Privacy policy.

HardPass (“we”, “us”) is an independent app made in Switzerland. We are responsible for the personal data described here. Questions or requests: mg.app.software@gmail.com.

• No account, no email, no name, no phone number. You are a random ID.
• We never connect to your bank and never see your transactions.
• Your challenges, urges and check-ins live on your phone.
• An anonymous backup is on by default so your data survives a reinstall. You can turn it off at any time.
• No ads, no ad tracking, and we never sell your data.

Everything you create in the app is stored locally on your device: your challenges and rules, the urges you log (item, category, trigger, price if you add one, and the outcome), daily check-ins (clean day or slip, mood and notes), your savings goal and your settings. A random device ID and an access token are kept in your phone's secure storage so your backup can find you again after a reinstall.

Reminders, including the 24-hour “still want it?” nudge, are scheduled on your phone. We do not use push tokens.

Share cards are drawn on your phone. They only leave it when you choose to share them, through the app you pick.

1. Anonymous backup and sync

When Backup & sync is on (the default), a copy of your challenges, urges and check-ins is sent to our server so it can be restored if you reinstall. It is linked only to the random device ID, never to your name, email or phone number. Our server runs on Cloudflare (Workers and D1 database). Turn it off in Settings > Backup & sync and nothing more is uploaded.

2. AI features

Some features write text for you: the nudge on the 24-hour screen, share captions, trigger insights and suggested categories and prices. To do that, the app sends only what the feature needs (for example the item name, category, price, trigger, a summary of your streak and savings, and your language) to our server, which passes it to an open-source language model running on Cloudflare Workers AI. We do not store these requests. If the AI is unavailable, the app falls back to built-in text and keeps working.

3. Analytics and crash reports

We use Firebase Analytics and Firebase Crashlytics (Google) to see which features are used and to fix crashes. This includes events such as “challenge started” or “urge logged” with the challenge length or category, the random device ID, app version, device model, operating system, language and approximate country. Prices are only ever sent as coarse bands (for example “under 20”), never as exact amounts, and item names and notes are never sent. Crash reports contain technical diagnostics about the crash.

4. Purchases

HardPass Pro is sold through the App Store and Google Play. Payment is handled entirely by them; we never see your card details. We use RevenueCat to check which purchases are active. RevenueCat receives an anonymous app user ID and your purchase records from the store.

We rely on a small number of processors, each only for the purpose above:

• Cloudflare, Inc.: hosting of our API, the backup database, and AI text generation.
• Google LLC (Firebase): usage analytics and crash reporting.
• RevenueCat, Inc.: subscription status.
• Apple and Google: app distribution and payments, under their own privacy policies.

These providers may process data outside Switzerland and the EEA, including in the United States. Where that happens we rely on the safeguards they offer, such as the Standard Contractual Clauses and the Swiss-U.S. and EU-U.S. Data Privacy Frameworks.

• Connect to a bank or read your transactions.
• Show ads or use advertising identifiers.
• Track you across other apps or websites.
• Sell, rent or trade personal data.

Where the EU or UK GDPR applies, we process data to provide the features you use (performance of a contract), and for analytics, crash reporting and backup on the basis of our legitimate interest in running a reliable app, which you can object to at any time. Under the Swiss Federal Act on Data Protection (FADP), we process data according to the same principles.

• On your phone: until you delete it or uninstall the app.
• Backup: for as long as backup is in use, or until you ask us to delete it.
• Analytics: according to Firebase's retention settings, at most 14 months. Crash reports: about 90 days.
• Purchase records: as long as needed to provide Pro and to meet legal and accounting obligations.

Settings > Clear all local data erases everything on your phone and discards the device's anonymous ID, which also unlinks any backup from you. To have your backup erased from our server as well, email mg.app.software@gmail.com. We will delete it and confirm within 30 days.

Depending on where you live, you can ask to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent. Because we don't know who you are, we may ask for details that help us find the right anonymous records. Write to mg.app.software@gmail.com. You can also complain to your data protection authority; in Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC).

HardPass is not directed at children under 13, or under 16 where local law sets a higher age, and we do not knowingly collect their data. If you believe a child has used the app, contact us and we will delete the related data.

Data sent to our server travels over HTTPS and is tied to a secret token that stays on your device. No system is perfectly secure, but we keep what we hold to the minimum the app needs.

If this policy changes, we will update it here and change the date at the top. Significant changes will also be announced in the app.

mg.app.software@gmail.com