How we handle your data.

What this policy covers

This Privacy Policy explains how the norte application (“we”, “us”, “our”) handles information when You use our Service. We are committed to your privacy.

The Developer responsible for this application is an individual developer reachable at imatheusamancio@gmail.com.

What we never see

The following data is never collected, transmitted, or stored by us:

• Your email address or phone number (no account is created, no login is required)
• Your device location. norte never asks for location access, but Amplitude estimates your city and country from your IP address (see Section 3.2).
• Your contacts, calendar, photos, or camera
• Your list of installed apps or browsing history
• Any behavioral profiling

Two surfaces, one boundary

3.1 — On Your Device only (AsyncStorage — never leaves your phone)

The following data is stored exclusively on Your Device. We have no access to it under any circumstances:

• Your habits, daily check-ins, and streaks
• Your “promise letter” (free-form text written during onboarding)
• Your journal entries
• Your preferences (reminder time, notification settings)
• A local cache of your subscription status (source of truth is RevenueCat — see Section 3.2)

On Android, norte uses Usage Access to see which app is open so it can block the ones you chose, and Display over other apps to show its block screen. Your app usage and your list of apps stay on your phone: norte never uploads them.

3.2 — Technical and profile data (cloud — unless you turn it off in Settings → Privacy)

The following data is collected by default, starting on first launch. You can turn this off at any time in Settings → Privacy inside the app; doing so also stops all the ad-measurement sharing described in Section 04. Apart from the name you type during onboarding, none of it is linked to your identity.

Anonymous installation ID

An anonymous ID generated by Firebase at installation time. It is not linked to your name, email, device serial number, or any other personal identifier. This ID is reset when you use “Clear all data” in the app.

Usage events

Anonymized events such as: screens visited, habits created, check-ins completed, milestones reached, and session duration. Purpose — to understand which features are used so we can improve the app. No habit content (names, text, dates) is included in these events. Provider — Firebase Analytics (Google LLC) and Amplitude (Amplitude, Inc.).

Approximate location

norte never reads your device location. Amplitude estimates your city and country from your IP address, and Meta receives your IP address (see Section 04).

Crash reports

If the app crashes, an automatic report is sent containing: device model, OS version, app version, and a technical stack trace. Purpose — to identify and fix bugs quickly. No habit content is included in crash reports. Provider — Firebase Crashlytics (Google LLC).

Purchase history

When you make a purchase or restore a subscription, RevenueCat receives an anonymous purchase token from the App Store or Google Play and your subscription status (active, expired, trial). On Android, purchases go through Google Play billing. Purpose — to verify premium feature access on your device. RevenueCat also forwards trial-started, first-purchase, and trial-converted events to Meta's Conversions API for ad measurement, together with the Meta anonymous ID, the device advertising identifier (on iPhone, only if you permitted tracking), the vendor identifier, and your IP address — see Section 04. Renewal events are not forwarded. No price or payment details beyond the App Store or Google Play transaction are shared, and no habit data is ever included. See revenuecat.com/privacy.

Profile details

When you finish onboarding, norte sends RevenueCat, our subscription provider, some of your answers: the name you typed, your age range, the area of your first habit (such as health or sleep), whether it is a habit to build or to break, whether you picked a suggestion, and how many days a week it is scheduled. It also sends whether you allowed reminders, how many apps and app categories you chose to block, which distraction categories you picked, your choice of reminder before the free trial ends, how many answers you gave about how your phone affects you (only the number), and the app language. The habit text you type and those answers themselves are never sent. We use these details to understand who subscribes, so we can improve norte. Turning off anonymous analytics in Settings → Privacy deletes them from RevenueCat.

No ads in the app, ads elsewhere

norte does not show any advertising inside the app. We run ad campaigns on other platforms — currently only Meta (Facebook and Instagram) — to reach people who do not yet use norte.

During onboarding, iOS shows you Apple's App Tracking Transparency prompt asking for your permission to allow tracking. If you allow it, the app reads your device's advertising identifier (IDFA). If you decline, the IDFA is never read.

Regardless of your answer to that prompt, the Meta SDK generates its own anonymous Meta ID and reports the app install and activation to Meta. It also reports two anonymous signals, with no value attached, when a free trial or a subscription starts. They are used only for ad measurement (on iPhone, through Apple's SKAdNetwork).

RevenueCat separately forwards trial-started, first-purchase, and trial-converted events to Meta's Conversions API, together with the Meta anonymous ID, the device advertising identifier (on iPhone, only if you permitted tracking), the vendor identifier, and your IP address. Renewal events are not sent. No payment details and nothing you do inside the app — habits, check-ins, journal entries, focus sessions, or anything else — is ever shared with Meta.

Turning off anonymous analytics in Settings → Privacy inside the app also stops all of this ad-measurement sharing. You can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking.

On Android there is no tracking prompt. The Firebase and Meta SDKs can read your Android advertising ID. The same switch in Settings → Privacy stops this, and you can also delete or reset the advertising ID in Android Settings → Privacy → Ads (the path varies by phone).

