On this page
1. Summary
- You sign in with your Google account. Sign-in is handled by Google and Amazon Web Services (AWS Cognito).
- Your promises and the people you add are stored only on your device. They are not uploaded to our servers.
- When you sign in, sign out, update your profile, or send feedback, a small record is sent to our own admin dashboard ("Work Manager") so we can secure accounts and provide support.
- We do not use analytics SDKs, crash reporting SDKs, advertising, or the advertising ID. We do not sell your data.
2. Information we collect
| Category | What | How it is collected | Where it goes |
|---|---|---|---|
| Account information | Your name, email address, Google user ID, and the account ID assigned by AWS Cognito | From Google when you choose to sign in | AWS Cognito; stored on your device; name, email and IDs are sent to Work Manager with sign-in/sign-out events |
| Sign-in tokens | ID, access and refresh tokens | Automatically, during sign-in | Stored securely on your device by the AWS Amplify library; sent to AWS to keep you signed in |
| Profile details you edit | Full name, username, and phone number (optional) | Entered by you on the My Account screen | Stored on your device; sent to Work Manager when you save changes |
| Your content | Promises (titles, notes, dates, status) and names of people you add | Entered by you | Stored only on your device (not uploaded) |
| Feedback | The message you write, the screen you sent it from, and your name, username, email and account ID | Entered by you when you send feedback | Work Manager |
| App activity | Sign-in, sign-out, profile update and "account revoked" events, with time, screen name, and your name, email, Google user ID and account ID | Automatically, when these events happen | Work Manager |
| Device / app info | Platform (for example Android), app version, and timestamp | Automatically, with feedback and activity events | Work Manager |
| Network information | Your IP address, which our Work Manager server converts to a one-way hash for rate limiting (abuse prevention) | Automatically, as part of any internet request | Work Manager (hashed) |
We do not collect your location, contacts, photos, files, microphone, camera, or payment information.
3. How we use information
- Sign-in and keeping you signed in – to verify your identity and keep your session active.
- Account security and administration – to see sign-in activity, detect misuse, and revoke or disable accounts when needed. If an account is revoked on our side, the app signs you out and records an "account revoked" event.
- Support and feedback – to read and reply to feedback you send.
- Improving the app – to understand which app versions and platforms are in use and fix problems reported through feedback.
We do not use your information for advertising, and we do not sell or rent it.
5. Storage and security
- Promises, people, and profile details are stored on your device using the app's local storage.
- Sign-in tokens are stored on your device by the AWS Amplify library.
- All data sent over the internet uses encryption in transit (HTTPS/TLS).
- Access to Work Manager data is limited to authorised Yuva Labs staff who need it to run and support the app.
No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.
6. How long we keep data
- On-device data (promises, people, profile, tokens): until you delete it, sign out (for tokens), clear the app's data, or uninstall the app.
- Sign-in account (AWS Cognito): until you ask us to delete your account.
- Feedback and activity logs in Work Manager: up to 24 months from the date they are created, then deleted, unless we need them longer to resolve a dispute or meet a legal obligation.
7. Account and data deletion
- Sign out: open My Account and tap Sign out. This removes your sign-in session from the device.
- Delete on-device data: delete promises and people inside the app, or clear the app's storage / uninstall the app.
- Delete your account and server data: email [email protected] with the subject "Delete my Promise Tracker account" from the email address you signed in with. We will delete your AWS Cognito account and your feedback and activity records in Work Manager, and confirm within 90 days. Some records may be kept where the law requires it.
- Without the app: you can request deletion at any time, even after uninstalling, by emailing [email protected] as described above. Our account deletion page is https://promisetracker.yuvakishore.com/accountdeletion.
You can also remove Promise Tracker's access to your Google account at any time at https://myaccount.google.com/permissions.
8. Your rights
Depending on where you live (for example under the EU/UK GDPR or India's Digital Personal Data Protection Act, 2023), you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- withdraw your consent (for example by signing out and asking us to delete your account);
- nominate someone to exercise your rights (India DPDP Act), and complain to your local data protection authority.
To use any of these rights, email [email protected]. We will respond within 90 days. We process your data to provide the service you asked for (sign-in, feedback) and with your consent.
9. Children
Promise Tracker is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
10. Permissions
- Internet access (
android.permission.INTERNET) – required for Google sign-in, AWS Cognito, and sending feedback and account activity to Work Manager.
The app does not request location, contacts, camera, microphone, storage, or notification permissions.
11. Changes to this policy
We may update this policy when the app changes. We will change the effective date above and, for significant changes, tell you in the app or on the store listing.
12. Contact
Yuva Labs – Promise Tracker
Email: [email protected]