Privacy Policy
Last updated: October 27, 2026
Earn ("we," "our," or "us") operates the Earn mobile application and earnapp.xyz website. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.
Overview
Earn blocks access to distracting apps until you complete designated challenges. We are committed to protecting your privacy and being transparent about our data practices. This policy applies to the Earn mobile app, our website at earnapp.xyz, and any related services.
Data We Collect
Account and Profile Information
When you create an account, we collect:
- Email address – Used for account creation, verification, and communication
- Profile nickname – A display name you choose to identify yourself within the app
- Device identifier – Used to associate your device with your account and sync app-blocking settings
- Marketing preferences – Whether you have agreed to receive marketing emails, whether you have unsubscribed, and when
Usage and Activity Data
We collect data necessary to operate the app:
- Challenge responses – Whether you answered challenges correctly (used to improve learning and unlock app access)
- Challenge feedback – Upvotes or downvotes on challenges (used to improve content quality)
- Credits and progress – Your earned credits and pack enrollment status
- Session data – Session tokens, IP address, and user agent for security and authentication
- Subscription status – Whether you have an active Earn Premium subscription, which plan you chose, and when it renews or expires. You can subscribe through the Apple App Store, Google Play, or our web checkout. Web checkout payments are processed by Stripe on behalf of RevenueCat; we never receive your full payment card details.
Technical and Diagnostic Data
- Product analytics – We use PostHog to understand how the app is used. This includes the screens you visit, the actions you take (such as completing a challenge or opening the paywall), your device type and OS version, and app lifecycle events. PostHog may also record session replays – reconstructions of how you moved through the app's screens – to help us find usability problems. Your IP address is used to derive an approximate location (country), which we use for analytics and to decide which marketing rules apply to you (see below).
- Install attribution and links – We use AppsFlyer to understand which ads, links, or campaigns led you to install or open Earn, and to measure sign-ups, onboarding completion, and subscription starts (including the plan and price). AppsFlyer receives your Earn account ID, device identifiers, your IP address, and these events. On iOS, we access your device's advertising identifier (IDFA) only if you allow tracking in the App Tracking Transparency prompt. The links in our emails and on our website use AppsFlyer OneLink, which records the click and your device type so it can open the app or the right app store page.
- Error and crash reports – We use Sentry to collect diagnostic information when the app or server encounters errors. This may include device type, OS version, and error details to help us fix issues.
- Website analytics – Our website uses Plausible Analytics, a privacy-focused analytics service that collects anonymized page views and basic usage metrics. Plausible does not use cookies and does not track you across sites.
How We Use Data
We use your data to:
- Provide, maintain, and improve the Earn app and website
- Authenticate your identity and manage your account
- Send verification codes and transactional emails (e.g., email verification, important notices about your account or changes to our terms)
- Send marketing emails about Earn, such as new features, learning tips, and offers – subject to your consent where the law requires it, and always with the option to unsubscribe (see Marketing Emails below)
- Deliver push notifications (if you opt in)
- Manage your subscription and determine which features you have access to
- Understand how the app is used so we can improve it
- Measure which ads, links, and campaigns bring people to Earn
- Improve our challenge algorithm and content based on feedback
- Diagnose and fix technical issues
- Comply with legal obligations
Marketing Emails
We would like to tell you about things we think you'll find useful – new learning packs, features, tips, and occasional offers. Here is how that works:
- Where consent is required, we ask first. If you are in the European Economic Area, the United Kingdom, Switzerland, Canada, Australia, or any other place whose law requires it, we will not send you marketing emails unless you have told us you want them – for example by confirming through a link we send you. Not responding means we will not email you.
- United States. If you are in the United States, we may send you marketing emails about Earn on the basis of our legitimate interest in telling existing users about our product, as permitted by the CAN-SPAM Act. Every such email includes a way to unsubscribe.
- How we decide which rule applies. We use the approximate country derived from your IP address. If we cannot determine your country, we treat you as if consent were required and do not email you until you opt in.
- Unsubscribing. Every marketing email includes an unsubscribe link, and a link to a preferences page where you can manage what you receive. You can also email us at hello@earnapp.xyz. Unsubscribing takes effect promptly and does not affect transactional emails such as verification codes, which are necessary to operate your account.
- What we keep. We record when you consent and when you unsubscribe, so that we can prove we had permission and make sure we honour your choice. After you unsubscribe or delete your account, we keep your email address on a suppression list so that we do not email you again.
