1 · What this covers
This policy applies to the Oathlight mobile application and to this website, oathlight.app. The person responsible for the data described here is Oleh Okhrimenko, an individual developer based in Ukraine. Write to privacy@oathlight.app.
It takes effect on the date above. If it changes in a way that matters, the app says so before the change applies.
2 · What we collect
Given by you
- Your email address and a password. The password is stored only as a salted hash; nobody can read it.
- An account name and the city you choose for your time zone. We never ask for or read your device location.
- Your hero's name and class.
- Your tasks: titles, notes, the reason you wrote for a task, tags, dates, times and anchors.
- Your settings: language, theme, and whether reminders and nudges are on.
Created by using the app
- Completion records, experience and levels.
- A notification token for your device, if you allow notifications.
- For parties: whether you passed the age check — the result only, never a birth date — your party membership and the marks you send.
- Reports you file about a party member.
On this website
- The email address you leave on the waiting list, and the language of the page you left it on.
- The address and note you send with an account deletion request.
Oathlight contains no analytics, no advertising identifiers and no third-party trackers. This website sets no cookies.
3 · How it is used
To run the app: showing your tasks, counting experience, keeping your hero the same on every device you sign in on.
To speak when you asked: reminders for tasks you gave a time or an anchor, and, only if you switched them on, a single gentle nudge on quiet days.
To answer you: support mail and deletion requests are read and answered by a person.
Never for advertising, profiling or sale. Your data is not sold or shared for marketing, and it is not used to train anything.
Who processes it for us
- Supabase — hosts the database and sign-in.
- Google (Firebase Cloud Messaging) and Expo — deliver push notifications to your device, if you allow them.
- Google Play — distributes the app and, if a paid plan is ever offered, handles payment. We never see card details.
4 · Anonymous parties
A party is three people for forty-eight hours. It is optional and open only to adults (18+).
Other members see a label such as “Wanderer”, your hero's class, form and level, and the marks you send. They cannot see your email, your account name, your hero's name, your tasks or your history. There is no text, no images and nothing to type.
To place you with people awake at similar hours we use your time-zone offset, never a location. Where Google Play offers it, the age check uses Play's age signal; otherwise you state your month and year of birth, the app works out the answer on your device, and only that answer is stored.
5 · Storage and deletion
Data is held on Supabase's servers and sent over encrypted connections. You can delete your account in the app or through the account deletion page.
| Data | Kept for |
|---|---|
| Account, heroes, tasks, settings | until you delete the account, then 30 days in which you can undo it |
| Backups | up to 30 days after erasure from live systems |
| Party membership and marks | the 48 hours of the party, then removed with the party |
| Reports about a party member | kept for safety review even if either account is deleted, without the account attached |
| Waiting-list address | until the one launch email is sent, then deleted |
| Deletion requests | 90 days after they are completed |
6 · Your rights
You can ask to see the data held about you, to have it corrected, to receive a copy, or to have it erased. If you are in the EU, the EEA or the UK these are rights under the GDPR, and you may also complain to your data protection authority. We rely on the contract with you to run the app, and on your consent for notifications and the waiting list; consent can be withdrawn at any time.
Write to privacy@oathlight.app. Requests are answered by a person within 30 days.
7 · Children
Oathlight is not directed to children under 13, and we do not knowingly collect their data. Parties are closed to anyone under 18. If you believe a child has given us data, write to us and it will be removed.
8 · Contact
Oleh Okhrimenko, Ukraine · privacy@oathlight.app · general questions: hello@oathlight.app