Privacy Policy — Affirmation Counter

Effective date: October 11, 2026 App: Affirmation Counter (Android), package com.daybreaklabs.affirmationcounter Developer: Daybreak Labs Contact: [email protected]

This policy explains what information Affirmation Counter (the "App") uses, where it is kept, who else handles it, and the choices you have. It describes the App as it works today.

1. Information stored on your device

The App keeps your practice data in its own private storage on your phone (the App's WebView local storage):

• The affirmations you practice and your sessions, including archived ones (affirmation text, current and highest count, count mode, target, cycles, last used).
• Practice history (date and time, the affirmation, reps completed, count mode and target, and a belief score if one was measured).
• Journey progress (reps per journey and per affirmation, ranks and trophies, and which affirmation is next).
• Settings (sound, vibration, appearance, app language, reminder time and on/off) and whether you have seen the introduction and tips.
• Your Premium status, cached so the App works offline.

Widgets and reminders. So that home-screen widgets and reminder notifications work when the App is closed, the App also keeps a small copy of your current affirmation text, today's reps, your streak, your latest belief score (Premium), your reminder settings and your app language in its private Android storage on the phone. Widgets and notifications can show your affirmation text on your home screen, in the notification shade and, depending on your Android lock-screen settings, on the lock screen. This copy stays on the phone and is removed with the App's data.

If you use the free version, or you have not signed in with Google, this data stays on your device only. Uninstalling the App, or clearing its storage in Android Settings, removes it from the phone.

Android backup. The App allows Android's standard backup. If backup is turned on in your phone settings, Android may include the App's data in your device backup, which is stored in your Google account by Google. We cannot see or access these backups. You can turn backup off or delete backups in your phone's settings (Settings > System > Backup, or your Google account's backup settings).

2. Microphone and speech recognition

• The App asks for microphone permission. It uses the microphone only while a practice session is running (after you tap Start (▶)) to recognize your spoken affirmation and count it.
• Recognition is done by the speech recognition service on your phone, usually "Speech Services by Google". Depending on your phone, language and settings, that service may process audio on the device or send it to Google to be turned into text. Google's handling of that audio is covered by Google's privacy policy.
• The App receives only the recognized text, compares it with your affirmation on the device, and then discards it. The text of what you said is not saved to your history and not sent to us.
• Belief Meter. While you speak, the App reads how loud your voice is (a volume level, not a recording) to show the Belief Meter and work out a belief score. This happens on your device. The resulting score is saved with your history (section 1).
• We do not record, store or upload audio.

3. Accounts and Google Sign-In

• Anonymous app ID. When the App starts, it creates an anonymous account in Firebase Authentication (a Google service). This is a random ID that contains no name or email; the App uses it to work with our cloud services. If you later sign in with Google, this same ID is linked to your Google account and becomes your account ID (section 9).
• Google Sign-In (optional). The only way to sign in is Continue with Google. Sign-in is used for Cloud backup with Google, included with Premium (section 4). When you sign in, the App reads only your Google account's email address, to show which account is signed in. As part of Google Sign-In, Google may also provide your name and profile photo to Firebase Authentication, which stores them with your account ID; the App does not read or use them. We do not receive your Google password, and the App has no email-and-password sign-in.
• You can use every free feature without signing in.

4. Cloud backup with Google (included with Premium, uses Google sign-in)

Cloud backup with Google is included with Premium. If you both have an active Premium subscription and are signed in with Google, the App saves a copy of your sessions (including archived sessions), your practice history (including your affirmation text and belief scores) and your journey progress (reps per journey and per affirmation, which set your ranks and trophies) to Google Cloud Firestore, linked to your account ID, so you can restore it on a new phone or after reinstalling.

Cloud backup with Google data is stored by Google Cloud in the nam5 (United States) multi-region.

Free users' data, and the data of anyone not signed in, is not backed up to the cloud and stays on the device.

5. Purchases (Google Play Billing)

Premium subscriptions are sold through Google Play. Google handles payment and billing and shares only what the App needs with us: which subscription you have and whether it is active. We do not receive your card or bank details. Manage or cancel your subscription in Google Play (Play Store > Profile > Payments & subscriptions > Subscriptions, or https://play.google.com/store/account/subscriptions). Uninstalling the App or deleting your account does not cancel a subscription.

6. Analytics and crash reports

We use Google Analytics for Firebase to understand, in aggregate, how the App is used and to improve it.

• Events we send: for example, app opened, screen viewed, first run, affirmation added (with a count of your sessions), journey opened (journey name and whether it's Premium), affirmation used (only the journey and the action, never its text or its length), voice session started or ended, settings changed, streak milestone, paywall viewed, and purchase started, succeeded, failed (with product and error reason) or restored.
• Practice theme counts: when you start a practice cycle, practice it (at most once per cycle, not per repetition) or finish it, the App sends one anonymous event. For an affirmation from a built-in journey it contains only its theme tag (one of: confidence, gratitude, calm, energy, self-love, focus, rest), the journey, and the action (start, practice or finish). For an affirmation you wrote yourself it contains only that it is a custom affirmation and the action, so we can see how often custom versus built-in affirmations are used. These events never contain the text of any affirmation, its length, or what you say, and they are not linked to you or your account. We use these counts to improve future journeys.
• Collected automatically by Firebase: an app-instance ID, device model, OS version, app version, language, approximate country or region, session and engagement information, and in-app purchase events.
• Advertising ID: the App includes the Firebase Analytics library, which can read your device's advertising ID for analytics and attribution. We do not use it for ads; the App shows no ads. You can reset or delete your advertising ID in Android Settings > Privacy > Ads.
• We do not send your affirmation text, what you say, your email address or your name to Analytics, and we do not link Analytics data to your account.
• Analytics data is kept for up to 14 months and then deleted automatically.

