Privacy Policy

1. Introduction

KLYX ("we", "us", or "our") operates the Chant Flow mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use Chant Flow. By using the App, you agree to the practices described in this policy.

2. Information We Collect

When you use Chant Flow, we may collect the following information:

• Email address — Required for account creation and sign-in via email magic link.
• Name and profile photo — Collected from Google Sign-In if you choose to sign in with Google. Optional.
• User ID — A unique identifier generated by Supabase to manage your account.
• Practice data — Chant session counts, track names and targets, streaks, and session timestamps that you generate while using the app.

We do not collect your location, contacts, call logs, SMS messages, or any other device data beyond what is listed above.

3. How We Use Your Information

• To create and manage your account and authenticate you securely.
• To sync your practice data across devices via cloud storage.
• To deliver scheduled Mind Bell notifications (on-device reminders you configure — not marketing messages).
• To restore your practice history when you reinstall the app or switch devices.
• To improve app stability, diagnose bugs, and understand general usage patterns.

We do not use your data for advertising, profiling, or any purpose not listed above.

4. Data Storage and Security

All user data is stored securely using Supabase — a PostgreSQL-based cloud database with encrypted connections (HTTPS/TLS). Access is authenticated via JSON Web Tokens (JWTs) tied to your account.

Push notifications are delivered via Firebase Cloud Messaging (FCM). Firebase receives a device token to route notifications to your device. It does not receive your practice data.

We apply reasonable technical and organizational safeguards to protect your information against unauthorized access, loss, or misuse. No data is stored unencrypted in transit.

5. Third-Party Services

Chant Flow integrates the following third-party services. Each has its own privacy policy:

• Supabase (authentication and database) — supabase.com/privacy
• Google Sign-In (optional authentication) — policies.google.com/privacy
• Firebase (push notifications) — firebase.google.com/support/privacy

We do not share your personal data with any other third parties.

6. Android Permissions

Chant Flow requests the following Android permissions, used solely for the purposes described:

• POST_NOTIFICATIONS — Deliver Mind Bell reminders you schedule.
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK — Keep audio playback running during active practice sessions.
• SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM — Schedule Mind Bell at precise times you set.
• WAKE_LOCK — Keep the screen on during active sessions.
• RECEIVE_BOOT_COMPLETED — Restore Mind Bell reminders after device reboot.
• MODIFY_AUDIO_SETTINGS — Control audio output for ting bell sounds.
• BLUETOOTH / BLUETOOTH_ADMIN — Support audio playback over Bluetooth devices.
• INTERNET — Sync practice data and authenticate your account.
• REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — Ensure reliable background reminder delivery.

7. Data Retention

Your data is retained for as long as your account remains active. If you delete your account, all personal data associated with your account — including email, profile, and practice history — is permanently deleted within 30 days of your request.

Anonymized, aggregated usage statistics (not linked to any individual) may be retained indefinitely for product improvement purposes.

8. Your Rights

You have the right to:

• Access your personal data — contact us to request a copy.
• Correct inaccurate data — update your profile directly in the app.
• Delete your account and all associated data — use the in-app deletion option (Settings → Account → Delete Account) or submit a request at klyx.agency/apps/android/chant-flow/delete-account.
• Export your data — contact us at contact@klyx.agency.
• Withdraw consent — you may stop using the app at any time.

9. Children's Privacy

Chant Flow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately at contact@klyx.agency and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notification or email. The updated policy will be available at this URL. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: contact@klyx.agency
• Website: klyx.agency