Data Sharing and Third-Party Services
We do not sell your personal data. We share data only with service providers necessary to operate our services:
| Service | Provider | Purpose | Data Shared |
|---|---|---|---|
| Authentication | Better Auth | Account creation, sign-in, session management | Email, nickname, session tokens |
| Hosting (backend) | Render | Application and database hosting | All account and usage data |
| Mobile app platform | Expo | App build, updates, and native services | Device info, app usage |
| Product analytics and marketing email | PostHog | Usage analytics, session replay, and sending marketing emails and managing your email preferences | Email, in-app events, device info, IP address and derived country, marketing preferences |
| Transactional email | Loops | Verification codes | Email address, verification codes |
| Subscriptions | RevenueCat | Managing subscriptions and entitlements, and running our web checkout | Account identifier, subscription status, purchase details, and the email address you use at web checkout (no payment card details) |
| Payment processing (web checkout) | Stripe | Processing web checkout payments on behalf of RevenueCat | Payment card details, billing email, and country, which you enter directly with Stripe and which are not shared with us |
| Attribution and links | AppsFlyer | Measuring which ads, links, and campaigns lead to installs, sign-ups, and subscriptions; opening the app from links | Account ID, device identifiers (IDFA only with your permission), IP address, app events such as sign-up and subscription start, link clicks |
| Error tracking | Sentry | Crash and error reporting | Device info, error logs, IP (anonymized where possible) |
| Website analytics | Plausible | Anonymized website usage | Page views, referrer (no cookies) |
| Hosting | Cloudflare | Website delivery and security | Standard request data |
Each provider processes data according to their own privacy policies and our instructions. We recommend reviewing their policies:
- Better Auth – Authentication
- Render – Backend hosting
- Expo – Mobile app platform
- PostHog – Product analytics and marketing email
- Loops – Transactional email
- RevenueCat – Subscriptions and web checkout
- Stripe – Web checkout payments
- AppsFlyer – Attribution and links
- Sentry – Error tracking
- Plausible – Website analytics
Data Retention
- Account data – Retained until you delete your account or request deletion
- Marketing preferences – Retained for as long as you have an account. After deletion, your email address is kept on a suppression list so we do not email you again.
- Session data – Expires according to session settings; old sessions are removed
- Verification codes – Expire after a short period and are deleted
- Product analytics – Retained by PostHog according to their retention policy; session replays are kept for a shorter period than event data
- Purchase records – Retained by us, RevenueCat, and Stripe for as long as needed for billing, tax, and legal requirements
- Attribution data – Retained by AppsFlyer according to their retention policy
- Error logs – Retained by Sentry according to their retention policy (typically 90 days)
- Website analytics – Plausible retains aggregated, anonymized data per their policy
Security
We take reasonable measures to protect your data:
- Transport – All data is transmitted over HTTPS/TLS
- Authentication – Passwords are hashed; we use email OTP for verification
- Storage – Sensitive data is stored in a secure database with access controls
- Local storage – The app uses Expo Secure Store for sensitive data on your device
Your Choices and Rights
- Access and correction – You can view and update your profile information in the app
- Marketing emails – Use the unsubscribe link or preferences page in any marketing email, or email us. If you gave consent, you can withdraw it at any time the same way.
- Deletion – You may request account deletion by contacting us at hello@earnapp.xyz
- Push notifications – You can disable push notifications in your device settings
- Ad tracking – On iOS, you can allow or decline tracking in the App Tracking Transparency prompt, and change your choice any time in Settings > Privacy & Security > Tracking
- Web subscriptions – You can manage or cancel a subscription bought through our web checkout using the link in your purchase receipt, or by emailing us
- Website analytics – You can opt out of Plausible by using a "Do Not Track" browser setting or an opt-out extension
If you are in the European Economic Area, UK, or California, you may have additional rights (e.g., data portability, restriction of processing, objection). Contact us to exercise these rights.
Children's Privacy
Earn is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us and we will delete it promptly.
International Transfers
Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers where required by law.
Push Notifications
If you enable push notifications, we use Apple Push Notification service (APNs) or the equivalent for Android. Notification delivery is handled by your device and the respective platform. We do not use push notifications to track you.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date, and, for significant changes, by email. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions or to exercise your rights:
- Email: hello@earnapp.xyz
- Website: earnapp.xyz