devo Privacy Policy
devo (“we”, “our”, “the app”) is a daily reflection journal you can share with close friends. This policy describes what data we collect, why, and how it is stored.
TL;DR
- We collect your email address (for sign-in), the reflections and photos you choose to post, and your friend / group connections.
- We use Supabase (a third-party cloud database) to store your data.
- We send push notifications when friends interact with your posts. You can turn this off in settings.
- We do not sell your data. We do not run ads. We do not share your data with anyone outside the service providers listed below.
Information we collect
Account information
- Email address (required for sign-in via Supabase Auth)
- A handle / display name you choose
- Optional profile picture you choose to upload
Content you create
- Daily reflections (text)
- Photos you attach to reflections (taken with the camera or chosen from your photo library)
- Comments and reactions you leave on others’ reflections
- Mentions of friends in your reflections
Social graph
- Friend requests you send and accept
- Group memberships
- Audience selection (which friends or groups can see each post)
Device information
- Push notification token (Apple/Google-issued, used to deliver push notifications)
- Notification preferences (which categories of pushes you have enabled)
We do not collect
- Location data
- Contact list from your phone
- Browsing history outside the app
- Health, financial, or biometric data
- Tracking identifiers for advertising
How we use your information
- Sign you in and keep your session
- Display your reflections to the audience you chose (specific friends, groups, or yourself only)
- Send push notifications when friends react to, comment on, or mention you in a reflection
- Maintain your reflection archive and streak
Where your data is stored
- Supabase (
supabase.com) — primary database, file storage (your photos), authentication - Apple Push Notification Service — iOS push delivery
- Firebase Cloud Messaging (Google) — Android push delivery
- Expo / EAS — over-the-air app updates
These providers process data on our behalf under their own terms. They do not have permission to use your data for any other purpose.
Sharing
We do not share your personal data with third parties for marketing or advertising. The only sharing that happens:
- Reflections you post are visible to the friends or groups you select as the audience.
- Comments and reactions you leave on a friend’s reflection are visible to that reflection’s audience.
- Mentions notify the mentioned friend.
You control all of this in the app.
Your rights
You can:
- Edit or delete your reflections at any time (Archive screen)
- Remove friends or leave groups (Friends / Groups screens)
- Disable push notifications (Settings)
- Delete your account by emailing us at the address below
When you delete your account, we delete your reflections, photos, and account data within 30 days.
Children
devo is not intended for children under 13. If you believe a child under 13 has created an account, contact us and we will remove it.
Changes
We may update this policy. Material changes will be announced in-app. The “Last updated” date at the top will always reflect the current version.
Contact
Email: kcan0106.kh@gmail.com