Privacy Policy

Effective date: April 5, 2026

Undrift ("we", "our", "us") operates the Undrift: Focus & Calm mobile application. This policy describes what information we collect, how we use it, and your choices.

1. Information We Collect

Account information. When you create an account, we collect your email address (or Apple relay email if you use Sign in with Apple) and an optional display name. If you sign in with Apple and choose "Hide My Email", we receive only the relay address — we never see your real email.

Usage data. We store records of sessions you complete, including session type, duration, mood ratings you provide before and after a session, XP earned, and timestamps. We also store your streak count, achievement progress, puzzle progress, and program enrollment status. This data is used solely to power your in-app experience (streaks, stats, recommendations).

Preferences. We store your in-app preferences such as default session length, selected goals, preferred schedule, and sound/haptic settings.

Subscription data. Subscription purchases are processed by Apple (App Store) or Google (Play Store) through RevenueCat, our subscription management provider. We receive your subscription status and entitlement information. We do not receive or store your payment card details.

2. Information We Do Not Collect

3. How We Use Your Information

4. Data Storage and Security

Your data is stored in Supabase (hosted on AWS in the Singapore ap-southeast-1 region). All data is transmitted over HTTPS/TLS. Row-level security ensures you can only access your own data. Authentication tokens are stored securely on your device using platform-native secure storage.

5. Third-Party Services

We use the following third-party services that may process limited data on our behalf:

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (profile, sessions, achievements, puzzle progress) is permanently deleted via cascading deletion. There is no recovery after deletion.

7. Your Rights

You may request to access, correct, or delete your personal data at any time by contacting us. You can delete your account directly from the app's settings, which permanently removes all your data.

8. Children's Privacy

Undrift is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. International Users

Your data is processed and stored in Singapore. By using the app, you consent to the transfer of your data to Singapore. We comply with applicable data protection laws including the PDPA (Singapore), PDPA (Malaysia), and GDPR where applicable.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or via email. The "Effective date" at the top indicates when the policy was last revised.

11. Contact

If you have questions about this policy or your data, contact us at:

privacy@undrift.my


© 2026 Undrift. All rights reserved.