Privacy Policy

Welcome to Ascend. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we process your information when you use the Ascend mobile application and our website.

1. Local-First Architecture

Ascend is built on a local-first philosophy. This means that by default, all data you input into the app—including your habits, daily quests, logs, XP earned, rank level, and configuration settings—stays securely stored on your device's local storage (AsyncStorage and SecureStore). We do not transmit, upload, or copy this data to any external server.

2. Data We Process

Depending on which features you use, the following data may be processed:

• Local Usage Data: Habits, daily quests, completion logs, rewards loadouts, and settings. This data remains on your device and is never transmitted to our servers.
• Waitlist Email (Website): If you submit your email address via the pre-registration form on this website, that address is transmitted to and stored by FormSubmit (formsubmit.co), a third-party form backend, and forwarded to our team inbox. This is the only personal data we actively collect via the website. See Section 3 for retention details.
• Account Credentials (Optional): If you choose to sync your data by creating an account, we use Clerk as an authentication service. Clerk collects your email address and name. Creating an account is completely optional; you can use the app fully in Guest Mode.
• Usage Analytics (Optional): If you explicitly opt in, PostHog processes limited app interaction events, device/app metadata, and a pseudonymous installation identifier. We do not include your name, email address, habit text, objective text, or local record identifiers in analytics events. You may withdraw consent at any time in Settings.
• Objective Protocol Generation (Optional): If you explicitly use external generation, the objective and discovery answers you submit are sent to the Ascend backend and then to OpenAI to generate a protocol. The Ascend backend processes request network metadata, including the client IP address, for security, authentication, and rate limiting. OpenAI receives the submitted generation content and the backend's network request. Ascend does not represent OpenAI zero-data-retention as enabled unless that setting has been confirmed for the deployed API account.

3. Data Retention

We retain your waitlist email address solely for the purpose of sending a single launch notification when the Ascend app becomes publicly available. Your email will be permanently deleted no later than 30 days after that notification is sent, or within 12 months of collection if the app has not yet launched — whichever comes first. You may request immediate deletion at any time by emailing us.

Local app data (habits, XP, rank progress) is stored exclusively on your device. It is retained until you delete it manually via Settings > Delete All Data or uninstall the application.

4. Age Restriction

Ascend is not directed at children under the age of 15 (or the applicable minimum age in your country for digital services, which is 13 in some jurisdictions). By using the app or submitting your email on this website, you confirm that you meet this age requirement. If we become aware that a person under this age has submitted personal data, we will delete it promptly.

5. GDPR Compliance

The legal basis for processing your waitlist email is your explicit consent (Art. 6(1)(a) GDPR), given via the checkbox on the registration form. If you are in the European Economic Area (EEA), you benefit from the following rights:

• Right to Access & Portability: You may request a copy of the personal data we hold about you (waitlist email). For in-app data, export it at any time via Settings > Export Local Data.
• Right to Rectification: You may request correction of inaccurate personal data we hold.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your waitlist email at any time. For in-app data, use Settings > Delete All Data.
• Right to Restrict or Object: You may object to or restrict processing at any time by contacting us or by disabling optional features in app settings.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe your rights have been infringed, you have the right to lodge a complaint with your national data protection authority. In France, this is the CNIL (www.cnil.fr). In other EEA countries, contact your local DPA.

6. International Data Transfers

Clerk, PostHog, OpenAI, and FormSubmit may process data in the United States or other countries outside your place of residence. Where GDPR or UK GDPR requires a transfer mechanism, Ascend uses the applicable vendor data-processing terms and the European Commission's 2021 Standard Contractual Clauses, together with supplementary safeguards where required. Public launch remains conditional on completing the applicable processor agreements and transfer review.

7. California Privacy Rights

California residents may request access to, correction of, or deletion of personal information processed by Ascend, and may request information about the categories and purposes of processing described in this policy. Ascend does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising applicable privacy rights. Submit a request using the contact address below.

8. Website Cookies and Similar Technologies

The Ascend marketing website does not load PostHog or another advertising analytics script. The waitlist form sends the information you enter to FormSubmit with browser credentials omitted. FormSubmit remains an independent service whose infrastructure may use strictly necessary security or delivery technologies; its behavior must be re-audited before launch and whenever the form provider changes.

9. Data Security

Since your tracking data remains on your physical device, its security depends on your device's own protections. We recommend securing your mobile device with a passcode or biometric lock. Sensitive data, like authentication tokens, is stored in your device's secure enclave (SecureStore).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page, and the "Last Updated" date will be updated accordingly.

11. Contact & Data Controller

For any questions, requests, or to exercise your rights, contact us at: project.ascend.bw@gmail.com. We will respond within 30 days.

Account and associated data deletion requests can also be started from Account and Data Deletion.