Privacy
How JPott Studios apps handle data, including local storage, optional encrypted services, purchases, permissions, exports, and deletion.
This policy covers Planted Habits, Softly Noted, MoonEase, Gentle Range, Our Little Thing, Kind to Me, Neatly Packed, and Linelet (together, the “apps”). They are developed by JPott Studios.
The apps are designed to work local-first. Your content (habits, journal entries, moods, notes, trips, packing lists, budgets, documents, answers, memories, affirmations, recordings, and puzzle progress) stays in private app storage on the device. The reviewed code does not include third-party advertising SDKs or cross-app tracking. Each app records limited activity counters locally to power its own progress or product experience. Each app can also send anonymous usage counts to JPott Studios to guide improvements: how often a screen or feature is opened, plus coarse signals such as app version, platform, and (in some apps) how many days the app has been used. These counts never include your content, name, email, or precise location, and are tied to a random per-install tag that identifies an install, not a person, and is not linked to any account. Sharing defaults vary by app: some apps enable it by default and provide a switch in Settings, while others require an explicit opt-in. See each app's description below for its choice and the data it sends. Where enabled, uploads are limited to at most once per day and occur only when the app's optional server configuration is present. The server tables that receive these counts are append-only: an app can add a count but can never read or change any record.
App use and crash reports (from app updates released in October 2026 onward). Under the same anonymous usage choice in each app, the phone and tablet apps also send anonymous app-use events and crash reports to PostHog, our analytics service, which stores them in the United States. These events say which screens were opened, which fixed app steps happened (for example, opening the Premium screen, starting a purchase, or finishing a sign-in), when the app was opened and for how long, and technical details of a crash. Each event carries the app name and version, platform, device type, and the same kind of build label described above, tied to a random identifier created on the device. They never include your name, email, account, or anything you write, choose, or save in the app. PostHog is set not to store IP addresses; it may use the IP address briefly to estimate a country before discarding it. We do not use these events for advertising, and they are not linked to any account. Turning off the usage switch in Settings stops them too.
Network processing occurs only when a feature requiring it is configured and used, for example, store purchase verification, optional encrypted sync, optional partner pairing, or protected MoonEase downloads. A feature shown in this policy may be unavailable in a particular build.
Stores habits, schedules, check-ins, notes, garden progress, reminder choices, theme, onboarding state, widget data, and local activity counters on the device. User-created backups are JSON files and are not encrypted by the app. If optional sync is configured and enabled, an account email and authentication records are processed by the sync provider, while habit records are encrypted on the device before upload.
Stores journal entries, moods, factors, feelings, notes, reminders, theme, optional free voice-to-text transcripts (text only), optional Premium local audio-memory files, and local activity counters. Journal records are encrypted at rest with a device-specific key. Copies of photos selected by the user are saved in the app’s private documents area; the app does not claim those image files are separately encrypted at rest. New backup exports are password-encrypted and may include journal photos and audio-memory files. Optional sync uploads encrypted journal records and photo references, not live photo/audio file bytes, unless a future configured path explicitly says otherwise. The home-screen widget is a privacy-safe launcher and does not display mood, notes, or streaks.
Stores favorites, saved mixes, playback preferences, bedtime reminder choices, theme, download state, and local activity counters. Included audio works locally. If protected premium downloads are configured, MoonEase creates a private anonymous download identity and uses purchase entitlement information to authorize short-lived download links. Personal mixes are not uploaded by this flow.
Stores completed-session history, streak information, custom routines, reminder and voice-cue choices, theme, onboarding state, widget data, and local activity counters. User-created backups are JSON files and are not encrypted by the app. If optional sync is configured and enabled, workout history and custom routines are encrypted on the device before upload.
Stores profiles, answers, notes, dates, memories, chosen photos, saved prompts, settings, and local activity counters on the device. If partner pairing is configured and the user opts in, Supabase processes account credentials and service metadata; the service stores pair membership, key fingerprints, entitlement ownership, and encrypted shared records. The pairing service is designed not to receive plaintext answers. Memory photo files stay local and are not part of the encrypted partner record flow.
Stores favorites, personal affirmations, categories, reminder choices, tone, practice history, speech preferences, theme, local activity counters, and voice recordings. Voice recordings are created only after microphone permission is granted and the user starts recording. If optional sync is configured and enabled, favorites, personal affirmation text, and recording metadata may be encrypted before upload; recording audio files stay local.
Stores trip names and dates, climate, activities, packing items, bag assignments, traveller profile details, travel journal entries and photos, itinerary items, budget entries, encrypted travel documents, settings, backup files, and local activity counters on the device. Optional encrypted sync remains unavailable unless production Supabase configuration is present. When that configuration is present, the app can also send anonymous usage counts (screen and feature open counts plus app version, platform, and days-used) tied to a random per-install tag; this never includes trip content, names, or location, is on by default, and can be turned off in Settings. Weather checks send only the place you enter and your trip dates to MET Norway (forecast) and OpenStreetMap Nominatim (finding the place). On the desktop (web) version, opening a trip's map page loads map tiles from OpenStreetMap for that trip's saved place; nothing is loaded from OpenStreetMap until you open that page.
