Privacy Policy

Introduction

Compound ("we", "our", or "us") operates the Compound mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

By using the App, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect the information provided through your chosen sign-in method:

• Sign in with Apple: Your Apple ID identifier and, if you choose to share it, your name and email address. Apple may provide a private relay email address.
• Sign in with Google: Your Google account identifier, name, and email address.
• Email Link Sign-In: Your email address.

Authentication is handled by Firebase Authentication, a service provided by Google LLC.

User Data

The App stores your daily trajectory entries in Cloud Firestore, a service provided by Google LLC. Each entry contains:

• A calendar date
• Your answer for that day (Closer, Same, Further, or unanswered)

Your data is stored under a user-scoped path (users/{your-user-id}/entries/), and Firestore security rules ensure that only you can read or write your own data.

Analytics

We use Firebase Analytics to collect anonymous usage data, such as app opens, screen views, and general engagement metrics. This data is aggregated and does not personally identify you. Analytics helps us understand how the App is used so we can improve it.

App Integrity

We use Firebase App Check with Apple's App Attest service to verify that requests to our backend come from genuine instances of the App. This protects your data from unauthorized access. App Check does not collect personal information.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the App
• Authenticate your identity and secure your account
• Store and sync your trajectory data across your devices
• Analyze anonymous usage patterns to improve the App
• Protect the integrity of the service

Data Storage and Security

Your data is stored in Google Cloud infrastructure (Cloud Firestore) with encryption at rest and in transit. Access to your data is restricted by Firestore security rules that enforce user-scoped access — no other user or unauthorized party can access your entries.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by Google LLC as part of the Firebase services described above, subject to Google's privacy practices.

Data Retention and Deletion

Your data is retained for as long as your account is active. You can delete your account and all associated data at any time from within the App's Settings. Upon account deletion, your trajectory entries and account information are permanently removed from our systems.

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the App or on our website. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at support@compound.mriy.io.