How we handle your data.

What this policy covers

This Privacy Policy explains how the norte application (“we”, “us”, “our”) handles information when You use our Service. We are committed to your privacy.

The Developer responsible for this application is an individual developer reachable at hi@thenorte.app.

What we never see

The following data is never collected, transmitted, or stored by us:

• Your name, email address, phone number, or any identity information (no account is created, no login is required)
• Your precise or approximate location
• Your contacts, calendar, photos, or camera
• Your list of installed apps or browsing history
• Any behavioral profiling

Two surfaces, one boundary

3.1 — On Your Device only (AsyncStorage — never leaves your phone)

The following data is stored exclusively on Your Device. We have no access to it under any circumstances:

• Your habits, daily check-ins, and streaks
• Your profile name
• Your “promise letter” (free-form text written during onboarding)
• Your journal entries
• Your preferences (language, reminder time, notification settings)
• A local cache of your subscription status (source of truth is RevenueCat — see Section 3.2)

3.2 — Anonymous technical data (cloud — unless you turn it off in Settings → Privacy)

The following data is collected anonymously by default, starting on first launch. You can turn this off at any time in Settings → Privacy inside the app; doing so also stops all the ad-measurement sharing described in Section 04. None of it is linked to your identity in any way.

Anonymous installation ID

An anonymous ID generated by Firebase at installation time. It is not linked to your name, email, device serial number, or any other personal identifier. This ID is reset when you use “Clear all data” in the app.

Usage events

Anonymized events such as: screens visited, habits created, check-ins completed, milestones reached, and session duration. Purpose — to understand which features are used so we can improve the app. No habit content (names, text, dates) is included in these events. Provider — Firebase Analytics (Google LLC) and Amplitude (Amplitude, Inc.).

Crash reports

If the app crashes, an automatic report is sent containing: device model, OS version, app version, and a technical stack trace. Purpose — to identify and fix bugs quickly. No habit content is included in crash reports. Provider — Firebase Crashlytics (Google LLC).

Purchase history

When you make a purchase or restore a subscription, RevenueCat receives an anonymous purchase token from the App Store or Google Play and your subscription status (active, expired, trial). Purpose — to verify premium feature access on your device. RevenueCat also forwards trial-started, first-purchase, and trial-converted events to Meta's Conversions API for ad measurement, together with the Meta anonymous ID, the device advertising identifier (only if you permitted tracking), the vendor identifier, and your IP address — see Section 04. Renewal events are not forwarded. No price or payment details beyond the App Store transaction are shared, and no habit data is ever included. See revenuecat.com/privacy.

No ads in the app, ads elsewhere

norte does not show any advertising inside the app. We run ad campaigns on other platforms — currently only Meta (Facebook and Instagram) — to reach people who do not yet use norte.

During onboarding, iOS shows you Apple's App Tracking Transparency prompt asking for your permission to allow tracking. If you allow it, the app reads your device's advertising identifier (IDFA). If you decline, the IDFA is never read.

Regardless of your answer to that prompt, the Meta SDK generates its own anonymous Meta ID and reports the app install and activation to Meta. It also reports two anonymous signals, with no value attached, when a free trial or a subscription starts — used only for Apple's SKAdNetwork ad measurement.

RevenueCat separately forwards trial-started, first-purchase, and trial-converted events to Meta's Conversions API, together with the Meta anonymous ID, the device advertising identifier (only if you permitted tracking), the vendor identifier, and your IP address. Renewal events are not sent. No payment details and nothing you do inside the app — habits, check-ins, journal entries, focus sessions, or anything else — is ever shared with Meta.

Turning off anonymous analytics in Settings → Privacy inside the app also stops all of this ad-measurement sharing. You can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking.

One tap, everything gone

You can delete all your data at any time, directly inside the app:

1. Open the norte app
2. Tap “Settings” (profile icon in the bottom bar)
3. Scroll to the “Privacy” section
4. Tap “Clear all data”
5. Confirm

What is immediately deleted

• All your habits, goals, check-ins, and streaks
• Your profile name and promise letter
• Your journal entries
• Your preferences (language, reminders)
• Your anonymous Firebase Analytics ID

What is not deleted by this action

• Purchase history in your App Store / Google Play account (only Apple / Google control this — for refunds, contact them directly)
• Anonymous crash reports retained by Google for up to 90 days for diagnostic purposes
• Your anonymous RevenueCat subscription record, which is tied to your App Store / Google Play transaction and not to your personal identity

Because norte does not require account creation or login, all your personal content lives only on your device. Uninstalling the app also permanently deletes all local data.

For any privacy question or to request deletion of data you believe may have been retained, contact us at hi@thenorte.app.

Who, what, why

Meta is the only advertising partner we work with. We do not use data brokers.

Third-party privacy policies:

• Google LLC — policies.google.com/privacy
• RevenueCat Inc. — revenuecat.com/privacy
• Apple Inc. — apple.com/privacy
• Meta Platforms, Inc. — facebook.com/privacy/policy
• Amplitude, Inc. — amplitude.com/privacy

How long anything is kept

• On-device data (habits, journal, preferences) — retained until you clear it in-app or uninstall the app. We have no control over this data.
• Firebase Analytics events — retained up to 14 months by Google.
• Firebase Crashlytics reports — retained 90 days by Google.
• RevenueCat subscription records — retained per RevenueCat's policy at revenuecat.com/privacy.
• Meta ad-measurement data — retained per Meta's Data Policy at facebook.com/privacy/policy.
• Amplitude usage events — retained per Amplitude's Privacy Policy at amplitude.com/privacy.

Under 13

The Service is not directed at children under the age of 13. We do not knowingly collect any data from children under 13. If You believe a child under 13 has used the Service, please contact us at hi@thenorte.app.

Brazilian residents

If you are a Brazilian resident, the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018) grants you the following rights:

• Right of access — confirm whether we process any data about you.
• Right of correction — request correction of inaccurate data.
• Right of deletion — request deletion of data processed with your consent. You can do this directly via Settings → Privacy → Clear all data.
• Right of portability — receive your data in a machine-readable format.
• Right to information — be informed about which third parties we share data with.
• Right to revoke consent — withdraw consent at any time via app Settings. Your two consent controls are the iOS tracking permission (Settings → Privacy & Security → Tracking) and the anonymous analytics switch (Settings → Privacy inside the app). Both can be withdrawn at any time.
• Right to lodge a complaint — file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

Because all personal content is stored locally on your device and cloud data is anonymous, most of these rights are fulfilled by design. For any request, contact us at hi@thenorte.app.

Beyond Brazil

While norte is initially launched in Brazil, users from other regions may also use the app. For users in the European Union, the anonymous technical data described in Section 3.2 is transferred to and processed in the United States by Google LLC, RevenueCat Inc., Meta Platforms, Inc., and Amplitude, Inc. — all of which maintain appropriate data transfer mechanisms. This Policy will be updated as we expand to additional regions.

How updates work

Material changes will be communicated via an in-app notice or by updating the “Last updated” date at the top of this page at least 15 days before taking effect.

Your continued use of the Application after the effective date of any revised Policy constitutes acceptance of the changes.

Questions or requests

• Email — hi@thenorte.app
• Website — thenorte.app