Privacy policy
Wheel of the Year is designed to keep your journal and personal settings on your device. There is no account or login. Purchases, usage analytics, crash reports and optional support messages use the services described below.
What stays on your device
- Every journal entry you write, including titles, text and any festival or moon phase attached to it.
- Your journey progress: which steps you have completed or skipped.
- Your settings: language, notification choices, motion and haptics.
- The practice interests you selected during onboarding.
The complete records above stay local; we do not hold a server copy of your journal, progress or preferences. Limited interaction events, including journey references and step numbers, are sent for analytics as described below. Content you choose to export, share or include in a support message is sent only through that action. Export a backup before deleting the app if you want to keep your local data.
Purchases
Subscriptions are handled by RevenueCat, acting as our processor, on top of the Apple App Store or Google Play. When you buy or restore a subscription, RevenueCat receives a randomly generated anonymous identifier, your purchase receipt, and basic device and country information supplied by the store. It does not receive your name, email address, journal contents or practice interests.
Payment itself is handled entirely by Apple or Google. We never see your card details.
Advertising
This app contains no advertising SDK and no cross-app tracking. It does not build an advertising profile, does not use the device advertising identifier, and does not sell personal data. The service providers described below receive data to operate the app and provide support.
Pseudonymous usage data
To understand which parts of the app are useful, it records a short, fixed list of actions — opening the app, viewing a screen, starting a journey, saving a journal entry — and sends them to PostHog, on servers in the European Union.
Analytics never includes journal text, journal titles, contact messages, email addresses or selected practice interests. Screen names use general route patterns, so opening a journal entry never sends that entry’s identifier. Events may include app-defined festival or journey references, step numbers, aggregate counts, purchase products, experiment variants and campaign attribution. PostHog uses a separate randomly generated installation identifier, which we do not associate with your support reference or email. We do not record your screen or use analytics to personalise your content.
Crash reports
When the app fails, it sends a crash report so the fault can be found and fixed. This happens in released versions only. A report contains the technical stack trace, your device model, your operating system version and the app version — nothing else.
A crash report carries no screenshot, no copy of the screen, no IP address and no device name, and it never contains what you have written. Reports are processed by Sentry, acting as our processor, on servers in the European Union.
Beliefs and sensitive data
Religious and spiritual belief is a special category of personal data. Your selected practice interests and journal contents stay local and are not automatically transmitted. General app interactions are recorded as described above. Please avoid including sensitive personal information in a support message; any text you choose to send is received by support.
Contacting support
Sending the optional in-app contact form transfers your selected subject, message, optional email address, submission reference and a separate resettable support identifier through Cloudflare to our Discord support channel. The form previews technical information: app identifier, version and build, platform, operating system version, manufacturer, device model and type, and language. No journal content, device name, advertising identifier, push token, analytics identifier or purchase identifier is automatically attached. An email address is needed only if you want a reply, which is sent by email. The message and email draft are held only in the open form, not saved by the app.
Cloudflare deletes the active delivery payload after confirmed delivery to Discord, or within 72 hours if undelivered; retries stop after 24 hours. Short-lived abuse limits use keyed IP digests, not stored raw IP addresses. Delivery receipts expire after seven days. The app owner manually deletes Discord support messages within 30 days after the request is resolved; this is not automated. Cloudflare backup and point-in-time recovery and Discord provider retention may retain data separately under their own policies. These limits do not promise immediate removal from every provider backup.
To request deletion of a support message, email contact@sabbats.app with its submission reference or support identifier and, if useful, the email address originally supplied. We locate and remove matching support messages and confirm the result. Resetting your support identifier or deleting local app data does not delete messages already sent. Do not send unrelated analytics identifiers for this request.
Notifications
All reminders are scheduled locally by your device. There is no push server and no push token is created or transmitted. Turning a reminder off removes its pending notifications immediately.
Your rights
- Export: Settings → Your data → Export, as JSON or plain text.
- Local deletion: Settings → Your data → Delete data on this device. This immediately removes journal entries, journey progress and preferences stored by the app.
- Remote deletion: Settings → Your data → Request deletion of remote data, or visit sabbats.app/data-deletion. This requests deletion of pseudonymous analytics and subscription-service records. Support-message deletion is a separate request as described above.
- A deletion request does not cancel a subscription. Apple and Google retain payment records under their own legal and privacy obligations.
Children
This app is not directed at children under 13 and does not knowingly collect information from them.
Contact
Questions about this policy: contact@sabbats.app