Overview
Social Battery ("the app") is built with privacy first. We collect minimal data, store as much as possible on-device, and never sell your information.
Data We Collect
On-device only (never leaves your phone):
- Your social battery level and history
- Your task completions and habits
- Your buddy selection and preferences
- Notification preferences and schedules
If you opt in to email updates (optional):
- The email address you choose to provide — via the in-app “stay in the loop” prompt, or shared during Sign in with Apple — collected only with your consent and used solely to send you occasional news and updates about Social Battery.
- Entirely optional — the app works fully without it.
- Stored in our Supabase backend (EU) in an access-restricted, insert-only table. Never sold, and never shared with third parties for their own marketing.
- You can unsubscribe or request deletion at any time at contact.socialbatterylegal@gmail.com; once we begin sending emails, every message will include an unsubscribe link.
Pseudonymous Identifier
The app generates a random UUID v4 on first launch, stored locally on your device. This identifier does not directly identify you by name or email. However, as a persistent identifier transmitted to our third-party service providers (PostHog, Supabase, RevenueCat), it constitutes pseudonymous personal data under applicable privacy law (GDPR Recital 26). It is used solely to associate your anonymous usage events across app sessions. It is not an advertising identifier (IDFA) and is never shared with data brokers or used for cross-app tracking.
Data We Do Not Collect
- No account or login required — the app works fully anonymously (email is optional, opt-in only; see “Data We Collect” above)
- No location data (GPS)
- No contacts or address book access
- No advertising identifiers (IDFA)
- No cross-app tracking
- No personal or wellness content from your tasks
Third-Party Services
PostHog — anonymous usage analytics. We send product events (app opened, onboarding progress, tutorial steps, task creation and completion counts, widget interactions) identified only by your pseudonymous UUID. Events contain only enum values, counts, booleans and timestamps — no personal data, no task titles, no wellness content, no advertising identifiers. Session recording is disabled.
PostHog is configured to use its EU-based infrastructure (eu.i.posthog.com) — your data is processed and stored within the European Union. Geographic IP resolution (GeoIP) is disabled — we do not use your IP address for analytics purposes. Subject to PostHog's Privacy Policy.
Supabase — secure backend storage. We store your pseudonymous UUID along with onboarding preferences (language, experience level, preferred time, tone, buddy selection, focus areas, biggest struggles, daily goal), any feedback you choose to submit, and your email address if you opt in to email updates. Data is insert-only from the client. Supabase infrastructure is located in the EU. Subject to Supabase's Privacy Policy.
RevenueCat — purchase infrastructure. Social Battery is currently free, so no purchases or subscriptions are processed. RevenueCat receives only your pseudonymous UUID. No payment data is ever collected or stored by us or RevenueCat. Subject to their privacy policy.
Expo — push notification delivery. If you enable social push notifications, a device push token (issued by the Apple Push Notification service) is stored in our backend and sent to Expo’s push service to deliver “a friend posted” notifications to your device. This token is not an advertising identifier and is used solely to deliver these notifications. Subject to Expo’s Privacy Policy.
Apple — the app is distributed through the App Store and offers optional Sign in with Apple. Subject to Apple’s Privacy Policy.
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Usage analytics (PostHog) — legitimate interests (GDPR Art. 6(1)(f)): understanding how the app is used to improve it. These interests are proportionate given the pseudonymous nature of the data and the absence of advertising identifiers or cross-app tracking.
- Onboarding preferences & feedback (Supabase) — legitimate interests (GDPR Art. 6(1)(f)): understanding user needs to improve onboarding and app experience. You can request deletion at any time.
Your Rights (GDPR)
If you are located in the EEA, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data (also available in-app via Settings → Delete server data)
- Right to restriction — request that we limit processing of your data
- Right to data portability — request your data in a machine-readable format
- Right to object — object to processing based on legitimate interests at any time
To exercise any of these rights, contact us at contact.socialbatterylegal@gmail.com. We will respond within 30 days.
Supervisory Authority
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. In France, the supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés). In other EU member states, please contact your national data protection authority.
Notifications
The app sends two kinds of notifications:
- Local reminders (morning check-ins, battery check-ins) — scheduled entirely on-device. No data is sent to any server to trigger these.
- Social push (optional) — when a friend posts to the shared feed, you may receive a “a friend posted” notification. To deliver it, a device push token is stored in our Supabase backend and sent to Expo’s push service (which forwards it to the Apple Push Notification service). The notification contains only your friend’s display name — no wellness content. This is opt-in: you enable it with a dedicated toggle in the app settings.
You can disable any notification at any time in iOS Settings, and turn off social push from the app settings.
Data Retention
Your battery levels, tasks, buddy preferences, and settings are stored locally on your device using MMKV. Deleting the app removes this local data permanently.
Anonymous onboarding preferences and feedback submitted through the app are stored on Supabase servers linked to your pseudonymous UUID. You can delete this data yourself via Settings → Delete server data, or contact contact.socialbatterylegal@gmail.com.
Third-party retention: PostHog retains event data for up to 1 year by default. RevenueCat retains transaction records as required for financial compliance. Supabase retains data until you request deletion.
Third-Party Data Protection
Each third-party service provider we use (PostHog, Supabase, RevenueCat) is contractually required to protect your data with standards equivalent to or greater than those described in this policy. We have reviewed their privacy practices and data processing agreements and are satisfied they meet applicable requirements under GDPR and Apple App Store Guidelines.
Children's Privacy
Social Battery is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, please contact us at contact.socialbatterylegal@gmail.com and we will promptly delete it.
Changes to This Policy
We may update this policy as the app evolves. We'll update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.
Data Controller & Contact
The data controller responsible for your personal data, and your point of contact for any privacy question, is:
Ibrahima Touré
43 route de l'Hôpital, 67100 Strasbourg, France
+33 7 53 48 14 20
contact.socialbatterylegal@gmail.com