Privacy Policy

Effective date: July 20, 2026

Acta (“the app”, “we”, “us”) is operated by West-East Forte. Acta is a private, group-based habit tracker: you form invite-only “squads”, set stakes on your habits, and hold each other accountable. This policy explains what we collect, who processes it, and how you can remove it. It applies to the Acta mobile app and this website.

1. Data we collect

Account: your email address and a hashed credential, used to sign you in. We do not collect your real name or a profile photo.
Content you create: squads, stakes (challenges), check-in text logs, proof photos you attach, chat messages, votes, and the optional note you send when requesting to join a squad.
Safety and moderation: the list of users you block, and any report you submit about another user's content (what you reported and why).
Purchase status: if you subscribe to Premium, our subscription partner RevenueCat processes the store receipt and we store a yes/no premium flag. We never see your card or bank details - payment is handled entirely by the Apple App Store or Google Play.
Advertising identifier (with your control): on iOS, your device's advertising identifier (IDFA) only if you allow tracking when prompted; on Android, your Google advertising ID. Used solely to measure which ad brought you to Acta - see Section 5.

We do not collect precise geolocation, your contacts, your browsing history in other apps, or videos.

2. How your content is shared

Squads are private and invite-only. Your stakes, check-ins, chat messages, and votes are visible only to the members of the squad you posted them in. They are never listed publicly, never aggregated into a public feed, and never sold or shared with third parties for their own purposes.

One exception you should know about: proof photos. They are stored as files whose web address contains a long random identifier that cannot be guessed. The app shows them only to your squad, but anyone who obtains that exact address - for example, if you forward it - can open the image without signing in. Treat proof photos as unlisted rather than strictly secret.

3. How your content is verified

Completion is confirmed by your squad-mates, by peer vote. A simple majority of the other members counts. We do not run automated or AI analysis over your proof photos, check-ins, or chat messages, and your content is never used to train any model.

4. Processors

Your data is stored on Supabase (Postgres database, Authentication, and file Storage) in the Northeast Asia (Seoul, ap-northeast-2) region. Subscriptions are managed by RevenueCat, and payments are processed by the Apple App Store or Google Play. These providers process data on our behalf. This website is served as static files by Vercel, which stores no user data. For our advertising partner, see Section 5.

5. Third-party data sharing for advertising (Meta)

Acta shows no ads and never sells your personal data. We do run install ads for Acta on Meta platforms (Facebook/Instagram), and to measure whether they work we embed the Meta (Facebook) SDK in the app. This is the one case where limited data leaves our systems for a third party's own advertising purposes, so here is exactly what that involves:

What is shared: your device's advertising identifier (IDFA on iOS, only if you allow tracking; Google advertising ID on Android), basic device/app metadata (device model, OS version, app version), and two event signals - that you completed registration, and, if you subscribe, the purchase amount and currency. We do not share your email, your name, your squad content, chats, votes, or proof photos with Meta.
Why: to attribute app installs to the ad campaign that drove them and to measure/optimize our advertising spend. Meta may also use this data per its own privacy policy, including to inform ad delivery on its platforms.
Your control on iOS: the first time you open the app, iOS's App Tracking Transparency prompt asks permission to track you. If you decline, we do not collect or send your IDFA, and Meta receives no device-level identifier from us. You can review or change this anytime in Settings → Privacy & Security → Tracking.
Your control on Android: the Google advertising ID is available to apps by default. You can reset or opt out of ad personalization anytime in Settings → Google → Ads on your device.
Meta's own policy: data received by Meta is additionally governed by Meta's Privacy Policy, which is outside our control.

Outside of this advertising-attribution use, we do not embed any other third-party ad or analytics SDK, we do not build advertising profiles beyond what is described above, and this website sets no cookies and runs no analytics.

6. Retention and deletion

We keep your data for as long as your account exists. You can delete your account and all associated data at any time from Account → Delete account inside the app, or by following the steps on our account deletion page. Deletion removes your account, the squads you own (including their stakes and chats), your check-ins, votes, and proof photos. Your messages in other people's squads are kept but anonymized, so the conversation still makes sense to the remaining members. Deletion is immediate and permanent.

7. Children

Acta is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

8. Your rights

You may access, correct, export, or delete your data. The fastest route is in-app account deletion; for anything else, email us and we will respond within 30 days.

9. Changes to this policy

We may update this policy. Material changes will be reflected in the effective date above and, where required, notified in the app.

10. Contact

West-East Forte - west.eastforte@gmail.com