Legal · Privacy

Privacy Policy

Last updated — September 8, 2026

This describes what information Next Level Awaits ("the app," "we," "us") collects, how it's used, and how you can delete it. It applies to everyone who uses the app. Questions? Reach us at matt@nlaapp.com.

Information We Collect

Account information

When you create an account, we collect:

Email address — used for sign-in and to send account-related emails (email verification, password reset).
Authentication metadata — our authentication provider (Supabase) automatically logs IP addresses and basic device/session information at the time of sign-in, sign-up, and other auth events, as part of operating its service securely. We don't access this directly, but it is collected on our behalf as infrastructure for running the app.
Session tokens — stored securely on your device so you don't have to sign in every time you open the app.

The data you create in the app

Everything you enter into the app is stored so it's available across your sessions:

Goals (name, color)
Projects
Tasks (name, schedule, difficulty, completion status, and whether you've set a reminder)
Journal entries (date and content you write)
Habits and the dates you've marked them complete
Your display name, if you set one

This data is linked to your account and is not visible to other users. We do not sell this data, and we do not use it for advertising.

AI assistant (Premium feature)

The app includes an AI assistant, available to Premium subscribers. If you choose to use it, the message you send and the data described above (your goals, tasks, habits, and journal entries) are sent to our AI provider, Anthropic, so the assistant can answer with awareness of your actual data. This only happens when you actively open and use the assistant — it is not running in the background. Under Anthropic's standard commercial API terms, data sent through their API is not used to train their models.

Calendar sync (Premium feature)

Premium subscribers can turn on calendar sync, which reads and writes events on your device's own calendar (e.g. Apple Calendar) using your device's operating system — this happens entirely on-device. Calendar event data is never uploaded to or stored on our servers; it only ever moves between the app and your device's local calendar.

Subscriptions

If you subscribe to Premium, we use RevenueCat to manage and validate your purchase across devices. To do this, your in-app account identifier is shared with RevenueCat and linked to your subscription status, so the app knows which features to unlock for your account. RevenueCat does not receive your goals, tasks, habits, or journal entries — only what's needed to manage your subscription. Your actual payment (card details, billing) is handled entirely by Apple's or Google's own in-app purchase systems; we never see or store that information.

What we don't collect

We do not use advertising or analytics SDKs.
We do not access your contacts, camera, microphone, or location.
We do not collect payment information directly — the app offers an optional paid subscription, and payment is handled entirely by Apple's or Google's own in-app purchase systems; we do not receive or store your card details.
We do not upload or store files/images on your behalf, other than the profile picture you choose to upload.

Notifications

If you enable reminders for a task, the app schedules a local notification on your device through your device's operating system. This does not involve sending your data to us or any third party — it's handled entirely on-device.

How Your Data Is Used

We use the information above to:

Operate your account and keep your data in sync across sessions
Send you account-related emails (verification, password reset)
Power the AI assistant, for Premium subscribers who choose to use it
Keep tasks in sync with your device's calendar, for Premium subscribers who turn that on
Manage and validate your subscription, if you have one
Diagnose and fix technical problems

We do not use your data for advertising, and we do not sell or rent your data to third parties.

Third-Party Services

We rely on the following infrastructure providers to operate the app. Each processes data on our behalf as described above:

Supabase — authentication, database (Postgres), and backend functions
Anthropic — powers the AI assistant feature, for Premium subscribers
RevenueCat — manages and validates Premium subscriptions; receives your account ID and purchase/subscription state, not your payment details
Apple / Google — process your actual payment when you subscribe; we never see your card details

Each of these providers has its own privacy policy governing how they handle infrastructure-level data (Supabase's is at supabase.com/privacy, Anthropic's is at anthropic.com/privacy, RevenueCat's is at revenuecat.com/privacy). This policy governs your relationship with us — we're responsible for what we do with your data, including what we send to these providers.

Data Retention and Deletion

Your data is retained as long as your account exists. You can permanently delete your account and all associated data at any time from Profile → Delete account inside the app. This will:

Permanently delete all your goals, projects, tasks, journal entries, and habits
Permanently delete your account credentials

This action is irreversible. Once confirmed, there is no grace period or way to recover the account. Note that deleting your account does not cancel an active subscription — that's managed separately through your Apple ID.

Children's Privacy

This app is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to This Policy

If we make material changes to this policy, we'll update the "Last updated" date above. Continued use of the app after changes means you accept the updated policy.

Contact

Questions about this policy or your data: matt@nlaapp.com