Privacy Policy
Last updated: May 11, 2025
1. Information We Collect
When you use HODL App, we may collect the following data:
| Category | Details | Source |
|---|---|---|
| Authentication data | Your X (Twitter) username, handle, and OAuth token | X OAuth |
| Usage data | Last login time, number of blocked apps, shout‑power metrics, sharing activity, screen views, feature taps | App / Mixpanel |
| Voice input | Ephemeral recording of your "HODL" command | Device mic → Deepgram/OpenAI |
| Identity data | Internal user ID (UUID v4) generated at signup | App |
| Analytics data | Device model, OS version, truncated IP (for geo‑city), language, session length, crash traces | Mixpanel SDK |
2. How We Use Your Information
We process your data to:
- Provide and maintain app functionality
- Authenticate users via third‑party services
- Track focus progress, points, streaks
- Deliver social‑sharing features
- Send optional push notifications about focus stats
- Process voice commands through a third‑party speech‑to‑text API
- Analyze product performance (funnels, retention, crash rates) via Mixpanel
- Improve and debug the application
3. Voice Input Processing
- Your voice is recorded locally and temporarily when you shout "HODL".
- The snippet is transmitted over TLS to Deepgram/OpenAI for real‑time recognition.
- After transcription, the audio is immediately discarded; we do not store it.
4. Data Storage and Security
- Local: secure device storage / Keychain.
- Remote: encrypted databases and Mixpanel EU cluster (ISO 27001).
- Data in transit is protected by TLS 1.2+.
- Mixpanel acts as our data processor under GDPR‑compliant Standard Contractual Clauses (SCC 2021).
5. Third-Party Services
| Purpose | Provider | Policy |
|---|---|---|
| Auth & identity | Privy, X (Twitter) | privy.io / twitter.com/privacy |
| Voice recognition | Deepgram / OpenAI | deepgram.com/legal / openai.com/policies |
| Device blocking | Apple Screen Time API | apple.com/legal/privacy |
| Product analytics | Mixpanel, Inc. (USA) | mixpanel.com/legal/privacy-policy |
These providers process data solely to deliver the specified functionality.
6. Your Rights
You may at any time:
- Access, correct, or delete your personal data
- Withdraw consent for processing or analytics
- Export your data in a structured format
- Object to push notifications
Contact: hey@onlybruvs.com
7. Data Retention
We keep account data while your profile is active. Aggregated analytics logs are retained for 24 months and then anonymised or deleted.
8. Children's Privacy
HODL App is not directed to children under 17. We do not knowingly collect data from children.
9. Changes to This Policy
Any updates will be posted here with a revised "Last updated" date. Material changes will be announced in‑app or via email.