Privacy Policy

1. Introduction

At Rebuild, protecting your privacy is a priority. This Privacy Policy explains what data we process when you use the Rebuild application (hereinafter "the Application"), why we process it, and what your rights are.

The data controller is Paolo ("we", "Rebuild"). For any question, contact us at rebuildapp.contact@gmail.com.

In short: the sensitive content you create (the habits and addictions you declare, the urges you resist, your builds and rituals) stays on your device. Only your account and subscription data, plus anonymous usage statistics, are processed in the cloud.

2. Data We Process

a) Stored only on your device (never sent to us): • The habits and addictions you choose to track. • The urges you resist and your resistance history. • Your bricks, builds, goals and gallery. • Your daily rituals and their progress. • App preferences (theme, language, notifications).

b) Stored in the cloud (Firebase) once you sign in: • An account identifier and the email address provided by Sign in with Apple (iOS, possibly a private relay address) or Sign in with Google (Android). • Your Rebuild Plus subscription status, managed via RevenueCat.

c) Anonymous usage statistics (Firebase Analytics): • Aggregated usage events (e.g. a screen was opened, a build was completed) that help us understand how the Application is used and improve it. These events never include the content of your habits, urges or builds.

3. Where Your Data Is Stored

• Your personal content (habits, addictions, resisted urges, builds, rituals, preferences) is stored exclusively on your device, in a local database. It never leaves your phone or tablet and is permanently erased when you delete the Application.

• Your account and subscription data is stored on Google Firebase (Firebase Authentication and Cloud Firestore), our authentication and database provider. These data may be processed on servers located outside the European Union, including in the United States; appropriate safeguards apply, such as the European Commission's Standard Contractual Clauses and Google's certification under the EU-U.S. Data Privacy Framework.

4. Sharing & Service Providers

We never sell or rent your data, and we never use it for advertising.

We only share data with the providers strictly necessary to run the Application, which act as our processors and may only use the data on our instructions: • Apple — Sign in with Apple and in-app purchases (iOS). • Google — Sign in with Google and in-app purchases via Google Play (Android). • Google Firebase — authentication, database (Firestore) and anonymous analytics. • RevenueCat — subscription validation and management.

5. Analytics & Diagnostics

The Application uses Firebase Analytics to collect anonymous, aggregated usage events (screens opened, features used). These events are not linked to the content you create and are used solely to improve the Application. We do not use any advertising identifier.

In addition, Apple (via the App Store) or Google (via Google Play) may automatically collect diagnostic data, in accordance with the privacy settings you have configured on your device (e.g. Settings > Privacy > Analytics & Improvements on iOS). Rebuild has no control over this data.

6. Third-Party Services

The Application relies on the following third-party services:

Sign in with Apple (Apple): Used to create and access your account on iOS. Apple provides us with an account identifier and your email (possibly a private relay address). You can manage Sign in with Apple in your Apple ID settings.

Sign in with Google (Google): Used to create and access your account on Android. Google provides us with an account identifier and your email. You can manage third-party app access in your Google Account settings.

Google Firebase — Authentication, Cloud Firestore & Analytics: Used to authenticate you, to store your account and subscription status, and to collect anonymous usage statistics. See Google's privacy policy: policies.google.com/privacy.

RevenueCat: Used to validate and manage subscriptions and in-app purchases. RevenueCat receives an anonymous identifier and your purchase history, never your personal content. See RevenueCat's privacy policy: revenuecat.com/privacy.

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), you have the following rights:

• Access: you can view your local data directly in the Application; for your cloud account data, contact us. • Rectification: you can edit your data in the Application at any time. • Erasure: use "Delete account" in your profile to permanently delete your cloud account data; deleting the Application erases all local data. • Portability, restriction and objection: contact us at rebuildapp.contact@gmail.com.

You also have the right to lodge a complaint with your local data protection authority (in Belgium: the APD/GBA, autoriteprotectiondonnees.be).

8. Children

The Application is intended for users aged 13 and over (see our Terms of Service for details). We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it.

9. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be published in the Application and on this site, and will take effect immediately.

Your continued use of the Application after the publication of changes constitutes your acceptance of the revised policy.

10. Contact

For any questions regarding this Privacy Policy or the protection of your data, you can contact us at:

rebuildapp.contact@gmail.com