Overview
This Privacy Policy explains how Prompto ("Prompto," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Prompto mobile application, Apple Watch features, and the web dashboard at calendar.promptoapp.co (together, the "Service"). Prompto is the controller of personal information covered by this Policy. Contact us at hello@promptoapp.co.
1. Information We Collect
The information we collect depends on the features you use and the permissions you grant. It may include:
- Account information: Firebase user ID, display name, email address, sign-in provider, and authentication information from Apple or Google.
- Content and activity: tasks, subtasks, events, routines, goals, bingo boards, life-audit responses, identity profiles, commitments, reflections, streaks, timer and progress information, settings, and related metadata.
- Photos and images: goal images, progress photos, images selected for event import, and screenshots you choose to include in a support report.
- AI inputs and outputs: prompts, task or goal context, images, and generated responses when you choose an AI-assisted feature.
- Location and weather information: your device's location when you grant permission for local weather, plus a coarse location cell and cached weather results stored on your device.
- Audio and speech: microphone audio used for dictation or recordings. Saved affirmation recordings are stored locally unless a feature clearly tells you otherwise. Speech recognition may be processed by Apple depending on device and language support.
- Subscription information: product, entitlement, transaction status, trial status, renewal, and expiration information made available through Apple. We do not receive your full payment-card details.
- Device and support information: device identifier for vendor, Firebase messaging token, platform, device model, operating-system version, app version, issue category, issue description, and optional support screenshot.
2. How We Collect Information
We collect information directly from you, automatically from your device when needed to provide a feature, from Apple or Google when you sign in or purchase a subscription, and from service providers that operate the Service. Device permissions such as location, microphone, speech recognition, photos, and notifications are controlled through your operating-system settings.
3. How We Use Information
We use personal information to:
- Create, authenticate, maintain, and secure your account.
- Provide, sync, personalize, and troubleshoot the Service across supported devices and the web dashboard.
- Process subscriptions and determine access to paid or trial features.
- Generate AI-assisted suggestions, summaries, images, imports, and other results you request.
- Provide weather, reminders, notifications, Apple Watch synchronization, data export, and support.
- Detect abuse, prevent fraud, enforce our Terms, protect users and the Service, and comply with legal obligations.
- Understand and improve reliability and performance using information available through support and normal service operations.
4. Storage & Synchronization
Prompto stores some information locally on your device. Signed-in account content is also stored and synchronized through Google Firebase services so it can be available across the iOS app, web dashboard, and supported devices. Goal images and progress photos may be stored in Firebase Cloud Storage. Local caches may remain until you remove the content, sign out, clear the app's data, or uninstall the app.
5. AI Processing
When you choose an AI-assisted feature, Prompto sends OpenAI the text, images, instructions, and context needed to complete your request. The data sent depends on the feature and may include content such as goals, tasks, events, identities, reflections, or a selected image. Prompto does not intentionally add your account name or email address to an AI request, but information you include in your content may still identify you or another person. OpenAI processes this information under its applicable business/API terms and privacy commitments. Avoid submitting sensitive information you do not want processed by OpenAI.
6. Location, Photos, Microphone & Notifications
Location access is optional and used to request local forecasts from Apple WeatherKit. A coarse location cell and weather response may be cached on your device; Prompto does not store your precise location in your account database. Photo access is used only for images you select. Microphone and speech permissions support dictation and user-initiated recordings. Local notifications deliver reminders on your device. Firebase Cloud Messaging tokens and a device identifier are stored with your account to deliver silent synchronization messages for supported web and Apple Watch features.
7. How We Disclose Information
We disclose personal information only as needed to operate the Service, process a request you make, protect the Service or others, complete a business transaction, or comply with law. Recipients may include:
- Google Firebase and Google Cloud for authentication, databases, file storage, server functions, and device messaging.
- Apple for Sign in with Apple, StoreKit subscriptions, WeatherKit, device permissions, speech recognition where applicable, and platform services.
- Google Sign-In for authentication when you select it.
- OpenAI for AI-assisted features you choose to use.
