ONA Her Glow Up Goal Tracker

ONA: Her Glow Up Goal Tracker

Privacy
policy

Effective

What the app keeps, why, and how you delete it.

The short version

  • You don’t make an account. The app signs you in anonymously with a random ID.
  • What you enter and the photos you add are stored with Google Firebase so the app can show them back to you. Photos go up without the details of where and when they were taken. What you enter while setting up stays on your phone until you start a free trial or subscribe.
  • The app records which screens you open and which buttons you tap, and sends crash reports, so I can see what’s used and what breaks. None of it is linked to your account.
  • There are no ads, your data isn’t sold, and nothing tracks you across other apps.
  • You can erase everything from Settings at any time.
In this policy · 17 sections
  1. 01 Who I am
  2. 02 What you put in the app
  3. 03 Photos
  4. 04 Signing in
  5. 05 Subscriptions
  6. 06 Analytics and crash reports
  7. 07 Reminders and sharing
  8. 08 Emails to support
  9. 09 Legal basis
  10. 10 Services I use
  11. 11 What the app doesn’t collect
  12. 12 Keeping and deleting your data
  13. 13 Your rights
  14. 14 Security
  15. 15 Age
  16. 16 Changes and other sites
  17. 17 Contact

01 Who I am

ONA: Her Glow Up Goal Tracker (“ONA” or “the app”) is built and run by Darja Orlova, based in Latvia, in the EU. I decide how your personal data is used, which makes me its controller under data protection law such as the GDPR. It’s a subscription app, provided as is.

This policy explains what the app collects, why, on what legal basis, who helps me run it, where your data is processed, how long it’s kept and how you can delete it. Terms defined in the Terms of Use mean the same here.

02 What you put in the app

ONA works with what you give it:

  • the name you’d like to be called, your age range and what brought you to the app
  • how you score the eight areas of your life wheel
  • your chapters: the area you focus on, your goal, how long the chapter runs, your scores at the start and the end, and your answers when a chapter closes
  • your rituals and side quests
  • each day’s one thing, the rituals you tick, your mood, your energy and your journal
  • your XP and streaks
  • whether your morning and evening reminders are on
  • the photos you add (see Photos)

What you enter while setting up the app stays on your phone. Once you start a free trial or subscribe, it’s saved to Cloud Firestore, part of Google Firebase, and from then on everything is stored there under your anonymous account ID so the app can show it back to you.

I use this data only to run the app for you. I don’t sell it, share it with advertisers or use it to train AI, and the app has no AI features.

Your mood, your energy and what you write in your journal can say something about your health. You choose what to enter, and it’s only used to show it back to you.

03 Photos

You can add photos from your photo library: an inspiration photo and a cover for a chapter, a photo for a side quest and a photo of your day. You choose them in your phone’s own photo picker, which gives the app only the photos you pick. The app doesn’t ask for access to your library, can’t see the rest of it, and doesn’t use your camera.

Each photo is resized on your phone. Before it’s uploaded, the app removes the details your camera saved in the file, such as where and when it was taken, and keeps only which way up it goes. The photo is then stored in Cloud Storage for Firebase under your account ID. The app also keeps a copy on your phone so it opens quickly.

04 Signing in

There’s no email, password or social sign-in. When you first open the app, Firebase Authentication signs you in anonymously and creates a random account ID. That ID connects your data to you and tells me nothing about who you are. You can find it in SettingsAccountAccount ID.

Because there’s no email or password, what a reinstall does depends on your phone. On an iPhone the sign-in is usually kept, and a reinstall often finds your data again. On Android it’s removed with the app. It’s safest to assume a reinstall starts fresh.

05 Subscriptions

After setup, ONA needs a free trial or a subscription. Apple (App Store) or Google (Google Play) takes the payment, and I never see your card details.

RevenueCat, the service that manages subscriptions for the app, receives your anonymous account ID and your purchase history from the store: which plan you have, when it started and renews, and whether it’s active. That’s how the app knows you’re subscribed. The app also saves a copy of your subscription status, and the day a free trial ends, with your data so it can show them to you.

06 Analytics and crash reports

To see how the app is used and where it breaks, it uses Google Analytics for Firebase and Firebase Crashlytics. Neither is linked to your account ID. Firebase tells installations apart with a random ID of its own, and nothing connects that ID to what you’ve written.

  • Analytics records the screen you’re on, a short name for each button you tap and some of your choices: the areas you pick, how long a chapter runs, the plan you choose, whether you tick something done and whether you allow notifications. Firebase adds standard details such as when a session starts, how long the app is in use, your device model, system version, app version, language and approximate region. It doesn’t record what you write, your mood or energy, your life wheel scores, your reminder times or your photos. When you subscribe, Google Analytics may also record the purchase itself, as it does for apps sold through the App Store or Google Play: the plan, its price and currency, and whether it began with a free trial.
  • Crash reports arrive when the app crashes or runs into an error it didn’t expect. They include technical details such as your device model, system version and app version, and what the app was doing. A crash inside the app’s framework can include text that was on screen at that moment. Reports don’t include your journal, your photos or the names of your files.

