Privacy Policy

The short version

Information that stays on your device or in your private iCloud

Depending on the features you use, Drynosaur stores:

• check-ins, journal notes, sober-start date, streaks, milestones, and related progress;
• App preferences, reminders, game progress, unlocks, and Drynosaur customisations;
• emergency-contact names and telephone numbers; and
• recorded walks, including duration, distance, estimated calories, pace, and precise route points.

This information is stored using Apple's on-device technologies and may sync through the private iCloud database associated with your Apple Account. We cannot view records in that private database.

If you connect Apple Health, the App may read your latest body-mass entry to improve calorie estimates and may write completed walking workouts, distance, active-energy estimates, and routes to Apple Health. Apple handles iCloud and Health information under its own terms and privacy policy.

Online accounts and Friends

Creating an online account and using Friends are optional. If you use them, we and the providers that operate our backend may process:

• a server-generated account identifier and information needed for Sign in with Apple, including your name or email address where Apple makes it available;
• your chosen ranger name, friend code, ranger appearance, selected title, and sharing preferences;
• the current streak, total sober check-ins, and Drynosaur details you choose to make visible to accepted friends;
• friend-code lookups, friend requests, friendships, blocks, and related dates and account identifiers;
• shared-goal participants, duration, start date, progress totals, status, and encouragement activity; and
• push-notification tokens and related records needed to send and protect Friend activity notifications.

Shared-goal progress is calculated from check-ins on your device. The server receives only the progress and status needed to run the goal not your individual check-in answers, journal notes, sober-start date, or reason a streak ended.

What other users can see

Someone who enters your exact friend code may see a preview containing your ranger name, friend code, and ranger appearance. Accepted friends can see your profile and the categories you have enabled for sharing. Participants in a shared goal can see each other's goal progress, status, and encouragement activity.

Drynosaur does not upload your address book to find friends. Other people may copy or capture information you share with them, so use a ranger name and sharing settings you are comfortable disclosing.

Friend activity notifications

If you enable Friend activity notifications, notifications may include a ranger name and information about a friend request, alcohol-free shared goal, goal status, or encouragement. This content may be visible on your lock screen depending on your iOS settings. You can disable these notifications in the App or iOS Settings.

Analytics, subscriptions, and advertising measurement

Product analytics

We use product analytics to understand basic App usage, reliability, feature adoption, and subscription retention. This may include a pseudonymous App or customer identifier, App and device information, screens or features used, onboarding and paywall events, and interaction times.

For selected retention analysis, we record whether the user is subscribed and events such as an App session starting, a check-in being started or saved, or a streak ending. A streak-ending event does not include the reason, previous streak length, or a user-entered date. We may also record that a journal screen, sober-start-date feature, walk, game, or other feature was used.

We do not deliberately send check-in answers, journal text, Friend profile content, shared-goal progress, emergency-contact details, precise location, walking measurements, or Apple Health values to product-analytics providers. Analytics identifiers are pseudonymous rather than your ranger name or email address, but may still be personal data under applicable law.

Advertising attribution

We advertise Drynosaur outside the App and use mobile-attribution and advertising-measurement services to understand whether an advertisement led to an install, App open, paywall view, trial, purchase, or subscription. These services may process advertising or device identifiers, IP address, App and device information, campaign information, and conversion events.

Where required, Drynosaur asks for permission through Apple's App Tracking Transparency framework before using IDFA or cross-app tracking. If you deny permission, limited analytics, fraud prevention, and aggregated or privacy-preserving attribution may still operate without IDFA.

We do not provide check-in answers, journal text, Friend profile content, shared-goal progress, emergency contacts, precise routes, or Apple Health values for advertising measurement.

Purchases and subscriptions

Apple processes payments. We and our subscription and paywall providers receive the pseudonymous customer, product, transaction, receipt, entitlement, trial, renewal, and paywall information needed to offer and manage subscriptions. We do not receive your full payment-card details.

Feedback and support

If you submit feedback or contact us, we process the information you provide, such as feedback posts, comments, votes, status history, email address, and support messages. Published feedback is visible to other users where the App indicates this. Private feedback discussions may be reviewed by moderators.

When the App uses an online service, the service may also receive technical information such as IP address, timestamps, App and device information, and diagnostic or security information.

