Privacy Policy

This Privacy Policy explains how PROTOKOL ("the App", "we", "us") collects, uses and protects your information. By using the App you agree to the practices described here.

1. Information We Collect

Account information. When you create an account we collect your email address and an encrypted password. We never store your password in readable form.

Information you provide. Your profession, goals, daily routines, tasks, plans and progress entries — the content you enter to use the App’s features.

Usage data. Anonymous app usage statistics (screens opened, features used, session length) and crash reports, used to improve stability and performance.

We do not collect your name, phone number, contacts, photos, precise location, or any financial account details.

2. How We Use Your Information

• To create and secure your account
• To store your plans and routines and sync them across your devices
• To generate personalized daily plans and insights
• To manage subscriptions and access to premium features
• To diagnose crashes and improve the App

We do not sell your personal data, and we show no ads inside the App. We use your device’s advertising identifier for one purpose only: measuring which ad campaigns bring new users (install attribution). On iOS this happens only if you allow it in the App Tracking Transparency prompt — if you decline, the identifier is not used.

3. Third-Party Services

The App relies on the following service providers, each of which processes limited data on our behalf under its own privacy policy:

• Supabase — account authentication and encrypted storage of your app data
• Anthropic (Claude API) — generates plan suggestions and insights. Only the minimum context needed (such as your stated profession and language) is sent; your email address is never shared
• Meta Platforms — receives app events (such as install and subscription events) and your device’s advertising identifier, used solely to measure which ad campaigns bring new users (install attribution)
• RevenueCat — subscription management
• Google Play Billing / Apple App Store — payment processing. Payments are handled entirely by the store; we never receive or store your card details

4. Data Storage and Security

Your data is stored on secure cloud servers and transmitted over encrypted connections (HTTPS/TLS). Access is restricted by row-level security so that each account can reach only its own data. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

5. Data Retention and Deletion

We keep your data for as long as your account is active. You can delete your account and all of its data yourself from inside the App at any time, and that deletion takes effect immediately — see section 6. If you cannot get into the App, you can email support@useprotokol.com instead; emailed requests are completed within 30 days at the latest.

6. Account Deletion

You can delete your account directly inside the App: open the Plan tab, and in the Account card at the top of that screen — under the red Danger zone heading — tap Delete my account and complete the two confirmation steps. Deletion is immediate and permanent: there is no waiting period, no undo window and no deactivated-account state. Alternatively, you can send a deletion request by emailing support@useprotokol.com. Step-by-step instructions are on our account deletion page.

• What is deleted: your account and email address, profile, routines, daily plans, your entire completion history, usage counters, and your Meet profile, photo, likes and matches
• What is retained and for how long: subscription status held by RevenueCat, and billing records held by the App Store / Google Play — kept only for as long as legal obligations require
• Reports filed about you: kept for 12 months after your account is deleted, in order to prevent abuse, then deleted automatically. If you never delete your account, these records are kept for at most 24 months. The record holds only an identifier and the report reason — no name, email address or photo
• Processing time: deletion inside the App completes immediately; emailed requests are completed within 30 days at the latest

7. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to withdraw consent. To exercise any of these rights, contact us at the address below.

8. Children

PROTOKOL is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Users

Your data may be processed on servers located outside your country of residence. By using the App you consent to such transfer, subject to the protections described in this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced within the App or on this page, with a revised "Last updated" date.

Questions about this policy or your data: support@useprotokol.com