Crash reports (Firebase Crashlytics)

We use Firebase Crashlytics, a Google service, to find and fix crashes and errors. When the App crashes or hits an error, a report is sent (right away, or the next time the App opens) containing:

• Technical details of the problem: the error type and message, and the code location where it happened (stack trace). Text in quotes is removed from error messages before sending, so they don't carry anything you typed.
• Device and app state at that time: device model and manufacturer, Android version, app version, whether the App was in the foreground, free memory and disk space, screen orientation, whether the device is rooted, and the time of the crash.
• A random Crashlytics installation ID used to count how many installs a crash affects. It is not linked to your name, email, Google account or account ID; we don't set a user ID in Crashlytics.
• For errors in the App's screens (its web view): only the error message, with quoted text removed, and the file and line where it happened.

Crash reports never include your affirmation text, your sessions or history, what you say, or your email address. Crashlytics keeps crash reports for up to 90 days. Google Play may also give us aggregated crash and performance statistics (Android vitals).

7. How we use information

• To run the App: counting, saving your practice, showing history and stats.
• To provide Premium: checking your subscription and backing up your data.
• To keep your account working: Google sign-in and account deletion.
• To understand usage in aggregate and improve the App.
• To find and fix crashes and errors (crash reports).
• To answer your support requests.
• To meet legal obligations and prevent abuse.

8. Who else handles your information

We share information only with service providers that run parts of the App for us:

• Google: Firebase Authentication and Google Sign-In, Cloud Firestore, Google Analytics for Firebase, Firebase Crashlytics (crash reports), Google Play Billing, and your phone's Google speech service if it is the one in use.

Their handling is also covered by Google's privacy policy (https://policies.google.com/privacy). We do not sell or rent your personal information, and we do not share it for advertising.

We may disclose information if the law requires it, or to protect the rights and safety of our users or others.

9. How long we keep information

• On your device: until you delete it, clear the App's storage or uninstall.
• Google sign-in account (Firebase Authentication) and Cloud backup with Google (Firestore): kept until you delete your account. If you delete your account in the App, both are deleted immediately; if you ask us by email, we delete both within 30 days.
• Anonymous app IDs (guest IDs): while you haven't signed in, the ID contains no name, email or practice data and is not linked to you; it stays in Firebase Authentication while the App uses it, and we may remove unused ones at any time. When you sign in with Google for Cloud backup with Google, that guest ID is linked to your Google account and becomes your account ID, so from then on it is kept and deleted together with your Google sign-in account (above).
• Analytics: up to 14 months (section 6).
• Crash reports (Crashlytics): up to 90 days (section 6).
• Support emails: as long as needed to help you, and then up to 12 months.
• Purchase records: kept by Google Play under Google's policies. We may keep minimal subscription records where the law requires (for example, for tax or accounting).

10. Your choices and rights

• Microphone: you can turn microphone access off in Android Settings at any time. Counting by voice won't work without it.
• Sign out: in the App, under Options > Account.
• Delete your account and Cloud backup with Google data: in the App under Options > Danger zone > Delete account. The App may ask you to confirm with Google first. This deletes your sign-in account and your Cloud backup with Google data immediately and clears the App's data on your phone. Or email [email protected] from the Google address you signed in with; we handle email requests within 30 days. Details: https://daybreaklabs.app/delete-account/. Deleting your account does not cancel a Google Play subscription; cancel it first at https://play.google.com/store/account/subscriptions.
• Delete data on your device: in the App under Options > Danger zone (Delete account, or Delete my data if you aren't signed in), uninstall the App, or go to Android Settings > Apps > Affirmation Counter > Storage > Clear storage.
• Access or correction: email [email protected]. Depending on where you live (for example the EU/UK or California), you may have rights to access, correct, delete or move your data, or to object to some uses of it. Contact us and we'll respond within the time the law requires.

11. Children

Affirmation Counter is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has given us information, contact [email protected] and we will delete it.

12. Security

We rely on Google's infrastructure: data sent to Firebase is encrypted in transit and stored encrypted by Google. In the App, access to Cloud backup with Google data is limited to your own signed-in account: the App can only read and write the backup that belongs to your account ID. As the owner of the Firebase project that stores the backups, Daybreak Labs can technically access backup data; we only do so when you ask us to (for example for support or an email deletion request) or when the law requires it. No method of storage or transmission is completely secure.

13. International transfers

Cloud backup with Google data is stored in the United States (Google Cloud nam5 multi-region). Google may also process information (for example, analytics) in other countries where it operates. Where the law requires, appropriate safeguards apply.

14. Our website

daybreaklabs.app uses Google Analytics to measure visits. This policy covers the App; Google's privacy policy covers how Google handles website analytics.

15. Changes

We'll update this policy when the App changes. We will change the "Last updated" date, and for important changes we'll give notice in the App or on this page.

16. Contact

Daybreak Labs: [email protected]