Privacy Policy for Decaf

Effective Date: February 17, 2026
Last Updated: February 17, 2026

Introduction

Welcome to Decaf ("we," "our," or "us"). Decaf is developed and operated by Blue Sparrow, an independent software developer based in India.

This Privacy Policy explains how we collect, use, store, and protect your information when you use the Decaf mobile application ("App"). We are committed to protecting your privacy and ensuring you understand how your data is handled.

Contact Information:

1. Our Privacy Commitment

Decaf is built with a privacy-first design. We believe your data is deeply personal and should remain under your control.

2. Information We Collect

2.1 Information You Provide Directly

When you use Decaf, you may voluntarily provide the following information:

Habit Tracking Data:

App Preferences:

Optional Account Information (if you choose to sign in):

2.2 Information Collected Automatically

Device Information:

Usage Analytics:

We do not collect usage analytics events or crash reports automatically. We do not use Firebase Analytics or Firebase Crashlytics at this time.

2.3 Information We Do NOT Collect

3. How We Use Your Information

3.1 Core App Functionality

3.2 App Improvement

3.3 Optional Cloud Services

3.4 Communication (Only with Your Consent)

4. Data Storage and Security

4.1 Local Storage

Your habit tracking data is primarily stored locally on your device using secure database storage.

4.2 Cloud Storage (Optional)

If you choose to use the cloud backup feature:

4.3 Security Measures

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information to any third parties for commercial purposes.

5.2 Third-Party Service Providers

We work with the following third-party services:

Service Purpose Data Shared
Google Firebase (Authentication, Firestore, Cloud Messaging) Optional sign-in, account/profile storage, push notifications Email (if you sign in), display name, profile photo URL, user ID, push notification token, subscription/VIP status fields
RevenueCat Subscription management App user ID, subscription status, product identifiers
Blue Sparrow Email Service Transactional emails Email delivery info
Google Play Services App distribution, purchases Purchase transactions
Google Drive API Optional cloud backup Encrypted backup data (user-initiated)

5.3 Circumstances for Disclosure

We may disclose your information only in the following limited circumstances:

6. Your Privacy Rights

6.1 Universal Rights (All Users)

6.2 EEA Residents (GDPR)

If you are located in the European Economic Area, you have additional rights under GDPR including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

Legal Basis for Processing:

6.3 California Residents (CCPA/CPRA)

If you are a California resident, you have rights under CCPA/CPRA including the right to know, delete, correct, and non-discrimination. Note: we do not sell personal information.

6.4 Other Jurisdictions

We respect privacy rights globally and extend similar rights to users regardless of location, including Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), the UK (UK GDPR), India (DPDP Act), Japan (APPI), and South Korea (PIPA).

6.5 How to Exercise Your Rights

To exercise any of your privacy rights:

  1. In-App: Use Settings → Data Management to access, export, or delete your data
  2. Email: Contact us at privacy@bluesparrow.dev

We will respond to your request within 30 days (or sooner where required by law).

7. Data Retention

7.1 Local Data

Data stored locally on your device is retained until you delete it through the App settings, uninstall the App, or clear the App data through device settings.

7.2 Cloud Backup Data

If you use cloud backup, your data is retained until you delete it through the App settings, revoke the App's access to Google Drive, or delete your Google account.

7.3 Account Data (Firebase)

If you choose to sign in, we store your basic profile information (such as email, display name, and profile photo URL) in Google Firebase. This data is retained until you delete your account.

7.4 Communication Records

If you contact us via email, we may retain communication records for up to 2 years to provide support and improve our services.

8. Children's Privacy

Decaf is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

9. International Data Transfers

As a local-first app, most of your data never leaves your device. However:

10. Third-Party Links and Services

The App may contain links to external websites or services. These external sites are not operated by us, and we are not responsible for their privacy practices.

11. Push Notifications

If you enable push notifications, we may send you daily reminders, milestone celebrations, and peak withdrawal alerts. You can disable notifications at any time through app settings or your device settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this policy.

13. General Disclaimer

Decaf is a personal habit tracking tool and is not a medical device. It does not provide medical advice, diagnosis, or treatment. All information provided by the App is for general informational and self-tracking purposes only. Always consult a qualified professional for medical advice.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Thank you for trusting Decaf with your caffeine-free journey. Your privacy matters to us.

© 2026 Blue Sparrow. All rights reserved.

Terms of Use

Request Account/Data Deletion