Privacy Policy

Derin is designed with privacy as a core principle. The app uses anonymous authentication by default, meaning we do not require you to provide your name, email address, or any personally identifying information to use Derin.

Anonymous Account Data

When you first open Derin, we automatically generate an anonymous user identifier to sync your data across sessions. This identifier is not linked to your name, email, or any other personal information unless you choose to create a linked account (see “Optional Account Linking” below).

Usage Data

To provide core app functionality, we collect and store:

• Session data: Duration and timestamps of your focus sessions
• Streak data: Your daily streak progress

This data is used solely to power features like session history, streak tracking, and progress display within the app.

Subscription and Purchase Data

If you purchase Derin Pro, subscription-related information (such as purchase status, subscription tier, and renewal dates) is processed through Apple’s App Store and our subscription management provider, RevenueCat. We receive and store your subscription status to determine access to Pro features. We do not have access to your payment card details — these are handled entirely by Apple.

Derin does not collect:

• Your name or email address (unless you opt into account linking)
• Your location
• Contacts, photos, or other device data
• Advertising identifiers
• Third-party analytics or tracking data for advertising purposes

In a future version, Derin may offer the option to link your anonymous account to an email address or third-party sign-in method, allowing you to restore your data across devices. This feature is opt-in only. If introduced, this policy will be updated to reflect what additional information is collected and how it is used.

We use the information described above to:

• Provide and maintain core app functionality (timers, streaks, session history)
• Verify and manage your Derin Pro subscription status
• Improve app performance and reliability
• Respond to support requests, if you contact us directly

We do not sell your information. We do not use your data for targeted advertising.

Derin relies on the following third-party services to operate:

• Supabase— used to securely store your anonymous account and session data. See Supabase’s privacy policy at supabase.com/privacy.
• RevenueCat — used to manage and validate subscription purchases. See RevenueCat’s privacy policy at revenuecat.com/privacy.
• Apple App Store — handles all payment processing for subscriptions. See Apple’s privacy policy at apple.com/legal/privacy.

These providers may process data on our behalf under their own privacy and security practices, consistent with applicable data protection laws.

Your data is stored securely using industry-standard practices, including encryption in transit and access controls that restrict who can read or modify your information. Session and subscription data are protected using row-level security policies that ensure your data is only accessible to your anonymous account.

We retain your session history, streak data, and account information for as long as you use Derin. If you delete the app, your anonymous account data may remain stored on our servers unless you request deletion (see “Your Rights” below), as we have no way to identify or associate an uninstalled app with a deletion request without a linked account.

Depending on your location, you may have rights regarding your personal data, including the right to:

• Request access to the data associated with your account
• Request deletion of your data
• Withdraw consent to data processing, where applicable

Because Derin uses anonymous authentication, we generally cannot fulfill individual data requests unless you can provide your anonymous account identifier or have linked an account with an email address. If you have linked an account, you can contact us using the information below to exercise these rights.

Derin is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it.

Your information may be stored and processed in countries other than your own, including the United States, where our service providers operate. By using Derin, you consent to this transfer, storage, and processing.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the “Last updated” date at the top of this policy when changes are made. Continued use of Derin after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: contact@interise.io