ControlMap Privacy Policy

1. Core Privacy Philosophy

ControlMap is designed as a standalone offline-first recovery ecosystem. We do not sell, trade, monetize, or exploit your personal logs, check-ins, or psychological triggers under any circumstances.

2. Information We Collect

ControlMap may collect:

• Email address
• Firebase Authentication identifiers
• Habit tracking information
• Daily check-in records
• Journal and recovery entries
• Reminder preferences
• Timezone information required for reminder delivery

We do not collect payment card information, government identification numbers, contacts, photos, microphone recordings, or unrelated device content.

3. How We Use Your Information

Information is used only to:

• Provide account access
• Synchronize habits and recovery progress
• Deliver reminder notifications
• Maintain application functionality
• Improve service reliability
• Respond to support requests

ControlMap does not sell, rent, trade, or monetize personal information.

4. Authentication & Data Hosting

• Firebase Authentication: When signing up using email/password or Google Sign-In, your account identifiers are processed securely by Google Firebase Auth.
• Cloud Firestore: Your habits, streaks, daily check-ins, and journals are stored securely in Google Cloud Firestore. Your database records are strictly private and can only be accessed using your unique authentication credentials.

5. Third-Party Services

ControlMap uses trusted third-party providers including:

• Firebase Authentication
• Google Cloud Firestore
• Firebase Cloud Messaging (FCM)
• Google Play Services

These services only process data required for application functionality.

6. Waitlist Subscriptions

By providing your email address in our waitlist section, you consent to receive development newsletters, Google Play Beta test invitations, and App Store release announcements. Your email is stored in a write-only Firestore collection and can never be read or viewed publicly.

7. Application Notifications

ControlMap uses Firebase Cloud Messaging (FCM) to trigger daily check-in reminders on mobile platforms. Notification permissions are optional and can be toggled in your device system preferences at any time.

8. Data Retention

Account data remains stored while the account remains active. When a user deletes their account through the in-app Delete Account feature:

• Authentication records are removed
• Habit data is removed
• Daily logs are removed
• User profile data is removed

Limited technical logs may remain temporarily where required for operational or security purposes.

9. Account Deletion & Rights

You maintain complete ownership of your data. You can delete your account at any time within the profile settings, which immediately and permanently wipes all your daily check-in matrices, habits, and journals from our servers.

10. Children's Privacy

ControlMap is not intended for children under the age of 13.
The service does not knowingly collect personal information from children.

11. Privacy Policy Updates

The Privacy Policy may be updated periodically.
Material changes will be reflected on the Privacy Policy page along with an updated revision date.

12. Store Compliance & Contact

This privacy policy is designed to satisfy the strict requirements of Google Play Store Console and Apple App Store Connect reviews. If you have any inquiries regarding your privacy or data processing, please contact us directly at:

support@controlmap.app