Privacy Policy

Information stored on your device

The app can store Daily Logs, overall feelings, optional additional mood states, behaviors, symptoms, triggers, medication-dose answers, Gratitude, and Notes; your logging template; medication details, schedule labels, start and stop dates, and saved medication history; worksheets, goals, Session Companion notes and selected entry references; Fear Ladder practice entries, step-completion status, and known completion dates; coping techniques; crisis plans; reminders; milestones; and preferences.

Other local information includes your optional preferred name, language, theme, notification, app-icon badge and App Lock settings, Trends and insight preferences, onboarding progress, policy confirmations, record identifiers, dates, schema versions, and recovery information. Local insight metadata can record which comparisons were shown and when, to manage repeated suggestions. Reminder-badge metadata can include reminder and linked-goal identifiers, schedules, and acknowledgment times. Core logging, tools, Trends, exports, and local file backup/restore work without a cloud account or subscription.

Optional cloud accounts

Creating or signing into a cloud account sends your email, password, and authentication information to Firebase Authentication. The app uses your Firebase account identifier to connect the account, authorize cloud operations, and verify subscription access with RevenueCat. These services may process IP addresses, device or browser information, authentication events, and purchase information to operate and protect the service.

Signing in alone does not upload, import, or restore your saved entries. A remembered cloud owner links the local dataset to an account to help prevent accidental mixing of different accounts. Signing out preserves local records and that remembered owner.

Cloud Backup and restoration

Cloud Backup is optional and requires a cloud account and an active monthly or annual subscription. You choose when to create a backup and when to restore one. There is no automatic background backup or cross-device synchronization.

When you request a cloud backup, a copy of saved app content and related metadata is sent to Firebase for storage. This can include sensitive Daily Logs, medication details, templates, notes, worksheets, crisis plans, reminders, goals, and preferences. Passwords, authentication tokens, and similar credentials are excluded from backup files.

We and our service providers process uploaded content as needed to store, protect, restore, or delete your requested backups and meet legal obligations. Happy Medium does not provide end-to-end encryption for cloud content; authorized service access may be needed to operate, troubleshoot, and secure the service. RevenueCat and Apple do not receive your Daily Log or tool content as part of purchase processing.

The service retains the newest 10 completed cloud restore points, with a maximum of 4 MiB per backup. Older restore points may be removed as new backups complete. Keep a separate local backup of important information. Restoring a backup replaces active local app data after confirmation; a local recovery copy supports rollback if replacement cannot finish. This copy can contain the previous active data and may remain after successful restoration; Delete all local data removes app-managed recovery copies.

On-device calculations and AI

Trends, summaries, comparisons, possible-pattern insights, topic suggestions, and suggested templates use on-device calculations, rules, and included content. The app does not use AI to read, interpret, or respond to saved entries. We do not send your entries to an AI service for analysis or use saved content to train AI. Some educational drafts and translations used AI assistance during development, followed by developer review and editing.

Subscriptions, tips, and purchase providers

Apple processes iPhone subscription and tip purchases. RevenueCat processes product, transaction, purchase-history, provider identifier, and related technical information to support purchases and verify access. For cloud subscriptions, the Firebase account identifier connects purchases to the cloud account. For tips without a cloud account, RevenueCat may use an anonymous App User ID. An anonymous provider identifier does not mean the whole service is anonymous.

Tips are optional, repeatable one-time purchases. They do not renew, require a cloud account, unlock features, or include Cloud Backup. No journal, worksheet, reminder, or crisis-plan content is included in a tip purchase request. Happy Medium does not receive payment-card numbers through the app.

See Firebase’s privacy information, RevenueCat’s privacy policy, and Apple’s privacy policy. These providers have their own retention practices and may process information outside your country.

Notifications and App Lock

Reminders use your device’s local-notification system, not remote push messaging. After the guided tour, the app may offer notification permission if it is undecided. Permission is optional. Manage reminders in Tools, the reminder preference in Settings, and notification permission in iPhone Settings. Delivery depends on device settings, and reminder text can appear on the lock screen. App Icon Badges on iPhone is an optional device-local preference, off by default. Turning it off clears badges without disabling regular reminders. iOS notification and badge permissions also apply. Badge preferences and reminder-badge explanation metadata are not included in local file or Cloud Backup copies.

