Privacy Policy

Last updated: August 15, 2026

The short version

GamifySuccess is a habit tracker. We collect what the app needs to work and nothing else. We do not show ads, we do not use analytics or tracking SDKs, we do not track you across other apps or websites, and we never sell or rent your personal information.

Your habits and journal entries are private by default. You can delete your account, and everything in it, from inside the app at any time.

Who this policy covers

This policy explains how Janky Robotics LLC(“we”) handles personal information in GamifySuccess — the website at gamifysuccess.com, the iOS and Android apps, and the API that serves them. It applies to everyone who uses the service.

What we collect and why

Almost everything below is information you type in yourself. We do not buy data about you, and we do not collect anything from other sources.

Category	What we store	Why
Account identity	Email address, and the account identifier from our login provider. Optionally a username, first and last name, and date of birth if you choose to add them in your profile.	To create and secure your account, to address you by name, and to keep your data attached to you across devices.
Content you create	Habits and their schedules, daily completions with optional effort and feel ratings and notes, tasks and task groups, daily plans and planner entries and categories, daily report journal entries, and any projects, project logs, or documents you create.	This is the product. Without it there is nothing to track, chart, or show you.
Progress data we derive	Streaks, daily scores, XP, level, and unlocked achievements, calculated from your completions.	To show progress over time and to power reports and achievements.
Social connections	Friend requests and friendships, reactions you leave on posts, and streak posts generated when you hit a milestone.	To run the friends feed and reactions. Only with people you have accepted as friends.
Settings and preferences	Timezone, theme, week start day, dashboard layout choices, sharing and profile-visibility toggles, and your email preferences.	To render the app the way you set it up and to respect your choices about email and visibility.
Access tokens	If you create a personal API token, we store a one-way hash of it, a short non-secret prefix, its name, and when it was last used. If you enable push notifications in the mobile app, we store the push token your device issues and its platform.	To let programmatic clients authenticate, and to deliver push notifications you asked for. The API token itself is never stored in a readable form.
Basic operational data	When your account was created and when it was last active, plus the standard server logs our hosting providers keep.	To operate, debug, and secure the service.

Account identity

What: Email address, and the account identifier from our login provider. Optionally a username, first and last name, and date of birth if you choose to add them in your profile.

Why: To create and secure your account, to address you by name, and to keep your data attached to you across devices.

Content you create

What: Habits and their schedules, daily completions with optional effort and feel ratings and notes, tasks and task groups, daily plans and planner entries and categories, daily report journal entries, and any projects, project logs, or documents you create.

Why: This is the product. Without it there is nothing to track, chart, or show you.

Progress data we derive

What: Streaks, daily scores, XP, level, and unlocked achievements, calculated from your completions.

Why: To show progress over time and to power reports and achievements.

Social connections

What: Friend requests and friendships, reactions you leave on posts, and streak posts generated when you hit a milestone.

Why: To run the friends feed and reactions. Only with people you have accepted as friends.

Settings and preferences

What: Timezone, theme, week start day, dashboard layout choices, sharing and profile-visibility toggles, and your email preferences.

Why: To render the app the way you set it up and to respect your choices about email and visibility.

Access tokens

What: If you create a personal API token, we store a one-way hash of it, a short non-secret prefix, its name, and when it was last used. If you enable push notifications in the mobile app, we store the push token your device issues and its platform.

Why: To let programmatic clients authenticate, and to deliver push notifications you asked for. The API token itself is never stored in a readable form.

Basic operational data

What: When your account was created and when it was last active, plus the standard server logs our hosting providers keep.

Why: To operate, debug, and secure the service.

We use this information to provide the service, to keep your account secure, and to send you the emails you have opted into. We do not use it to build advertising profiles or to make automated decisions about you.

What we do not do

No advertising. There are no ads in GamifySuccess and no ad networks in our apps.
No third-party analytics or tracking SDKs. The website and the mobile apps ship without them.
No cross-app or cross-site tracking.We do not track you across other companies’ apps or websites, and we do not use advertising identifiers.
No sale or sharing for advertising. We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.
No precise location. We store the timezone you set, which is not your location.

Service providers

We use a small number of companies to run the service. They process data only to provide their service to us, under contract.

Auth0 (Okta) — handles sign-in and stores your login credentials. We never see or store your password.
Heroku (Salesforce) — hosts our API and database, where your content is stored.
Vercel — hosts the website.
An email delivery provider — sends the digests and notifications you opt into, and receives your email address to do so.
Apple and Google — deliver push notifications to your device, if you enable them.

We may also disclose information if we are legally required to, or where it is necessary to protect the rights or safety of our users. If the service is ever transferred to another owner, your information would move with it, and we would tell you first.

Our providers store and process data in the United States. If you use the service from elsewhere, your information is transferred there.

Retention and deletion

We keep your information for as long as your account exists, because the product is built on your history — streaks and year-over-year reports only work if the old entries are still there.

You can delete your account from Profile → Account in the app, on the web or on mobile. Deleting is immediate and permanent: your account and everything attached to it — habits, logs, tasks, plans, reports, projects, friendships, reactions, achievements, and tokens — are removed from our database. We also ask our login provider to delete your credentials. There is no grace period and no way for us to restore a deleted account, so export anything you want to keep first.

Encrypted backups kept by our hosting providers for disaster recovery may retain deleted records for a short period before they age out on their normal cycle. Reactions and comments you left on a friend’s content are removed with your account.

Your rights

Depending on where you live — including under the GDPR in the UK and EU, and the CCPA/CPRA in California — you have rights over your personal information. We extend these to everyone regardless of location.

Access — most of your data is visible in the app. For a full copy, email us.
Correction — you can edit your profile and your content in the app at any time.
Deletion — delete your account in the app, or email us and we will do it.
Objection and restriction — email us and we will explain your options for the processing in question.
Withdrawing consent — turn off any email preference in your profile settings, or use the unsubscribe link in the email.

We will not discriminate against you for exercising any of these rights. We do not sell personal information, so there is nothing to opt out of on that front. Contact us at privacy@gamifysuccess.com and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority.

Our legal bases for processing, where the GDPR applies, are: performing our contract with you (running your account and the features you use), your consent (optional emails and optional profile fields such as date of birth), and our legitimate interests (keeping the service secure and working).

Security

All traffic between your device and our servers uses HTTPS.
Authentication is handled by Auth0. We never receive or store your password.
On mobile, your session is stored in the device’s own secure storage — the iOS Keychain, or encrypted preferences on Android.
Personal API tokens are stored only as one-way hashes. If you lose one we cannot recover it; you revoke it and create another.

No system is perfectly secure, but if a breach affects your personal information we will notify you and any regulator we are required to tell.

Children's privacy

GamifySuccess is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. For changes that materially affect how we handle your information, we will tell you in the app or by email before they take effect.

Contact

Questions about this policy, or about your data, go to privacy@gamifysuccess.com. Janky Robotics LLC is the data controller for the purposes of the GDPR.