Privacy
How JPott Studios apps handle data, including local storage, optional encrypted services, purchases, permissions, exports, and deletion.
This policy covers Streaks Garden, Softly Noted, MoonEase, Gentle Range, Our Little Thing, and Kind to Me (together, the “apps”). They are developed by JPott Studios.
The apps are designed to work local-first. Most activity and content is kept in private app storage on the device. The reviewed code does not include third-party advertising SDKs or remote behavioral analytics. Each app records limited activity counters locally to power its own progress or product experience; those counters are not sent to JPott Studios by the reviewed builds.
Network processing occurs only when a feature requiring it is configured and used—for example, store purchase verification, optional encrypted sync, optional partner pairing, or protected MoonEase downloads. A feature shown in this policy may be unavailable in a particular build.
Stores habits, schedules, check-ins, notes, garden progress, reminder choices, theme, onboarding state, widget data, and local activity counters on the device. User-created backups are JSON files and are not encrypted by the app. If optional sync is configured and enabled, an account email and authentication records are processed by the sync provider, while habit records are encrypted on the device before upload.
Stores journal entries, moods, factors, reminders, theme, and local activity counters. Journal records are encrypted at rest with a device-specific key. Copies of photos selected by the user are saved in the app’s private documents area; the app does not claim those image files are separately encrypted at rest. New backup exports are password-encrypted and may include journal photos. Optional sync uploads encrypted journal records, not the local photo files.
Stores favorites, saved mixes, playback preferences, bedtime reminder choices, theme, download state, and local activity counters. Included audio works locally. If protected premium downloads are configured, MoonEase creates a private anonymous download identity and uses purchase entitlement information to authorize short-lived download links. Personal mixes are not uploaded by this flow.
Stores completed-session history, streak information, custom routines, reminder and voice-cue choices, theme, onboarding state, widget data, and local activity counters. User-created backups are JSON files and are not encrypted by the app. If optional sync is configured and enabled, workout history and custom routines are encrypted on the device before upload.
Stores profiles, answers, notes, dates, memories, chosen photos, saved prompts, settings, and local activity counters on the device. If partner pairing is configured and the user opts in, Supabase processes account credentials and service metadata; the service stores pair membership, key fingerprints, entitlement ownership, and encrypted shared records. The pairing service is designed not to receive plaintext answers. Memory photo files stay local and are not part of the encrypted partner record flow.
Stores favorites, personal affirmations, categories, reminder choices, tone, practice history, speech preferences, theme, local activity counters, and voice recordings. Voice recordings are created only after microphone permission is granted and the user starts recording. If optional sync is configured and enabled, favorites, personal affirmation text, and recording metadata may be encrypted before upload; recording audio files stay local.
| Permission or feature | Apps | Purpose |
|---|---|---|
| Notifications | All six apps | Optional reminders scheduled by the app. Users can decline or disable notifications in device settings. |
| Photo library | Softly Noted, Our Little Thing | Choose photos for journal entries or memories. The reviewed apps request access when the user initiates the photo feature and copy selected media into app storage. |
| Microphone | Kind to Me | Record a personal affirmation after the user deliberately starts recording. Background recording is not enabled in the reviewed configuration. |
| Biometrics | Softly Noted | Optional app lock. Face or fingerprint matching is performed by the operating system; the app receives only the authentication result. |
| Calendar | Our Little Thing | Add a selected date idea or special date to the user’s calendar after permission is requested. |
| Apple Health / Health Connect | Gentle Range, only in a build that supports the native integration | Write a completed flexibility session and related timing information after the user opts in. The reviewed integration requests write access, not permission to read health history. JPott Studios does not receive the health record through this feature. |
| File picker and share sheet | All six apps | Import or export user-selected backup/report files, or share user-selected content. The destination provider is chosen by the user. |
| Widgets / app groups | Where offered | Show a limited snapshot, such as a habit, mood, routine, prompt, or affirmation, in a device-controlled widget area. |
The reviewed builds do not request precise location, contacts, or camera capture. Permissions and available features can differ by operating system and app version.
