Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Your name and email address
• Your sport, experience level, and competition status (provided during onboarding)
• Authentication credentials (passwords are hashed and never stored in plain text)

If you sign in with Apple or Google, we receive your name, email address, and a unique identifier from that provider. We do not receive or store your Apple or Google password.

1.2 Journal Entries

We collect the content you write in journal entries, including:

• Intentions, reflections, and free-write responses
• Self-reported metrics: effort (RPE), duration, and focus scores
• Daily check-in scores: sleep quality, soreness, and motivation (scale of 1–7)

This is the core of what Sherpa does. Your entries are stored securely and are only accessible to you.

1.3 Usage Data and Analytics

We use PostHog to collect usage analytics linked to your account, including:

• Which features you use and how often
• App navigation patterns
• Error and crash diagnostics

To associate analytics with your account, we send PostHog your email address and display name alongside event data. This allows us to understand usage patterns, troubleshoot issues, and provide better support.

PostHog analytics are configured to respect your device's tracking preferences. We do not sell analytics data.

1.4 Device Information

We collect:

• Push notification tokens (if you enable notifications), used solely to deliver reminders you configure
• Device type and operating system version (collected automatically by our infrastructure)

1.5 Voice Input (On-Device Only)

Sherpa offers optional voice-to-text input using your device's built-in speech recognition (e.g., Apple Speech on iOS). Voice processing happens entirely on your device. Audio is not transmitted to our servers or any third party. You can revoke microphone and speech recognition permissions at any time in your device settings.

1.6 Information We Do NOT Collect

• Payment card details or billing information (Sherpa is currently free; if we introduce paid features in the future, payments will be handled by the applicable platform, such as the Apple App Store)
• Precise location data
• Contacts, photos, or camera data
• Health app or fitness tracker data

2. How We Use Your Information

We use your information to:

• Provide and maintain the app (account management, entry storage, streak tracking, XP awards)
• Generate AI-powered insights based on your journal entries (see Section 3)
• Send push notifications for reminders you configure
• Analyze aggregate usage patterns to improve the app
• Provide customer support
• Comply with legal obligations

3. AI-Generated Insights

Sherpa generates personalized insights from your journal entries using OpenAI's API. When an insight is triggered:

• Relevant journal entry text is sent to OpenAI for processing
• OpenAI processes this data under their API data usage policy, which states that API inputs are not used to train their models
• Generated insights are stored in your account and are only visible to you

You can review OpenAI's privacy practices at openai.com/policies/privacy-policy.

4. How We Store and Protect Your Data

• Your data is stored on Supabase, a cloud infrastructure provider
• All data is encrypted in transit (TLS) and at rest
• Database access is enforced through row-level security — each user can only access their own data
• Authentication tokens are stored in your device's secure keychain/keystore
• We do not store passwords in plain text; they are hashed before storage

5. Data Sharing

We do not sell your personal information. We share data only with:

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of Sherpa or its users.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access your data — View all your journal entries, check-ins, and profile information within the app
• Delete your data — You can delete your account and all associated data from the app's settings. Account deletion is permanent and cannot be undone.
• Export your data — Contact us to request a copy of your data in a portable format
• Opt out of analytics — Contact us at info@sherpajournal.app to opt out of product analytics
• Manage notifications — Enable or disable push notifications in your device settings or within the app
• Revoke voice permissions — Disable microphone and speech recognition access in your device settings at any time

To exercise any of these rights, contact us at info@sherpajournal.app.

For California residents (CCPA): We do not sell personal information. You have the right to know what data we collect and to request its deletion.

For EU/EEA residents (GDPR): Our legal basis for processing is your consent (account creation) and legitimate interest (app improvement via usage analytics). You may withdraw consent at any time by deleting your account.

7. Data Retention

• Your account data and journal entries are retained as long as your account is active
• When you delete your account, all associated data (profile, entries, insights, awards, goals, check-ins, and device tokens) is permanently deleted
• Anonymized, aggregated analytics data may be retained after account deletion
• We do not retain voice audio — speech recognition is processed on-device and not transmitted

8. Children's Privacy

Sherpa is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. If we make material changes, we will notify you by email or through a notice in the app before the changes take effect. Your continued use of Sherpa after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: info@sherpajournal.app