One tap, everything gone

You can delete all your data at any time, directly inside the app:

1. Open the norte app
2. Tap “Settings” (profile icon in the bottom bar)
3. Scroll to the “Privacy” section
4. Tap “Clear all data”
5. Confirm

What is immediately deleted

• All your habits, goals, check-ins, and streaks
• Your profile name and promise letter
• Your journal entries
• Your preferences (language, reminders)
• Your anonymous Firebase Analytics ID

What is not deleted by this action

• Purchase history in your App Store / Google Play account (only Apple / Google control this — for refunds, contact them directly)
• Anonymous crash reports retained by Google for up to 90 days for diagnostic purposes
• Your anonymous RevenueCat subscription record, which is tied to your App Store / Google Play transaction and not to your personal identity
• The profile details sent to RevenueCat (Section 3.2). To delete them, turn off anonymous analytics in Settings → Privacy before you clear your data, or email us.

Because norte does not require account creation or login, all your personal content lives only on your device. Uninstalling the app also permanently deletes all local data. Clearing your data and uninstalling work the same way on iPhone and Android.

For any privacy question or to request deletion of data you believe may have been retained, contact us at imatheusamancio@gmail.com.

Who, what, why

Meta is the only advertising partner we work with. We do not use data brokers.

Third-party privacy policies:

• Google LLC — policies.google.com/privacy
• RevenueCat Inc. — revenuecat.com/privacy
• Apple Inc. — apple.com/privacy
• Meta Platforms, Inc. — facebook.com/privacy/policy
• Amplitude, Inc. — amplitude.com/privacy

How long anything is kept

• On-device data (habits, journal, preferences) — retained until you clear it in-app or uninstall the app. We have no control over this data.
• Firebase Analytics events — retained up to 14 months by Google.
• Firebase Crashlytics reports — retained 90 days by Google.
• RevenueCat subscription records — retained per RevenueCat's policy at revenuecat.com/privacy.
• Meta ad-measurement data — retained per Meta's Data Policy at facebook.com/privacy/policy.
• Amplitude usage events — retained per Amplitude's Privacy Policy at amplitude.com/privacy.

Under 13

The Service is not directed at children under the age of 13. We do not knowingly collect any data from children under 13. If You believe a child under 13 has used the Service, please contact us at imatheusamancio@gmail.com.

Brazilian residents

If you are a Brazilian resident, the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018) grants you the following rights:

• Right of access — confirm whether we process any data about you.
• Right of correction — request correction of inaccurate data.
• Right of deletion — request deletion of data processed with your consent. You can do this directly via Settings → Privacy → Clear all data.
• Right of portability — receive your data in a machine-readable format.
• Right to information — be informed about which third parties we share data with.
• Right to revoke consent — withdraw consent at any time via app Settings. Your two consent controls are the iOS tracking permission (Settings → Privacy & Security → Tracking) and the anonymous analytics switch (Settings → Privacy inside the app). Both can be withdrawn at any time. On Android, you can also delete or reset the advertising ID in Android settings.
• Right to lodge a complaint — file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

Because all personal content is stored locally on your device and we keep cloud data to a minimum, most of these rights are fulfilled by design. For any request, contact us at imatheusamancio@gmail.com.

Beyond Brazil

While norte is initially launched in Brazil, users from other regions may also use the app. For users in the European Union, the data described in Section 3.2 is transferred to and processed in the United States by Google LLC, RevenueCat Inc., Meta Platforms, Inc., and Amplitude, Inc. — all of which maintain appropriate data transfer mechanisms. This Policy will be updated as we expand to additional regions.

How updates work

Material changes will be communicated via an in-app notice at the time they are published. The “Last updated” date above is the date the change takes effect.

Your continued use of the Application after any revised Policy is published constitutes acceptance of the changes.

Questions or requests

• Email — imatheusamancio@gmail.com
• Website — thenorte.app

The waitlist at thenorte.app/android

This section covers only the website waitlist for Norte on Android, which is in Brazilian Portuguese. The app itself still asks for no name, email or phone number, as described above.

• What we keep — name, WhatsApp number, email, the Google account email on your phone, phone brand, whether you want to test early, your Instagram handle when it comes in the link, where the visit came from, the code of whoever referred you, and the date and time you signed up and consented. When someone taps “Download on the App Store” through a referral link, we keep the link code, the time and two one-way hashes (of a random browser cookie, and of IP address plus browser) so a phone counts once. The IP address itself is not stored.
• Why — to tell you about the Android test and launch by email and WhatsApp, to invite you to the closed test on Google Play (your Google account email is added to the tester list in the Google Play Console), to compute your place in the queue, and to stop duplicates and fake referrals. Never for advertising, never sold.
• Legal basis — your consent (LGPD art. 7, I); legitimate interest for the anti-fraud hashes (art. 7, IX).
• Processors — Google LLC (a private Google Sheets spreadsheet, and the Google Play Console), Resend, Inc. (confirmation email), Vercel Inc. (hosting). All in the United States.
• Cookies — norte_fila remembers your place in this browser; norte_dispositivo counts an iPhone referral once per device. First-party, up to two years, no advertising.
• Retention and leaving — kept until 12 months after Norte launches on Android, or until you ask to leave, whichever comes first. The “Sair da lista” link at the end of every waitlist email takes you off at once; to correct or delete your data, write to the contact in Section 12 and we act within 15 days.