Privacy Policy

Effective Date: March 24, 2026

1. Introduction

This Privacy Policy explains how CannAppy ("we," "us," or "our") collects, uses, and protects your information when you use the OneFast intermittent fasting tracker application ("the App"). We are committed to safeguarding your privacy and being transparent about our data practices.

By using OneFast, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the App.

2. Developer Information

OneFast is developed and maintained by CannAppy. For more information about our organization, visit cannappy.org.

3. Data We Collect

3.1 Data You Provide

• Fasting logs: Start times, end times, fasting plan selections, and completion status.
• Weight entries (optional): Body weight measurements you manually log within the App.
• Check-in data (optional): Self-reported mood, energy levels, and notes recorded during or after fasts.
• Account information (optional): If you choose to create an account for cloud sync, we collect your email address and authentication credentials via Firebase Authentication.

3.2 Data Collected Automatically

• App usage analytics: We use PostHog to collect anonymized usage analytics, including screen views, feature usage frequency, app session duration, and crash reports. These analytics help us improve the App and do not include personally identifiable fasting or health data.
• Device information: General device type, operating system version, and app version for compatibility and debugging purposes.

3.3 Data We Do Not Collect

• We do not collect your precise location.
• We do not access your contacts, photos, or other personal files.
• We do not collect biometric data (fingerprint, face scan, etc.).

4. How Your Data Is Stored

4.1 Local Storage (Default)

By default, all fasting logs, weight entries, and check-in data are stored locally on your device. This data never leaves your device unless you explicitly enable cloud sync.

4.2 Cloud Sync (Optional)

If you sign in with an account, your data may be synced to Firebase (Google Cloud) to enable backup and cross-device access. Firebase data is encrypted in transit and at rest. You can disable cloud sync at any time from the App's Settings.

5. Third-Party Services

OneFast integrates with the following third-party services:

• Firebase (Google): Used for optional user authentication and cloud data sync. Subject to Firebase's Privacy Policy.
• RevenueCat: Processes in-app subscription purchases. RevenueCat receives transaction identifiers and subscription status but does not receive your health or fasting data. Subject to RevenueCat's Privacy Policy.
• PostHog: Collects anonymized app usage analytics. Subject to PostHog's Privacy Policy.

6. How We Use Your Data

We use the data we collect to:

• Provide and maintain the App's core fasting tracking functionality.
• Display your fasting history, statistics, and progress trends.
• Enable cloud backup and cross-device sync (if opted in).
• Process subscription payments via RevenueCat.
• Improve the App based on anonymized usage patterns.
• Diagnose and fix technical issues and crashes.

7. Data Sharing

We only share data with the third-party service providers listed in Section 5, and only to the extent necessary to operate the App. We may also disclose data if required by law or to protect our legal rights.

8. Your Rights and Choices

8.1 Data Export

You can export all of your fasting data, weight entries, and check-in data at any time from the App's Settings. Exports are provided in a standard, portable format.

8.2 Data Deletion

You can delete all of your data from the App's Settings. If you have cloud sync enabled, this will also delete your cloud-stored data. Deletion is permanent and cannot be undone.

8.3 Analytics Opt-Out

You can disable analytics collection from the App's Settings at any time.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data ("right to be forgotten").
• Right to data portability: Request your data in a machine-readable format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to data processing based on legitimate interests.

To exercise any of these rights, contact us at support@cannappy.org. We will respond within 30 days.

10. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of personal information we have collected.
• Right to opt-out: We do not sell personal information, so no opt-out is necessary.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@cannappy.org.

11. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest (for cloud-synced data).
• Secure authentication via Firebase Authentication.
• Regular security reviews of third-party integrations.

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

12. Children's Privacy

OneFast is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by updating the "Effective Date" at the top of this page. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: support@cannappy.org
• Website: cannappy.org