Streaks Garden, Softly Noted, Gentle Range, and Kind to Me contain optional account-based sync implementations. Our Little Thing contains optional account-based partner pairing. MoonEase contains an optional anonymous account for protected downloads. These services are disabled or unavailable unless the production build contains valid service configuration.
When an account feature is used, the service may process an email address, account identifier, password authentication result, session tokens, timestamps, record identifiers, version/conflict metadata, and encrypted content. Passwords are handled by the authentication provider and are not intentionally stored in app-readable local data. A separate sync passphrase may be used to derive an encryption key on the device; losing it may make encrypted records unrecoverable.
Encryption reduces exposure but no security measure is perfect. Users should keep their devices, account passwords, sync passphrases, and exported files secure.
The reviewed implementations are designed to use Supabase for configured authentication, encrypted record storage, partner pairing, and protected-download functions; RevenueCat for purchase entitlements; and Apple or Google for app distribution, payment, and operating-system services. These providers process information on JPott Studios’ behalf or under their own platform relationship with the user. Their production configuration and retention settings must be confirmed before launch.
JPott Studios does not use the reviewed apps to sell personal information, serve behavioral advertising, or share app activity for cross-context behavioral advertising. Information may be disclosed when reasonably necessary to operate a feature the user requests, comply with law or valid legal process, protect users and systems, investigate abuse, or complete a business reorganization subject to applicable safeguards.
If a paid product is offered, Apple or Google processes payment and provides purchase information. The apps are designed to use RevenueCat to obtain available products, validate receipts, restore access, and determine whether a premium entitlement is active. JPott Studios does not receive full payment-card details from the apps.
RevenueCat and the app store may process a store receipt, product identifier, purchase status, country/storefront information, and an app-user identifier. For Our Little Thing pairing or MoonEase protected downloads, a service account identifier may be associated with purchase entitlement status so the server can authorize shared access or protected content. See RevenueCat’s privacy policy, Apple’s privacy policy, and Google’s privacy policy.
When a user exports a backup, report, image, prompt, or other content, the operating system presents destinations such as Files, email, messaging, or cloud storage. JPott Studios does not automatically receive that exported file. After the user sends or saves it, the destination provider’s terms and privacy practices apply.
Except for Softly Noted’s current password-encrypted backup format, reviewed app backups are ordinary JSON files and may contain readable personal content. Kind to Me backups may embed voice-recording bytes. Our Little Thing backup files do not make the app’s separate memory photo files portable. Users should store and transmit exports carefully.
Local data remains until the user deletes items, uses an available in-app clear-data control, replaces data during restore, or removes the app data from the device. Operating-system backups and copies exported by the user are controlled by the user and the selected platform or destination.
When optional account services are available, Streaks Garden, Softly Noted, Kind to Me, Our Little Thing, and MoonEase provide account or service-copy deletion controls in their relevant sync, pairing, or download settings. Gentle Range’s reviewed sync implementation includes encrypted-record deletion and authentication support, but the exact production deletion experience must be confirmed before that service is enabled. See the data and account deletion guide for app-specific steps and fallback support.
The static files prepared for these pages do not contain advertising, analytics scripts, tracking pixels, contact forms, or code that sets cookies. The selected production web host may still process standard request information such as IP address, requested URL, browser information, and timestamp for security and delivery logs. The host and its retention settings must be added to this policy if they materially change that handling.
The apps are intended for a general audience and are not directed to children under 13. JPott Studios does not knowingly use the apps to solicit personal information from children. If you believe a child has provided account information through an enabled service, contact us so we can investigate and take appropriate action.
Depending on where a user lives and whether an account service is enabled, they may have rights to request access, correction, deletion, or information about service-side personal data. Most app content is local and is not available to JPott Studios. To make a request, follow the deletion instructions or contact jpottstudios@gmail.com. We may need enough information to identify the applicable app and service account; do not email journal entries, passwords, pairing codes, or other sensitive content.
This policy may be updated as app features, service providers, or legal requirements change. The “updated” date above will change whenever this policy is revised.
Privacy questions: jpottstudios@gmail.com. General support is available on the support page.