Stores puzzle progress, daily streak, best streak, completed puzzle IDs, settings, entitlement cache, and usage counters on the device. Optional anonymous usage sharing is off by default and requires your explicit choice in Settings; no usage data is uploaded before you make that choice and accept the Terms of Use and Privacy Policy at first use. If you opt in and the app's Supabase service is configured, Linelet may send at most one snapshot per day to help JPott Studios understand feature use and return visits. The snapshot contains a random per-install ID; platform and app version; days since install, active-day and return-visit counts, and counts for fixed app events; and, where available, coarse build type, device category, region, operating-system version, and a limited install-source label. It does not contain puzzle boards or solutions, usernames, account details, precise location, or free text. Turning sharing off stops future uploads. Previously received snapshots remain in the service because the app cannot read or change uploaded rows; removing local app data clears the local counters and consent choice, but does not remove snapshots already received. Optional account save sends an email address and encrypted progress to Supabase when configured and chosen; guest play stays on the device. Deleting this device’s data signs it out but leaves any account copy until you delete the account. Older builds may have stored a notification delivery address remotely; Linelet attempts to revoke it before reporting local deletion complete. Store purchases are processed by Apple, Google, and RevenueCat when billing is configured.
| Permission or feature | Apps | Purpose |
|---|---|---|
| Notifications | Apps that offer reminders | Optional reminders scheduled by the app. Users can decline or disable notifications in device settings. |
| Photo library | Planted Habits, Softly Noted, MoonEase, Our Little Thing, Kind to Me, Neatly Packed | Choose photos for journal entries, memories, travel journal photos, or a profile picture. Access is requested only when the user starts the photo feature. Gentle Range and Linelet do not use the photo library. |
| Camera | Planted Habits, Softly Noted, MoonEase, Our Little Thing, Kind to Me, Neatly Packed | Take a photo instead of choosing an existing one, when the user taps the camera option. Our Little Thing also uses the camera to scan a partner invite QR code, and Neatly Packed to take travel journal photos. Access is requested at that moment. Gentle Range and Linelet do not use the camera. |
| Microphone | Softly Noted, Our Little Thing, Kind to Me | Softly Noted requests the microphone only for free on-device voice-to-text or Premium local audio-memory recording; speech and audio are not uploaded. Our Little Thing uses the microphone only for optional voice input or a private game voice clue the user starts; clues stay local in same-phone play or are encrypted before paired-phone upload. Kind to Me records a personal affirmation after the user deliberately starts recording. Background recording is not enabled. MoonEase, Gentle Range, Neatly Packed, and Linelet do not record audio. |
| Biometrics | Softly Noted | Optional app lock. Face or fingerprint matching is performed by the operating system; the app receives only the authentication result. |
| Calendar | Our Little Thing | Add a special date to the user’s calendar after permission is requested. |
| Health data (read) | Planted Habits | With permission, reads step counts and exercise sessions from Health Connect on Android or HealthKit on iOS, only for habits the user connects to health automation. Health values are read on the device and are not sent to JPott Studios. |
| File picker and share sheet | Apps that import, export, or share user-selected content | Import or export user-selected backup/report files, or share user-selected content. The destination provider is chosen by the user. |
| Widgets / app groups | Where offered | Show a limited snapshot, such as a habit, mood, routine, prompt, or affirmation, in a device-controlled widget area. |
The reviewed builds do not request precise location or contacts. Camera and microphone access are requested only for the apps and features listed above, at the moment the user starts them. Permissions and available features can differ by operating system and app version.
Planted Habits, Softly Noted, Gentle Range, Kind to Me, and Neatly Packed contain optional account-based sync implementations. Our Little Thing contains optional account-based partner pairing. MoonEase contains an optional anonymous account for protected downloads. Linelet has no account requirement for core use but offers optional encrypted progress saving with a Supabase account. These services are disabled or unavailable unless the production build contains valid service configuration.
When an account feature is used, the service may process an email address, account identifier, password authentication result, session tokens, timestamps, record identifiers, version/conflict metadata, and encrypted content. Passwords are handled by the authentication provider and are not intentionally stored in app-readable local data. A separate sync passphrase may be used to derive an encryption key on the device; losing it may make encrypted records unrecoverable.
Encryption reduces exposure but no security measure is perfect. Users should keep their devices, account passwords, sync passphrases, and exported files secure.
