Privacy Policy

Effective date: March 7, 2026

This document is provided in English. The English version is the authoritative text.

Introduction

Compound ("we", "our", or "us") operates the Compound mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

By using the App, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

The App signs you in automatically with an anonymous account so you can start without registering. You can optionally upgrade to a signed-in account, in which case we collect the information provided through your chosen sign-in method:

  • Sign in with Apple: Your Apple ID identifier and, if you choose to share it, your name and email address. Apple may provide a private relay email address.
  • Sign in with Google: Your Google account identifier, name, and email address.
  • Email Link Sign-In: Your email address.

Authentication is handled by Firebase Authentication, a service provided by Google LLC.

User Data

The App stores your daily entries, goals, and related content in Cloud Firestore, a service provided by Google LLC. This may include:

  • A calendar date and your answer for that day (Closer, Same, Further, or unanswered)
  • An optional short daily note you attach to a day
  • The goal you are currently working toward, if you choose to name one
  • Pulse reflections generated for you

Your data is stored under a user-scoped path (users/{your-user-id}/…), and Firestore security rules ensure that only you can read or write your own data.

Pulse (AI-generated reflections)

When the App generates a Pulse reflection for you, it sends only the context needed to generate it: your recent answers, your recent daily notes, your active goal, recent Pulse history, and your device locale. Your name, email address, and device identifiers are never included in this context.

Subscriptions

Compound Pro subscriptions are purchased through Apple's App Store and managed with RevenueCat, a subscription-management service. RevenueCat receives purchase receipts and an app-scoped user identifier to validate and manage your subscription. Payment details are handled entirely by Apple; we never see your payment information.

Analytics

We use Firebase Analytics to collect anonymous usage data, such as app opens, screen views, and general engagement metrics. This data is aggregated and does not personally identify you. Analytics helps us understand how the App is used so we can improve it.

App Integrity

We use Firebase App Check with Apple's App Attest service to verify that requests to our backend come from genuine instances of the App. This protects your data from unauthorized access. App Check does not collect personal information.

How We Use Your Information

We use the information we collect to:

  • Provide and maintain the App
  • Authenticate your identity and secure your account
  • Store and sync your data across your devices
  • Generate your personal Pulse reflections
  • Validate and manage your subscription
  • Analyze anonymous usage patterns to improve the App
  • Protect the integrity of the service

Data Storage and Security

Your data is stored in Google Cloud infrastructure (Cloud Firestore) with encryption at rest and in transit. Access to your data is restricted by Firestore security rules that enforce user-scoped access — no other user or unauthorized party can access your entries.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by Google LLC as part of the Firebase services described above, subject to Google's privacy practices, and by RevenueCat for subscription management, subject to RevenueCat's privacy policy.

Data Retention and Deletion

Your data is retained for as long as your account is active. You can delete your account and all associated data at any time from within the App's Settings. Upon account deletion, your entries, notes, goals, Pulse history, and account information are permanently removed from our systems.

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the App or on our website. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at support@compound.mriy.io.