The app saves your progress locally so it is still there when you reopen it:

• Your current challenge — which day you are on and how each day was signed off.
• Your pantry and card collection.
• Your difficulty settings and completed-run history.
• Your diet: which track you are on, whether you eat gluten, and any allergens you excluded.

This data stays in the app’s private storage on your phone. Uninstalling the app deletes it. You can also clear it from your device’s app settings at any time. None of it is sent anywhere, including everything in the analytics section below.

The app asks once whether it may send anonymous statistics. It is off until you say yes — not off-by-default-but-really-on; the measurement library is switched off at the operating-system level until you agree, so it does not even send the automatic events it would otherwise collect on its own.

If you agree, the app sends these and nothing else:

• When a challenge starts — the difficulty you chose, how many rest days and cheat meals it allows, and whether you started with empty pantry slots.
• When you commit to a set for the day, and which set it was.
• When you sign a day off — which day, whether it was cooked, rested, a cheat meal or a failure, and how long your streak was.
• When the app resolves a day you did not answer, and what it decided.
• When a failure costs you cards, and how many.
• When a pack is unlocked, and which one.
• When you put a card in a pantry slot, and which card it replaced.
• When you finish a thirty-day run — how many cards and Legendaries you had, and at what difficulty.
• If you change your diet, which track you moved from and to.

Alongside those it records four things about you: your diet track, your difficulty tier, how many runs you have completed, and which day you are on.

All of it is about a challenge, not about a person. There is no account, so none of it is tied to a name, an email address or a phone number — only to a random identifier the measurement library generates for the installation, which you can reset at any time by turning analytics off.

These are not choices made carefully each time. The app is built so that they cannot be sent at all — every piece of information above is declared in advance, and anything undeclared is discarded before it can leave:

• Your allergies and dietary restrictions. A list of allergies is health information and it never leaves your phone. The app knows it because the cards have to; the statistics do not, and cannot.
• Your birthday, in any form.
• Anything you typed. There is no free text in what is sent — the app has no way to represent it.
• Your name, email address or contacts. The app never asks for them.
• Your location. The app requests no location permission. Note that any internet service can tell roughly which country a connection comes from, and Google’s analytics does derive an approximate region that way — city-level at most, never a position.

Google Analytics for Firebase, provided by Google, acting as our data processor. The data is transmitted encrypted and is held under Google’s terms for that service. We do not sell it, share it with anyone else, or use it for advertising.

It is kept for up to fourteen months and then deleted automatically.

• Say no. Nothing is collected, and the app behaves identically. There is no feature you lose and you will not be asked again.
• Change your mind, either way. The toggle is on the Profile screen.
• Have it deleted. Turning analytics off resets the installation identifier, which severs what was already collected from your device. You can also ask us to delete it using the contact address below.

Our lawful basis for this processing is your consent, and you may withdraw it at any time.

There are no adverts in this app. There is no advertising SDK, and the advertising identifier is not collected — the permissions that would allow it are removed from the app before it is built, and the measurement library is configured not to request it.

The app requests no sensitive Android permissions. It does not use the camera, microphone, location, contacts or files. It uses the internet, and reads whether the phone is online, which is what sending statistics requires.

The app is for a general audience and is not directed at children. We do not knowingly collect information from children. If you believe a child has agreed to analytics on a device you are responsible for, turn the toggle off on the Profile screen or contact us and we will delete it.

Some of these are planned. None are in the app today, and none collect anything from you at present:

• User accounts and cloud sync
• Crash reporting
• Advertising
• In-app purchases
• Friends, guilds, shared households, and photo sharing
• Push notifications

They are listed here so you can see the direction of travel, not because they are active.

This policy is updated before any version that changes the answers above is released, together with the Data safety disclosure on Google Play — not afterwards. If a future release collects something new, it will say so here first: what is collected, why, who processes it, and how to have it deleted.

The date at the head of this page shows when it was last revised.

Questions about this policy, or a request to delete your data, can be sent to Faulty Compass Studio at Luke@faultycompassstudio.com. You do not need an account and you do not need to give a reason.