The reviewed implementations are designed to use Supabase for configured authentication, encrypted record storage, partner pairing, and protected-download functions; RevenueCat for purchase entitlements; PostHog (United States) for anonymous app-use events and crash reports, as described above; Paddle.com, our reseller and Merchant of Record, for purchases made on a computer, which receives the checkout email, country, and payment details you give it; and Apple or Google for app distribution, payment, and operating-system services. These providers process information on JPott Studios’ behalf or under their own platform relationship with the user. Their production configuration and retention settings must be confirmed before launch.
JPott Studios does not use the reviewed apps to sell personal information, serve behavioral advertising, or share app activity for cross-context behavioral advertising. Information may be disclosed when reasonably necessary to operate a feature the user requests, comply with law or valid legal process, protect users and systems, investigate abuse, or complete a business reorganization subject to applicable safeguards.
If a paid product is offered, Apple or Google processes payment and provides purchase information. The apps are designed to use RevenueCat to obtain available products, validate receipts, restore access, and determine whether a premium entitlement is active. JPott Studios does not receive full payment-card details from the apps.
RevenueCat and the app store may process a store receipt, product identifier, purchase status, country/storefront information, and an app-user identifier. For Our Little Thing pairing or MoonEase protected downloads, a service account identifier may be associated with purchase entitlement status so the server can authorize shared access or protected content. See RevenueCat’s privacy policy, Paddle’s privacy policy, Apple’s privacy policy, and Google’s privacy policy.
When a user exports a backup, report, image, prompt, or other content, the operating system presents destinations such as Files, email, messaging, or cloud storage. JPott Studios does not automatically receive that exported file. After the user sends or saves it, the destination provider’s terms and privacy practices apply.
New Softly Noted and Our Little Thing backups are password-encrypted. Our Little Thing’s v3 backup includes saved answers, notes, profile and memory photos; its password is not stored and cannot be recovered. Older plaintext Our Little Thing v2 backups can still be imported after an explicit warning. Other reviewed app backups are ordinary JSON files and may contain readable personal content. Kind to Me backups may embed voice-recording bytes. Users should store and transmit exports carefully.
Local data remains until the user deletes items, uses an available in-app clear-data control, replaces data during restore, or removes the app data from the device. Operating-system backups and copies exported by the user are controlled by the user and the selected platform or destination.
When optional account services are available, Planted Habits, Softly Noted, Kind to Me, Neatly Packed, Our Little Thing, MoonEase, and Linelet provide account or service-copy deletion controls in their relevant sync, pairing, save, or download settings. Gentle Range’s reviewed sync implementation includes encrypted-record deletion and authentication support, but the exact production deletion experience must be confirmed before that service is enabled. See the data and account deletion guide for app-specific steps and fallback support.
This site, each app's website, and the desktop (browser) versions of the apps count visits anonymously so we can see what helps people. Each page view, or tap on a store button, sends a small note: which site and page, whether the device is a phone, tablet or computer, and on the first page of a visit, the name of the site that sent you there (for example Google or Instagram). It uses no cookies and stores nothing in your browser, and we do not keep your IP address or anything that identifies you. The notes are kept in our own database, hosted by Supabase. These pages contain no advertising or tracking pixels.
Our web host, Vercel, also counts visits with Vercel Web Analytics, which uses no cookies and does not follow you to other sites. Like any web host, Vercel handles standard request details such as IP address, the page asked for, browser type and time, for security and delivery.
The eight app websites also use Google Analytics, with its advertising features turned off. In the European Union, the European Economic Area, the United Kingdom and Switzerland it stays off until a visitor chooses Allow on the cookie notice; elsewhere it is on when the page loads and sets cookies. Anyone can change their choice with the Cookie choices link at the bottom of each app website. This site and the desktop apps do not use Google Analytics.
If you join our monthly email on one of our websites, we keep your email address, the website and page where you joined, and the date you confirmed. These are kept by Brevo, the email service we use (based in France). We use them only to send you our monthly email. You are added only after you confirm by tapping the button in the email we send you. Every email has a one tap unsubscribe link, and you can ask us to delete your address at any time at jpottstudios@gmail.com. We never sell or share your address. Brevo tells us, in totals, how many emails were opened and which links were tapped.
The apps are intended for a general audience and are not directed to children under 13. JPott Studios does not knowingly use the apps to solicit personal information from children. If you believe a child has provided account information through an enabled service, contact us so we can investigate and take appropriate action.
Depending on where a user lives and whether an account service is enabled, they may have rights to request access, correction, deletion, or information about service-side personal data. Most app content is local and is not available to JPott Studios. To make a request, follow the deletion instructions or contact jpottstudios@gmail.com. We may need enough information to identify the applicable app and service account; do not email journal entries, passwords, pairing codes, or other sensitive content.
This policy may be updated as app features, service providers, or legal requirements change. The “updated” date above will change whenever this policy is revised.
Privacy questions: jpottstudios@gmail.com. General support is available on the support page.