Permissions

Drynosaur may request these optional iOS permissions:

• Contacts: to select an emergency contact. Only the fields needed for that feature are stored, and contacts are not uploaded for Friends.
• Notifications: for local reminders and, if separately enabled, remote Friend activity notifications.
• Location: to calculate distance, pace, and route while recording a walk, including in the background if you allow it.
• Health: to read body mass for optional calorie estimates and save walking workouts and routes.
• Tracking: for advertising measurement using IDFA and other tracking that requires Apple's permission.

You can refuse or revoke a permission in iOS Settings. The related feature may then be unavailable, but your subscription is not conditional on granting these permissions.

How we use and share information

We use information to provide and secure the App, operate accounts and social features, manage subscriptions, provide support, moderate feedback, prevent abuse, understand and improve the App, measure advertising, and comply with legal obligations.

Information may be disclosed, only as needed, to:

• platform and app-store providers;
• backend, authentication, database, notification, and security providers;
• subscription and paywall providers;
• product-analytics providers;
• mobile-attribution providers and advertising platforms;
• remote-configuration providers;
• other users you choose to interact with; and
• advisers, authorities, or a purchaser of the App business where reasonably necessary or required by law.

These recipients may act for us or under their own terms. Some are located outside Ireland or the EEA, including in the United States. Where required, international transfers use recognised safeguards such as an adequacy decision or standard contractual clauses. Contact us for more information about current recipients or transfer safeguards.

We do not sell personal information. Some laws may describe limited advertising-measurement disclosures as "sharing" or targeted advertising even when no money changes hands. You can prevent or stop IDFA-based tracking in iOS Settings > Privacy & Security > Tracking. This does not disable basic analytics or all privacy-preserving attribution.

Legal bases for EEA and UK users

Where the GDPR or UK GDPR applies, we rely on:

• contract to provide the App, optional online account, Friends, shared goals, support, and paid features you request;
• consent where required for protected device permissions, IDFA-based tracking, and sobriety-related information you choose to share through Friends or a shared goal;
• legitimate interests for limited non-IDFA analytics, subscription-retention analysis, security, fraud and abuse prevention, support, moderation, and improving the App and our marketing, where those interests are not overridden by your rights; and
• legal obligation for matters such as tax, accounting, consumer protection, and lawful requests.

Sobriety progress, walking activity, and body mass can receive additional protection under data-protection law. Most of this information stays on your device, in private iCloud, or in Apple Health. We receive sobriety-related information only when you choose to share it through the social features described above.

Online accounts and all device permissions are optional. If you do not provide information required for a feature for example, a ranger name for a Friend profile or location during a recorded walk we cannot provide that feature.

Retention and deletion

Local data remains until you delete it using App controls or delete the App. Information synced to private iCloud or written to Apple Health remains subject to your Apple settings and deletion controls.

Online account and social information generally remains while your account exists or as needed to operate a pending relationship or goal. Security and rate-limit records may be retained as reasonably necessary to prevent abuse. Purchase records may be retained to provide subscription access and meet accounting, fraud-prevention, and legal requirements. Analytics, attribution, feedback, support, and technical records are retained only as reasonably needed for their stated purposes and may have different provider retention periods. Aggregated information that no longer identifies anyone may be retained.

If you created an online account, Delete account in Settings removes the authentication account and associated server-side profile, friendships, your block list, requests, shared goals, push data, feedback posts, comments, and votes. It does not remove local or private iCloud check-in data, cancel an Apple subscription, or necessarily delete legally required transaction records. Deleting the App alone does not delete an online account.

For other requests, email gareth@drynosaur.com. Social-account requests can be verified using Sign in with Apple. Purchase and some analytics records use a pseudonymous App User ID; we may ask you to use the App's support-email option, which includes that identifier. We cannot locate a pseudonymous record using a name or email address that was never connected to it, and we are not required to collect new identifying information solely for that purpose.

Your rights

Depending on where you live and whether we can identify relevant data as relating to you, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. These rights can be subject to legal limits.

Use the available App control or email gareth@drynosaur.com to make a request. We may need to verify your account or ask for an available pseudonymous identifier. If we cannot identify the relevant record, we will tell you.

EEA users may complain to the Irish Data Protection Commission or their local supervisory authority. UK users may complain to the Information Commissioner's Office.

Security

We use reasonable safeguards appropriate to the information processed, including authenticated access, access-control rules, integrity checks, rate limits, encrypted network transport, and Apple's platform protections. No storage or transmission method is completely secure.

Children's privacy

Drynosaur is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information through the App.

Changes to this policy

We may update this policy when the App, our providers, or legal requirements change. We will post the revised policy, update the date above, and provide additional notice where required.

Contact