- Vercel for hosting the web dashboard.
- Resend and related email infrastructure when you submit an in-app issue report.
- Professional advisers, authorities, or other parties when reasonably necessary to comply with law, establish or defend rights, investigate abuse, or protect safety.
- A buyer, successor, or adviser in connection with a merger, financing, reorganization, or sale of all or part of the Service, subject to appropriate safeguards.
8. No Sale or Advertising
Prompto does not sell personal information, use it for targeted advertising, or share it for cross-context behavioral advertising. We do not use third-party advertising SDKs. We may disclose information to service providers for the business purposes described in this Policy.
9. Legal Bases in the EEA and UK
Where European data-protection law applies, we process information as necessary to perform our contract with you, including providing your account, synchronization, requested AI features, and subscriptions; with your consent, including for optional device permissions; for our legitimate interests in securing, supporting, and improving the Service where those interests are not overridden by your rights; and to comply with legal obligations. You may withdraw consent at any time, without affecting earlier processing.
10. International Transfers
Prompto and its service providers may process information in the United States and other countries that may have different data-protection laws from your country. Where required, we rely on recognized safeguards for international transfers, such as adequacy decisions, contractual protections, or service-provider transfer mechanisms.
11. Retention
We retain account information and synced content while your account is active and as reasonably necessary to provide the Service. Retention may vary by data type and may continue where needed for backups, security, fraud prevention, dispute resolution, legal compliance, or enforcement. Support reports and related emails may be retained as needed to resolve the issue and maintain support records; an uploaded issue screenshot is deleted from temporary Firebase storage after successful email delivery, although the emailed copy may remain with the report. When information is no longer required, we delete or de-identify it.
12. Your Choices & Rights
You may update certain account information, manage permissions and notifications in device settings, manage subscriptions through Apple, export supported account data from Prompto, delete individual content through relevant features, or request account deletion. Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or obtain a portable copy of personal information, withdraw consent, or appeal a refused request. You may also complain to your local data-protection authority. To exercise a privacy right, email hello@promptoapp.co. We may need to verify your identity and may retain information where law permits or requires.
13. California and Other U.S. State Rights
Residents of California and certain other U.S. states may have rights to know or access personal information, correct inaccuracies, delete information, and obtain a portable copy, subject to exceptions. You may also have rights concerning sale, sharing, targeted advertising, and certain profiling; Prompto does not engage in those activities as described above. We will not discriminate against you for exercising a privacy right. You may use an authorized agent where applicable. Submit requests to hello@promptoapp.co.
14. Account Deletion
You may initiate account deletion in Prompto or email hello@promptoapp.co. Export information you want to keep first. After a verified deletion request, we will delete or de-identify personal information associated with the account, subject to reasonable processing time, technical limitations, backups, and legal exceptions. Deleting the app removes its local app container from that device but does not by itself delete cloud data or cancel an Apple subscription.
- Removing individual content may also remove it from synchronized devices after sync completes.
- Deleting your account does not automatically cancel a Prompto Pro subscription managed by Apple.
15. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network connections, authentication controls, and Firebase access rules. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Protect your account, device passcode, and sign-in credentials and contact us if you suspect unauthorized access.
16. External Services & Links
The Service may open third-party services such as Pinterest, map applications, Apple subscription settings, or legal-attribution pages. Information you provide to or activity occurring on those services is governed by their privacy policies, not this Policy.
17. Children's Privacy
Prompto is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Users under the age of legal majority where they live must have a parent or legal guardian review and agree to the Terms. Where applicable law requires parental consent to process a user's personal information, Prompto may be used only with that consent. If you believe a child under 13 has provided personal information through the Service, contact hello@promptoapp.co so we can investigate and take appropriate action.
18. Changes to This Policy
We may update this Policy as the Service or law changes. We will revise the date above and provide additional notice when required. If a change materially affects how we use information already collected, we will take any additional steps required by applicable law.
19. Contact Us
For privacy questions, requests, or complaints, contact Prompto at hello@promptoapp.co.