This policy explains what Ascend collects, why, who can see it, and how to delete it. We don’t sell your data, track you across other sites, or record your screen. It goes with our Terms.
Who we are
Ascend, run by Zakria Khan, Pakistan. For anything about your data, email hello@ascendday.com.
What we collect
- Your account. Your email address and password. The password is stored only in a protected (hashed) form by our sign-in provider. A guest account has no email or password.
- Your profile. Your username, avatar, a 6-digit user ID, the date you joined, your points, your timezone, and your settings, such as notifications and whether your profile is public.
- What you add. Habits, bad habits, workouts, books and reading, skills, journal entries and moods, emotion, craving and decision logs, focus sessions, goals, projects, tasks, weekly goals, time tracking, plans, partner challenges, lessons you’ve read, and your recovery tracker.
- Sensitive data. Some of what you add is personal, like your journal, moods, cravings and what you track in recovery. Only you can see it, and we never share or sell it.
- Sign-in and security. While you’re signed in, our sign-in provider stores your IP address and browser type with your session. A failed sign-in with a username is logged with that username and your IP address for 1 hour, to stop password guessing. A bot check (Cloudflare Turnstile) runs when you sign in, sign up, start as a guest, reset or change your password, or delete your account. Cloudflare sees your IP address and browser details for this.
- Crash reports. When something breaks, the app sends an error report to Sentry: what went wrong, the page, your browser and device type, the app version, and your account ID. Sentry works out a rough city and country from your IP address but doesn’t keep the address itself. Nothing on your screen is recorded.
- Page visits. We count visits to each page with Vercel Web Analytics: the page address (without anything after it), the referring site, your country, and your browser, system and device type. It uses no cookies and isn’t linked to your account. Your IP address is only used to tell visits apart within one day and isn’t stored.
- Notifications. In-app notices (from partners, leagues and reminders) are kept in your account. If you turn on push notifications, we store your browser’s push address for that device.
- Bug reports and ideas. When you send one, we keep your text, any screenshots you add, your browser, device, screen size, theme, the app version, and your user ID (or “guest”). They are stored as issues in a private GitHub repository.
- On your device. The app keeps your sign-in, a copy of your data for offline use, drafts and settings in your browser’s storage. Ascend sets no cookies of its own; Cloudflare’s bot check may use its own.
Why we use it
To run your account, save and sync your data across devices, award points, run leagues and partner features, send the reminders you turned on, keep Ascend safe from abuse, and fix bugs. Nothing else.
Who can see what
- Anyone, even without signing in: your username, avatar, user ID, join date, points and season, whether your profile is public, and whether you accept partner invites.
- Other members: if your profile is public, a summary of your stats (such as streaks, the last day you were active, and how many habits, journal entries, books, exercise minutes and skills you have). League results show your username, avatar and points to the others in that league. Plans you make public show your username and avatar.
- Your partners: your stats, your timezone, and what you share in your partnership and challenges.
- Only you: everything else, including your email, journal, moods, cravings and recovery tracker.
Services we use
These companies handle data for us, only to run Ascend. They may process it outside your country.
- Supabase: database, sign-in and server functions. Your data is stored in Sydney, Australia.
- Vercel: hosts the app and its small server functions, and counts page visits.
- Sentry: crash reports, stored in the EU (Germany).
- Cloudflare Turnstile: the bot check.
- GitHub: keeps the bug reports and ideas you send, in a private repository.
- UptimeRobot: checks every few minutes that the site is up. It doesn’t receive your data.
- Browser push services (Google, Mozilla, Apple): deliver push notifications, which are encrypted.
How long we keep it
- Your data stays while your account exists.
- Things you delete are removed from our server after 30 days. Your points records and league results stay as history while your account exists.
- A guest account is deleted after 30 days without use (unless someone follows a public plan it made). A guest who logs out loses the account at once.
- Failed sign-in records: 1 hour.
- Notifications: 30 days, then deleted automatically.
- Crash reports: for a limited time, under Sentry’s retention rules.
- Page-visit counts: anonymous, under Vercel’s retention rules.
- Bug reports and ideas: until you ask us to remove them.
Deleting your account
Go to Settings, then Account, then Delete account. This removes your account and your data from our database straight away: your profile, everything you added, your points, notifications, partnerships and invites, your plans (public ones too) and your push subscriptions. You are also removed from other members’ league results.
What stays:
- Copies of your public plans that others already followed (without your name).
- Bug reports and ideas you sent, until you ask us to remove them.
- Copies in our providers’ logs and backups, for a short time until they expire.
- Data saved on your other devices, until you sign out there.
Your choices
You can see and change most of your data in the app, make your profile private, turn notifications on or off, and delete your account in Settings. To ask for a copy of your data, a correction, or the removal of a bug report, email hello@ascendday.com.
Children
Ascend is not for children under 13. If you are under 13, please don’t use it. If we learn that an account belongs to a child under 13, we will delete it. Parents can contact us at hello@ascendday.com.
Security
Connections to Ascend are encrypted, passwords are stored hashed, and database rules let each account read only its own private data. No system is perfect. If a data breach affects you, we will tell you as soon as we can.
Changes
When this policy changes, we update this page and the date at the top. If a change is important, we’ll also tell you in the app.
Contact
Questions or requests: hello@ascendday.com.