Privacy policy
Wheel of the Year is designed so that almost nothing about you needs to leave your device. There is no account, no login, and no user profile held anywhere.
What stays on your device
- Every journal entry you write, including titles, text and any festival or moon phase attached to it.
- Your journey progress: which steps you have completed or skipped.
- Your settings: language, notification choices, motion and haptics.
- The practice interests you selected during onboarding.
None of the above is transmitted to us or to anyone else. We do not receive it, cannot read it, and hold no copy. If you delete the app, that data is gone — so export a backup first if you want to keep it.
Purchases
Subscriptions are handled by RevenueCat, acting as our processor, on top of the Apple App Store or Google Play. When you buy or restore a subscription, RevenueCat receives a randomly generated anonymous identifier, your purchase receipt, and basic device and country information supplied by the store. It does not receive your name, email address, journal contents or practice interests.
Payment itself is handled entirely by Apple or Google. We never see your card details.
Advertising
This app contains no advertising SDK and no cross-app tracking. It does not build an advertising profile, does not use the device advertising identifier, and does not sell or share personal data.
Anonymous usage data
To understand which parts of the app are useful, it records a short, fixed list of actions — opening the app, viewing a screen, starting a journey, saving a journal entry — and sends them to PostHog, on servers in the European Union.
What is never included: anything you write. No journal text, no journal titles, no practice interests. Screen names are reduced to their general form before being sent, so opening a journal entry is recorded as “a journal entry” and never as which one. There is no account and no sign-in, so nothing identifies you — only an anonymous number generated on your device. We do not record your screen, and we do not use this data to decide what you are shown.
Crash reports
When the app fails, it sends a crash report so the fault can be found and fixed. This happens in released versions only. A report contains the technical stack trace, your device model, your operating system version and the app version — nothing else.
A crash report carries no screenshot, no copy of the screen, no IP address and no device name, and it never contains what you have written. Reports are processed by Sentry, acting as our processor, on servers in the European Union.
Beliefs and sensitive data
Religious and spiritual belief is a special category of personal data. We therefore treat your practice interests, journal entries and festival activity as strictly local: they are never sent to a server, never attached to a purchase, and never included in any diagnostic report.
Notifications
All reminders are scheduled locally by your device. There is no push server and no push token is created or transmitted. Turning a reminder off removes its pending notifications immediately.
Your rights
- Export: Settings → Your data → Export, as JSON or plain text.
- Local deletion: Settings → Your data → Delete data on this device. This immediately removes journal entries, journey progress and preferences stored by the app.
- Remote deletion: Settings → Your data → Request deletion of remote data, or visit sabbats.app/data-deletion. This requests deletion of anonymous analytics and subscription-service records.
- A deletion request does not cancel a subscription. Apple and Google retain payment records under their own legal and privacy obligations.
Children
This app is not directed at children under 13 and does not knowingly collect information from them.
Contact
Questions about this policy: contact@sabbats.app