, unless a longer period is required by law.

6. International Data Transfers

Some providers may process data outside your country. Where required, we apply appropriate safeguards for international transfers under applicable law.

7. Your Privacy Rights

• confirmation of processing and access to personal data;
• correction of incomplete, inaccurate, or outdated data;
• deletion, anonymization, or restriction where applicable;
• data portability under applicable rules;
• information about data sharing with third parties;
• withdrawal of consent when consent is the legal basis.

8. Account Deletion and Retention

Registered users can delete their account in the app under Settings → Delete account. This removes the Firebase account and associated cloud saved data and clears the RevenueCat session where applicable. Some providers may require a recent sign-in before deletion. You may also contact reasonlyapp@gmail.com. Certain records may be retained for legal deadlines, fraud prevention, security, and defense of legal claims.

9. Policy Updates

We may update this Privacy Policy periodically. The current version is identified by the “Last updated” date above.