Privacy Policy

1. Information We Collect

Account Information

• Apple ID identifier, via Sign in with Apple — this is currently the only way to create an account. If you choose to hide your email from us, Apple provides a private relay address instead of your real one; we never see your real email unless you separately give it to us.
• Trail name (username) you choose during setup, visible to your squadmates.
• Avatar color, a cosmetic preference, changeable anytime in Settings.

Habit and Squad Content

• Habit names, types, and completion history, entered by you.
• A per-habit privacy toggle lets you hide a habit's name from squadmates; your completion progress remains visible regardless, since that's how the shared trail works.
• Squad membership, squad name, and shared trail progress.
• Your chosen daily reminder time (never shared with squadmates).

Usage and Diagnostic Data

• Product analytics: app interaction events (e.g. completing a habit, opening the app, reaching a plan limit), collected via PostHog, used to understand usage and improve the app.
• Session replay: PostHog also records anonymized on-screen interactions (taps, scrolls, navigation) within the app for the sole purpose of diagnosing bugs and confusing UI. This is not used to build an advertising profile of you and is never sold or shared with advertisers.
• Crash and performance diagnostics: collected automatically via Sentry if the app encounters an error, including device/OS information and stack traces.

Push Notifications

If enabled, we store a device push token to deliver your daily reminder or a squadmate's nudge ("Flare"). No message content is stored beyond what's required to deliver it.

2. Local Storage & Device Data

Expedition is a native iOS app, not a mobile website — it does not use browser cookies. It does store a small amount of information locally on your device, using iOS's standard on-device storage, so the app works the way you'd expect:

• Your signed-in session, so you don't have to sign in with Apple every time you open the app.
• Interface preferences, like your chosen appearance (dark, light, or glass) and the saved position of the floating navigation control.
• In-progress onboarding data, if you close the app partway through setup, so you don't lose your progress.

This local storage is strictly necessary to provide the app's core functionality — it is not used for advertising or cross-app tracking, and is not shared with any third party except as described in Section 4 for the underlying authentication and hosting providers that make it work.

The getexpedition.app marketing website does not currently set cookies, use browser local storage, or run any tracking or analytics scripts. If that changes — for example, if we add website analytics — we will update this section and, where required by law, request your consent first.

3. Legal Basis for Processing (for users in the EU/UK)

We process your information on the following legal bases under the GDPR:

• Performance of a contract — account, habit, and squad data necessary to provide the app's core functionality.
• Consent — push notifications, and analytics/session replay as disclosed above and acknowledged at account creation.
• Legitimate interests — crash diagnostics and product analytics used to keep the app functioning and secure, balanced against your privacy interests.

4. How We Share Information

We share limited data with service providers solely to operate the app. We do not sell your personal information, and we do not share it with third parties for their own advertising or cross-app tracking purposes.

Each provider is contractually restricted to using this data only to provide services to us, not for their own independent purposes.

California residents: we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA. No opt-out link is required because no such sale or sharing occurs.

5. Business Transfers

If Egg Hatch is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be disclosed to the parties involved and transferred as part of that transaction, subject to standard confidentiality arrangements. This Privacy Policy will continue to apply to your information in the hands of a new owner unless and until you're notified of a new policy. If we believe a transfer would materially change how your information is used, we'll notify active users before the change takes effect, consistent with Section 12.

6. Data Retention

• Account, habit, and squad data is retained in our database for as long as your account is active.
• If you delete your account, this data is permanently removed from our production database, and any squad you solely own is deleted with you; if you're not the sole member, ownership transfers automatically so your squadmates are unaffected.
• Independent of the above: our service providers (PostHog, Sentry) retain diagnostic and analytics data on their own retention schedules, which may extend beyond your account deletion date. This data is not linked back to an active account once deleted and is used only in aggregate or anonymized form after that point.
• Backups may retain deleted data for a limited period before being overwritten in the ordinary course of our backup cycle.

7. Your Privacy Rights

All Users

You can access, correct, or delete most of your information directly in the app (Settings). For anything not available there, contact us using the information in Section 11.

California Residents (CCPA/CPRA)

You have the right to:

• Know what personal information we've collected about you and why.
• Delete personal information we hold about you, subject to limited legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — not applicable here, as we do not sell or share personal information.
• Non-discrimination for exercising any of these rights.

To exercise these rights, contact us using the information in Section 11. We will verify your request and respond within the timeframe required by law.

EU/UK Residents (GDPR)

You have the right to access, rectify, erase, or restrict processing of your personal data, to data portability, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with your local data protection supervisory authority. Because our infrastructure is hosted in the United States, your data may be transferred to and processed in the US; we rely on our providers' standard contractual safeguards for this transfer.

8. User Content and Community Standards

Expedition includes free-text fields you and other users control — usernames, habit names, and squad names — which may be visible to your squadmates. We do not pre-screen this content, and we are not responsible for its accuracy or appropriateness.

We prohibit content that is abusive, harassing, hateful, sexually explicit, or otherwise violates the spirit of a small, trusted-squad habit-tracking app. We reserve the right to remove content and suspend or terminate accounts that violate this standard, with or without notice.

To report inappropriate content, contact us using the information in Section 11.

9. Children's Privacy

Expedition is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we've collected information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child has provided us with personal information, contact us immediately using the information in Section 11.

10. Data Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Contact Us

12. Changes to This Policy

We review this policy at least once every 12 months. We'll update the date at the top for any revision, and for material changes, we'll notify active users in-app before the change takes effect.