Privacy Policy
Last Updated: May 12, 2026
This Privacy Policy explains how Purukitto ("we," "us," or "our") collects, uses, and protects your information when you use the Shiren mobile application (the "App").
Our philosophy is simple: your data belongs to you. We build our apps to collect the absolute minimum amount of information required for them to function.
1. Information We Collect
- Locally Stored Data: Your task data, challenge progress, daily logs, vault photos, and preferences are stored locally on your device using SQLite. This data is not transmitted unless you upgrade to a paid tier that enables cloud sync.
- Account Information: Creating an account (required for the Challenger and Master tiers) collects your email address and an encrypted password via Supabase.
- Synced Task & Challenge Data: With the Challenger tier (₹449 lifetime), your task completion, daily logs, and challenge attempts are synced to your account on Supabase.
- Progress Photos: Photos taken via the Vault feature are stored locally by default. With the Master tier (₹1,249 lifetime), photos are also backed up to Cloudflare R2 object storage.
- Purchase Information: Subscription state is managed through RevenueCat and the Apple App Store / Google Play, which provide us with an anonymous purchase identifier and entitlement state. We do not see or store your payment details.
- Bug Reports: If you submit a bug report from within the app, we receive the message you wrote along with optional device metadata you include.
2. How We Use Your Information
- Provide, operate, and maintain the App's functionality.
- Enable optional cross-device sync of task and challenge data for Challenger users.
- Enable optional cloud backup of Vault photos for Master users.
- Validate active subscription entitlements via RevenueCat.
- Respond to your support requests and bug reports.
3. Information Sharing
We do not sell, rent, or share your personal information with third parties for marketing or advertising. We may only disclose data to:
- Comply with valid legal obligations.
- Third-party infrastructure providers (Supabase for authentication and data sync, Cloudflare R2 for photo storage, and RevenueCat for subscription management), each bound by their own privacy terms and used only to deliver the features you've opted into.
4. Data Retention and Security
We implement industry-standard security measures to protect your information. Server-stored data is encrypted. You can delete your account and all associated data at any time from Profile & Settings → Danger Zone → Delete Account in the app, or follow the instructions on our Delete Account page if you no longer have access to the app.
5. Children's Privacy
Shiren does not knowingly collect personal information from children under the age of 13.
6. Changes to This Policy
We may update this Privacy Policy from time to time. The modified policy will be effective immediately upon posting to this page.
7. Contact Us
If you have questions about this Privacy Policy, please reach out via our Support Page.