Privacy Policy

1. Your content stays on your phone

Everything you create in the App — your no-contact day count, daily check-ins, journal entries, unsent letters, reasons, moods, milestones, panic-room history and vault items — is stored only on your device, in a private on-device database. There is no account, no login, no cloud and no server of ours to sync it to. It cannot be sold, leaked or subpoenaed, because it never leaves your phone. The App does send crash reports and anonymous usage counts, which never contain any of it; section 3.1 sets out exactly what those carry.

2. No AI, no content processing

Ghosted contains no chatbot, no large language model and no "AI coach." Nothing you write is sent anywhere to be analyzed. The hard moments are handled by scripted, on-device tools and links to human crisis resources — never a bot.

3. What the App collects

3.1 Diagnostics & analytics (always on)

So we can find crashes and see which parts of the App get used, the App sends anonymous crash reports and usage counts to Firebase Crashlytics and Firebase Analytics. This is always on and there is no setting to turn it off.

What goes out. Crash and error reports (the stack trace, device model, operating-system version and App version), a count of the ordinary screens you open, and — when you tap a button that offers Ghosted Pro — which button it was. Screen names come from a fixed list written into the App — home, toolkit, journey, settings, subscribe, onboarding — and nothing outside that list is ever reported. Upgrade buttons carry fixed names of the same kind, written in the App's source; the button's name is the whole of what that event says. Anything you type is dropped before it can reach an event: event values may only be numbers, yes/no flags or one of those fixed names — never text you wrote.

What never goes out. Your content. No journal text, no unsent letters, no vault photos, no moods, no reasons, no day count, and no record of panic-button use or of the times you reached out. The App's hardest screens — the panic room, the vault, Get Help, the late-night support prompt, the journal editor, the reset sheet and the daily check-in — send nothing of what is on them, and none of them reports that you opened it. The only thing that can leave such a screen is the fixed name of an upgrade button, if you tap one. The panic room, Get Help and the late-night support prompt have no upgrade buttons at all, so they report nothing whatsoever, ever. That rule is written into the App as a blocklist, not left to a setting.

Firebase gives your install an anonymous, app-specific ID. It is not your name, email or advertising identifier, we never link it to one, and ad personalization is switched off. Firebase processes this data for us as our processor; see Firebase's privacy documentation.

3.2 Subscriptions

If you buy Ghosted Pro, your purchase is processed by the Apple App Store or Google Play. We use RevenueCat to check subscription status, keyed to an anonymous app-specific ID. We never receive your name, email or card details — payment is handled entirely by Apple or Google.

3.3 No personal information

The App does not require registration. We do not collect your name, email address, phone number or any other personally identifiable information.

3.4 Promo codes

If — and only if — you redeem a Ghosted Pro promo code, the App makes a single request to our redemption service containing just the code, an anonymous app-specific purchase ID and your platform ("ios" or "android"). No name, email, or any of your recovery content is ever involved. We keep an anonymous record of which code was redeemed (never who you are) solely to enforce each code's usage limit.

4. What the Website collects

Our website, https://ghostedyou.app, runs Google Analytics 4 (gtag.js) on every page, including every free tool. Google sets cookies and receives your IP address, the address of the page and aggregate, non-identifying visit statistics — page views, general location and device category. This applies only to the website and is separate from the App and its on-device data.

Each free tool also sends one tool_used event when you finish using it. That event carries two fixed words and nothing else: the tool's own name (no-contact-counter, unsent-letter, urge-timer, grey-rock, recovery-calculator, read-this-when, get-back-audit) and a verb from a fixed list (counting, burned, completed, checked, drawn, calculated, saved, served, audited). Never a word you typed.

The no-contact counter carries your date in the page address so a link can hold your count. Before the tag reports an address, the website strips the query string back to campaign and click identifiers only, so a date you set is not handed to Google inside a page address. The link you copy still carries it, which is the point of the link.

5. Notifications

Ghosted can send local reminders — check-in nudges, milestone messages and optional late-night support prompts. These are scheduled entirely on your device and involve no server communication. You can disable them any time in your device settings.

6. Data sharing

We do not sell, trade or rent your information. The only data that leaves your device is the limited, non-content data described above, shared solely with the service providers named here (Firebase, RevenueCat, and — for the website only — Google Analytics) for the purposes described. Each is bound by its own privacy policy.

7. Storage, security & deletion

Your App data is stored locally in an on-device database. You can export it yourself at any time, and you can wipe everything from within the App — Settings → Delete everything removes it instantly and completely, because there is no server copy to chase. Uninstalling the App also removes its data.

8. Children's privacy

Ghosted is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided information, please contact us and we will address it.

9. Your rights

Because Ghosted stores your recovery data only on your device, you already exercise every data-protection right yourself, without asking us: you hold your data, you can view it in the App, export a full copy you control at any time, and erase it instantly and completely. There is no copy on our side to access, correct, port or delete.

Under the GDPR (EU/EEA and UK) you have rights of access, rectification, erasure, restriction, portability and objection. Under the CCPA/CPRA (California) you have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We can honour all of them by design: we never sell or share personal data, and the only data we ever receive — the anonymous diagnostics in section 3.1, and the anonymous promo-redemption record — carries nothing that identifies you. If you believe we hold data about you, contact us and we will confirm and act on it. You may also lodge a complaint with your local data-protection authority.

10. Not medical or crisis care

Ghosted supports breakup recovery; it is not therapy, crisis care or a medical device. If you are in danger or in crisis, contact your local emergency services or a crisis line — the App's Get Help screen lists resources.

11. Changes to this policy

We may update this policy from time to time. Changes are shown by an updated revision date above. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

The data controller is Must Have Apps SIA, Valguma iela 18-16, Rīga, LV-1048, Latvia (registration no. 40203594489). Questions about this policy? Email us at must.have.apps.sia@gmail.com.