Last updated: April 2026

Privacy Policy

Done is a private journal. Your wins belong to you — not to advertisers, not to us. Here's exactly what we collect and why.

🙋 Who we are

Done ("the app") is a daily micro-win journaling app built and operated by an independent developer. The app is available on Android (Google Play) and iOS (App Store).

If you have any questions about this policy, you can reach us through the contact page.

📦 What data we collect

We only collect data that is necessary to provide the app's core features. Here is a complete breakdown:

Account information

Display name
Set by you during sign-up or in Profile settings
Email address
Used to identify your account (email/password or Google/Apple sign-in)
Unique Identifier
Auto-generated unique identifier linking your data to your account
Sign-in method
Email/password, Google Sign-In, or Apple Sign-In

Win journal data

Win text
The text you write when logging a win
Emoji
The emoji you pick for each win
Category tag
Work, Health, Relationships, or Personal (optional)
Mood rating
1–5 scale if you choose the optional mood check-in
Timestamp
When each win was logged
Win type
Text or voice recording

Voice recordings (Pro only)

If you record a voice win, the audio file is uploaded to secure cloud storage and linked to your win entry. Audio is stored under your account and is not accessible by anyone else.

Preferences & settings

Subscription data

If you subscribe to Done Pro, your purchase is processed by the App Store or Google Play and managed by RevenueCat. We receive a customer identifier and entitlement status (whether you are a Pro subscriber) — we do not store your payment card details.

⚙️ How we use your data

We do not use your journal content for advertising, machine learning training, or any analytics beyond what is needed to display your own data back to you.

🔒 Data storage & security

Your data is stored in Google Firebase infrastructure, which is encrypted at rest and in transit (TLS). Firebase is SOC 2 Type II certified and complies with GDPR.

Your journal entries are stored securely and only your account (authenticated via Firebase Auth) has read or write access to this path — no other user or administrator can access your wins.

Voice recordings are stored in secure storage under a path scoped to your UID and are not publicly accessible.

🗓️ Data retention

Your data is kept for as long as your account exists. If you delete your account from within the app (Settings → Profile → Delete account), the following is permanently deleted:

Deletion is immediate and irreversible. We do not keep backups of deleted accounts.

Subscription records managed by RevenueCat and your app store (Apple/Google) are subject to their respective retention policies.

👶 Children's privacy

Done is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

✅ Your rights

Depending on where you live, you may have the right to:

To exercise any of these rights, use the in-app delete feature or contact us using the details below.

📝 Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. For significant changes that affect how your data is used, we will notify you in-app.

Continuing to use Done after a policy update constitutes acceptance of the updated policy.

✉️ Contact us

Have a question, concern, or data request? We're a solo-developer app and we actually read every message.

Reach out and we'll get back to you as soon as possible.

Get in touch →