Privacy Policy

Stint is a study-session tracker with a social layer. We collect the minimum data needed to run it, and nothing else. There are no ads, no analytics SDKs, and no advertising identifiers.

Most of our users are teenagers. That shapes everything below: defaults are private, sharing is opt-in, and we do not build profiles of you for anyone else's benefit.

What we collect

Account

• Your email address, for sign-in and verification.
• Your phone number, only if you choose to add one, confirmed by a texted code. It is used for one thing: letting friends who have it saved find you. It is never shown to anyone and never used for marketing.
• A username and display name you choose.
• Whether you are under 18 — a yes/no flag derived at sign-up. We do not store your date of birth.

Your study activity

• Sessions: subject, category, start time and end time. Durations are computed by our servers from those timestamps, not sent by your phone.
• Subjects you create.
• Plans and reflections you write yourself: daily intentions, weekly goals, and post-session focus ratings with optional short notes.
• Semester chapters, exam dates and subjects, and break periods you set.

Notifications

• A push token for each device you turn notifications on for, so we can reach that device. It identifies the install, not you, and it is deleted when you sign out, turn notifications off, or delete your account.
• Which kinds of notification you have agreed to.

Social

• Friendships and friend requests, and invite links you create.
• Who invited you, if anyone, and who you have invited — so invite rewards can be counted. Only you and the other person can see it, and it is deleted when either of you deletes your account.
• An invite code you type when signing up (the inviter's username), used once to connect you and then discarded.
• Groups and squads you create or join, and shared weekly group targets.
• Scheduled study sessions you propose or join.
• Streak-twin pairings you accept.
• Reports and blocks you file. A block keeps the blocked person's display name and username as they were when you blocked them, so you can find them in Settings → Blocked people and unblock them. Only you can see it, and it is deleted when you unblock them or either of you deletes your account.

On your device only Some preferences never leave your phone: your chosen focus scene and soundscape, sound and haptic settings, which prompts you've dismissed, and which personal records you've already been shown. These live in the iOS Keychain and are removed when you delete the app.

What we never collect

• Precise location. No GPS, ever.
• Your contacts. If you tap Find friends from contacts, Stint asks for access and, on your phone, turns each email address and phone number into a scrambled code. Only those codes are sent, only to check which belong to Stint accounts, and none are kept — we learn which of your contacts are already on Stint and nothing about anyone else. Names are never sent. We never message your contacts.
• Your microphone or camera. The app requests no such permission.
• Your photos. Choosing a profile picture does ask for photo-library access, but the picture you pick is saved on your own device and is never uploaded to us or shown to anyone else.
• Analytics or advertising identifiers. No ad networks, no third-party trackers, no cross-app tracking.
• Your date of birth.

Who can see your data

• People who have your email address or phone number saved can see that you are on Stint (your username and display name only) when they use Find friends from contacts. Turn this off any time in Settings → Account → Let contacts find me.
• Your sessions and stats are visible only to friends whose requests you have accepted. Nothing about you is public. There are no public profiles.
• Someone searching your username sees only your username, display name and avatar — nothing else — until you accept them.
• Group and squad members see the hours you contribute to shared targets.
• People you have scheduled a session with can see that you joined it.
• Blocking someone immediately hides everything between you and them, in both directions. They are not told. You can unblock them any time in Settings → Blocked people; they are not told that either, and you are not friends again unless one of you sends a new request.

Companies that process data for us

Supabase hosts our database, authentication and server functions. Your account and activity are stored there, protected by row-level security rules that deny access by default.

Anthropic processes the AI study coach, which is an optional paid feature. If you use it, we send your messages in that conversation together with a summary of your recent sessions, focus ratings, goals and daily intentions, so the coach can answer usefully. We do not send your email address, your name, or anything identifying you. We do not store the conversation — we keep only a timestamp per request, to enforce a daily limit. If you never open the coach, nothing is ever sent to Anthropic.

Apple processes subscription payments through the App Store, and Sign in with Apple if you use it. We never see or store your payment details.

Google handles Sign in with Google, if you choose it. Google tells us your email address and confirms it is yours; we receive nothing else from your Google account.

Twilio sends the text message with the code that confirms your phone number, if you add one. It receives your number and that code, nothing else.

Resend sends our account emails — confirming your address, resetting your password, confirming a change of email. It receives your email address and the text of that message, and nothing about your study activity.

Expo delivers push notifications. It receives the push token for your device and the text of the notification itself — which is never more than a friend's display name and a fixed phrase. It is not told who you are.

RevenueCat tells us whether your subscription is active. It receives an anonymous identifier for your account and the receipt Apple issues; it does not receive your email address, your name, or any of your study data.

We do not sell your data, and we do not share it with anyone for advertising.

Where it lives and how it's protected

Data is stored with Supabase (PostgreSQL). Every table has row-level security enabled and denies access by default, so a request can only ever read rows that belong to you or to a friend who has accepted you. All traffic is encrypted in transit. Your sign-in tokens are stored in the iOS Keychain on your device.

Your rights

• Export your data any time from You → Export my data. This is free and is not a paid feature.
• Delete your account any time from You → Delete account. Deletion is immediate and removes your profile, sessions, plans, reflections, goals, friendships, invites, groups, squads, scheduled sessions, streak twins, reports and blocks. It cannot be undone. Copies may persist briefly in our database provider's routine backups before those rotate out.
• Ask us anything about your data at contact@2finellc.com.

Depending on where you live you may have additional rights over your personal data. Contact us and we will honour them.

Children

Stint is not intended for children under 13, and we do not knowingly collect data from them. If someone tells us they are under 13 while signing up, we stop: no account is made, or — if they signed in with Apple or Google first — the account that sign-in created is deleted straight away. We never store the date of birth. If we learn some other way that we hold an account for someone under 13, we delete it.

Users aged 13 to 17 always have:

• Friends-only visibility. Their sessions and stats are seen only by friends they have accepted.
• No public profile, ever. They cannot turn on a public sky page.
• Not findable through contacts, unless they choose to be. This starts off for them. They can switch it on in Settings → Account if they want classmates who already have their number to find them.

If you are a parent or guardian and want your child's data removed, contact us at contact@2finellc.com and we will delete the account.

Changes

If this policy changes in a way that materially affects you, we will tell you in the app before the change takes effect.