App Lock asks the operating system to authenticate you using supported biometrics or the device passcode. Happy Medium does not receive or store biometric information. App Lock restricts access to the app; it does not add encryption to stored records or exports, protect notifications outside the app, or replace device security.

Exports, local backups, and shared files

You can select information for CSV and PDF exports or create a complete local JSON backup for restoration, without a subscription. JSON backups can contain sensitive entries, medication details and history, profile and consent information, preferences, templates, reminders, milestones, and crisis plans. Credentials and the device-local badge information described above are excluded. The app does not password-protect or encrypt export or backup files. CSV and PDF files cannot restore your app data.

The app can pass files to the operating system’s share sheet or a device-managed file destination. Any app, service, or person you choose may receive the file. You control where it is stored or sent. Files outside Happy Medium are no longer protected by App Lock. Do not rely on unverified device or iCloud backup behavior as your only recovery plan.

Retention and deletion

Local records remain until you delete them, clear app storage, or uninstall, subject to your device’s own backup behavior. Delete all local data removes app-managed records, preferences, consent, and internal data-recovery copies, and cancels scheduled reminders. Limited unfinished payment or cloud-deletion recovery information may remain separately to prevent duplicate charges or safely complete an operation. Device-level badge preferences and limited reminder-badge scheduling and acknowledgment metadata are stored separately and may remain after local-profile deletion.

Cloud backups remain subject to the restore-point limit, your deletion choices, and service availability. Subscription expiry does not itself delete existing backups, but creating and restoring cloud backups require active access. Signing out or deleting local records does not delete cloud backups.

• Delete cloud data: removes online app content while keeping the sign-in account and local records.
• Delete cloud account: also removes the sign-in identity while preserving local records.
• Cancel a subscription: is a separate action through Apple. Neither deletion action cancels it.

Cloud deletion remains available without an active subscription. Account deletion requires authentication, may require a fresh password confirmation, and can take time. Use the displayed status and retry controls for unfinished operations. Limited identifiers, deletion receipts, security records, and purchase-event information may be retained to complete operations, prevent stale content from returning, address fraud, or comply with law. Provider backups and logs follow their own deletion schedules.

Exports, shared copies, support correspondence, and Apple or RevenueCat records must be managed separately with the relevant location or provider.

Security and tracking

Local records rely on your device and operating-system protections. No storage or transmission method is completely secure. The app has no advertising, general app-usage analytics, or third-party behavioral tracking. Purchase and cloud providers process information for their related features and service operations. We do not sell, rent, or trade your personal information.

Language

The interface supports English and Spanish. Spanish interface translations were AI-assisted and have not been professionally reviewed; errors or unclear wording may remain. Changing the interface language does not translate your entries. The in-app Privacy Policy and Terms of Use are available in English and Spanish and follow the selected app language. Spanish legal text is a development translation and has not been professionally reviewed; both versions are intended to convey the same meaning. This website’s Privacy Policy and Terms of Use are in English. Contact us about unclear wording or discrepancies.

Support and website information

Emailing support@happymediumapps.com shares your address, message, attachments, and delivery information with email providers and Happy Medium Apps. Correspondence is kept as reasonably needed to respond, maintain support and security records, resolve disputes, and comply with law. You can request deletion, subject to applicable retention obligations. The app’s support email composer includes the app version, but does not automatically attach saved entries, passwords, or purchase history. Review text and attachments before sending. Avoid sending sensitive entries or backup files unless necessary for your request.

This website has no account, contact form, advertising, or behavioral analytics. Cloudflare processes technical request information, such as IP address, browser details, requested pages and query parameters, and access/security logs, to deliver and protect the website. Visits opened from the app may include the app version in the URL. See Cloudflare’s privacy policy. External sites and email services have their own policies.

Your choices, disclosures, and policy changes

Use the app to view, edit where available, export, or delete local information and to request cloud-data or account deletion. For privacy requests about information held by Happy Medium Apps, contact support@happymediumapps.com. We may need to verify your identity and will respond as required by applicable law. Privacy rights vary by location.

We may preserve or disclose information we actually hold when reasonably necessary to comply with lawful process, address fraud or security issues, enforce applicable terms, or protect rights and safety. This does not give us access to content held only on your device. Material policy changes will be identified with an updated effective date and a renewed request for consent when required.