The app doesn’t collect your device’s advertising identifier, and none of this is used for ads or shared to track you.

You can object to analytics and crash reports at any time. The app has no switch for them yet, so for now the way to stop both is to delete the app. Neither is linked to your account, so I can’t pick out the reports that came from your phone.

07 Reminders and sharing

If you turn them on, the app reminds you twice a day, once in the morning and once in the evening, at times you choose. During a free trial, it also reminds you two days before the first charge, if notifications are allowed. The reminders are scheduled on your phone and nothing is sent from a server, and the times you pick stay on your phone. Whether each reminder is on is saved with your data so Settings can show it. You can turn them off in Settings or in your phone’s notification settings.

When you share a recap or a page from a closed chapter, the image is made on your phone and handed to your phone’s share sheet. Where it goes from there is up to you, and I don’t get a copy. If you save it to your photos, your phone asks you the first time.

08 Emails to support

If you write to support@onaglowup.app, I receive your email address and whatever you send. When you write from SettingsContact support, the draft also includes your app version, your phone’s system version and your Account ID, so I can help without asking. You can remove any of it before you send. I use these emails only to answer you and to fix problems.

10 Services I use

These services run parts of the app for me. They process data on my behalf, only for that purpose, under their own privacy policies:

Each of them is bound by a data processing agreement to keep your data secure and to use it only to provide their service to me.

Apple and Google also run the App Store and Google Play and take your payments. They do that as independent companies under their own privacy policies: Apple’s and Google’s.

Remote Config sends the app a few settings, like the oldest version that may still run and the addresses of these pages. Firebase uses an installation ID for this, separate from your account ID.

Like most online services, these providers see technical information when the app talks to them, such as your IP address, device model, system version, app version and the time of the request. They use it to deliver and protect their services.

Google and RevenueCat can process your data in the United States and other countries outside the EU and the UK. Those transfers are covered by the European Commission’s standard contractual clauses in their data processing terms, and by the EU–US Data Privacy Framework where a company is certified under it.

11 What the app doesn’t collect

The app doesn’t ask for your email address, phone number, Apple ID, Google account or a password. It doesn’t use your camera, and it doesn’t read your contacts, your location, the rest of your photo library or data from Apple Health or Google Fit, it doesn’t collect your device’s advertising identifier, and it doesn’t track what you do in other apps or on websites. There are no ads in the app.

The app doesn’t use cookies. This website doesn’t either, and it loads nothing from other websites.

12 Keeping and deleting your data

Your data is kept for as long as your account exists. You can delete all of it at any time from SettingsAccountErase everything. It asks first, then deletes your chapters, days, journal, photos and your anonymous account straight away. This can’t be undone.

Deleting the app doesn’t delete what’s stored in Firebase. If you can’t open the app, Delete your data explains how to ask me to do it.

A few things stay after you erase your data: purchase records held by Apple, Google and RevenueCat, which billing and tax rules require; the emails you’ve sent to support, which I keep only as long as I need them to help you; and analytics events and crash reports that were already sent. Those aren’t linked to your account, and Google deletes them on its own schedule: crash reports after 90 days, analytics events within 14 months.

Erasing your data doesn’t cancel your subscription. You manage that in your App Store or Google Play account.

13 Your rights

Depending on where you live, you can ask to see, correct, delete or get a copy of your personal data, and object to or restrict how it’s used. You can see and change what you’ve entered in the app, and delete all of it in Settings. For anything else, email support@onaglowup.app with your Account ID, or your order number if you subscribed on Google Play, and I’ll reply within a month. You can also complain to the data protection authority where you live or work, or to mine: Latvia’s Data State Inspectorate, dvi.gov.lv.

14 Security

Your data travels over encrypted connections and is stored with Google Firebase, which encrypts it at rest. Firebase security rules let only your account read and change your documents. Photos are stored under your account ID and opened through private, unguessable links kept with your data. No way of sending or storing data is completely secure, so I can’t promise absolute security.

15 Age

ONA is for people aged 18 and over. I don’t knowingly collect data from anyone younger. If you think someone under 18 is using the app, email me with their Account ID and I’ll delete their data.

16 Changes and other sites

I may update this policy. The current version is always on this page, with the date it took effect at the top.

The app and this website link to other sites, such as the App Store and Google Play. I don’t run them and I’m not responsible for their content or privacy practices.

17 Contact

Questions about this policy or your data go to support@onaglowup.app. The app is provided by Darja Orlova.