Privacy Policy for Oakwyn
Effective date: July 25, 2026
Who we are: Monkey Dev Labs, LLC ("we," "us," "our"), the company behind Oakwyn (the "app").
Contact: support@oakwyn.app
This policy explains what information the app collects, why, how we store and protect it, and the choices you have. We wrote it in plain language on purpose. If anything here is unclear, email us at support@oakwyn.app.
The app is currently available through a private, invite-only test (an "alpha") distributed through Apple TestFlight, ahead of a public release. Some practices below are specific to that stage and are called out.
1. Who the app is for
The app is built for adults. It is not directed to children and is not intended for anyone under 18. We do not knowingly let children create accounts or use the app.
2. What we collect and why
We collect as little as we can. Here is everything, and the reason for each item.
| What we collect | Example | Why we collect it |
|---|---|---|
| Account email | The email you sign up with, or, if you sign in with Apple, the email address Apple provides (a private relay address if you turn on Hide My Email) | To create and secure your account and to contact you about the alpha |
| Display name | A name you choose at signup, or, if you sign in with Apple, the name Apple shares with us the first time you sign in, which you can edit before sharing or change any time after | Shown to a matched partner, if you have one, so they know who they're paired with |
| Your goals and routines ("quests") | The habit or routine you're working on, in your own words | This is the core of the app, and it's your private content. See Section 4; it is treated as your most sensitive data |
| Quest category | A fixed label like "fitness" or "sleep" (a preset choice, not your words) | To organize the experience and understand, in a low-detail way, what kinds of goals people set |
| Game progress | Coins, chambers/floors, rank, and completion history | So the app works and your progress shows correctly |
| Usage analytics | Pseudonymous records that you opened the app, completed a quest, or dismissed a daily prompt, tagged with the date and a random ID | To measure whether the app actually helps people stick with their routine |
| TestFlight data (from Apple) | Crash logs, basic usage stats, and any feedback you send through TestFlight | Apple shares this with us automatically under Apple's own privacy terms, so we can fix bugs during the alpha |
What we do NOT collect: we do not collect your precise location, contacts, photos, health-app or fitness-sensor data, or advertising identifiers. We do not use third-party advertising or cross-app tracking tools of any kind. The optional daily reminder lives entirely on your phone; no reminder data is sent to us.
Signing in with Apple. Alongside email and password, you can create an account using Sign in with Apple. Apple lets you review and edit the name and email it shares with us before you approve, right in Apple's own sign-in screen. If you turn on Apple's Hide My Email, we receive a private relay address instead of your real one (something like xabc123@privaterelay.appleid.com), and email sent to that address still reaches you through Apple; we never see your real address in that case. We request only your name and email through Sign in with Apple, nothing else from your Apple ID.
3. How our analytics work (and what they never contain)
Our usage analytics are first-party only. They live in our own backend (Supabase) and are not shared with any advertising network or data broker.
Two commitments matter most here:
- Your quest text is never sent to analytics. The words you write for your goals and routines are never placed in the analytics records, not the title, not custom text, nothing you typed. Analytics only ever store a preset category label (for example, the fixed word "fitness," or the literal word "custom" when you pick a custom goal, never the custom text itself).
- Analytics identify you only by a pseudonymous ID. Your events are tagged with a random account ID, not your name or email. The link between that ID and your real name or email lives only in the secure account system, never in the analytics records.
One more specific: if you dismiss a daily "yesterday" reflection prompt, we record that you dismissed it. We do not record how many items you dismissed or any detail about them.
We don't use any advertising or attribution tools, and the app does not track you across other apps or websites. Because of that, the app does not show an App Tracking Transparency prompt; there is nothing to ask your permission for.
4. Your quests are private content
Your goals and routines are the most sensitive thing the app holds. We treat them that way:
- Your quest text is never shown to any other user, including a matched partner (see Section 5).
- Your quest text is never placed in analytics (see Section 3).
- Your quest text is stored in your account and is protected by database access rules so other users cannot read it.
The app is a general wellness and habit tool. It is not a medical or clinical service and is not a substitute for professional medical, mental health, or other professional advice.
5. Data sharing, the little we share, and with whom
We do not sell your data. We do not share it for advertising. We share only what is strictly needed to run the app:
- With a matched partner (paired participants only). If you agree to be matched with another participant, that partner can see your display name, a positive-only daily status (whether you've completed your quest for the day; there is no signal shown for an undone or incomplete quest), and your game progress (rank/title and floor). Your partner never sees your quest content, not the words, not the category detail, nothing you typed, and never sees that a quest went undone. Participants who are not matched share nothing with another user.
- With our backend provider (Supabase). We use Supabase to run the app's database and accounts. Supabase stores data on our behalf as a service provider and does not use it for its own purposes.
- When required by law. We may disclose information if we are legally required to, for example in response to a valid legal request.
That's the complete list. There is no advertising sharing, no data broker, no cross-app tracking.
6. How long we keep data, and deletion
- During the alpha, we keep your account, quests, and analytics only as long as needed to run and learn from the test.
- You can delete your account yourself, in the app, at any time. Settings, then Delete account. Deleting your account immediately and permanently removes your quests, progress, and account data from our active systems; this cannot be undone. Copies that remain briefly in our routine system backups age out automatically on our normal backup schedule. You can also reach us at support@oakwyn.app for any deletion questions or if you can't access the app to delete it yourself.
- If the alpha or the app ever winds down, we will tell participants directly and give you a chance to delete your data yourself before we take any further action.
7. How we protect data
- Data is stored in our Supabase backend, protected by account authentication and database access rules ("row-level security") so that one user cannot read another user's private data.
- Your name/email is kept separate from the pseudonymous analytics records (see Section 3).
- Access to alpha data is limited to the founder running the alpha.
No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your information and to collect as little as possible. If we ever experience a security incident that affects your data, we will notify affected users.
8. Children
The app is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.
9. Your choices and rights
You can:
- Access the information we hold about you; email support@oakwyn.app.
- Correct information that's wrong.
- Delete your account and data (Section 6).
- Leave the alpha at any time, with no friction and no penalty.
Depending on where you live, you may have additional legal privacy rights. Contact us and we'll do our best to help.
10. Where data is handled
The app is operated from Texas, United States, and the alpha is intended for participants located in the United States. We are not currently set up to support users in the EU or UK.
11. Changes to this policy
If we change this policy, we'll update the "Effective date" above and, for material changes during the alpha, tell participants directly (for example, by email). Continued use after an update means you accept the updated policy.
12. Contact
Questions, requests, or data deletion: support@oakwyn.app.
Developer: Monkey Dev Labs, LLC.