ProveIt — Privacy Policy
ProveIt is an accountability app. You set tasks, prove you did them (with a photo, your location, a peer review, or self-check), and the app can restrict access to distracting apps on your device until you follow through. This policy explains exactly what data that involves, where it goes, and what you can do about it.
This policy covers the ProveIt iOS app and the ProveIt web app. In this policy, “we” and “ProveIt” mean the developer of ProveIt, contactable at the address in the Contact section.
1. Data we collect
Account and identity
When you create an account we collect and store, in your profile document:
- a user ID assigned by Firebase Authentication;
- your email address (stored lowercased);
- a display name (taken from your sign-in provider, or derived from the local part of your email address if you do not supply one);
- a profile photo URL, if your sign-in provider supplies one;
- the date your account was created.
You can sign in with an email address and password, or with Google Sign-In. If you use an email and password, the password is handled entirely by Google Firebase Authentication — it is not stored in our database and we never have access to it. If you use Google Sign-In, Google returns your name, email address and profile picture to the app.
Content you create
The app stores the things you put into it, associated with your user ID:
- tasks, projects and project steps, and their scheduled occurrences;
- areas and categories you organise tasks into;
- your weekly schedule and the time windows you mark as work, sleep or free;
- evidence records for completed tasks, including AI verification verdicts and any written appeal you submit;
- streaks, task stakes (streak, money-credit or social), and any resulting penalties;
- groups and crews you join, their membership lists, and the activity feed within them;
- tasks and projects shared with or assigned to other people, including the email address used to share them;
- in-app notifications and nudges generated for you;
- your subscription entitlement, screen-time pass balances and pass history.
Photos and files
If you prove a task with a photo, that photo is uploaded to Google Firebase Storage under a path tied to your user ID. You may also attach reference photos or documents to a task. Those are the only two kinds of file the app uploads. There is no profile-avatar upload. The app never asks you for a profile picture and has no way to store one; where you see a picture next to your name it is either your initial drawn by the app or the picture already attached to the Google or Apple account you signed in with, which stays on their servers and never reaches ours.
Who can open a proof photo or an attachment. A proof photo or an attached file is readable only by the people who can already see the task it belongs to — you, the people you shared that task or project with, and members of the crew it was posted to. This is enforced on our servers on every single request, not by the app deciding what to show: the server looks up the task or occurrence the file belongs to and checks that the person asking is entitled to it. Someone signed in to ProveIt or ProveIt Family who is not entitled to that task cannot open the file even if they know its exact path, and someone who is not signed in cannot open it at all.
Until 21 August 2026 this was not true, and this page said so: the rules then in force let any signed-in user of either app read a proof photo or an attachment if they knew or could construct its path. Those rules have been replaced, and the paragraph that warned about it has been replaced with this one.
One caveat is unchanged: when a phone displays a file it obtains a long-lived Google Firebase download link for it, and anyone that link is forwarded to can open it without signing in.
AI photo verification
When you submit a photo as proof, the app sends that photo, the task title and any photo hint to Google’s Gemini API through our server, which returns a pass/fail verdict and a short reason. If you appeal a rejection, your written appeal is sent too. We do not use your photos to train any model of our own. Google’s handling of data sent to the Gemini API is governed by its own terms; see Google’s Gemini API terms. Verdicts and reasons are stored with the task.
Location
Location is optional and used for two things: proving location-based tasks (for example, being at the gym), and detecting whether you are home so the app knows when you are free. If you enable it, the app may request background location access so this works when the app is closed.
What actually leaves your device is deliberately narrow:
- Places you save are stored on our servers. When you attach a location to a task, its label, latitude, longitude and radius are saved with that task.
- Your live position is not. Your device compares your current coordinates
to your saved places locally. The only thing sent to our servers is a
true/falsevalue for “at home” plus whether it came from a geofence or the app being open. The server rejects anything else; it does not receive or store your coordinates, a location history, or a movement trail.
Screen Time and app blocking
ProveIt can restrict distracting apps using Apple’s Family Controls, Device Activity and Managed Settings frameworks. This is the most privacy-sensitive capability in the app, so we want to be precise about it:
- When you choose which apps and categories to block, iOS returns an opaque token. Apple designed it so that even we cannot read which apps you picked — the app can only ask the OS for a count of apps and categories.
- That token never leaves your device. It is stored only in local storage and in an app-group container shared with ProveIt’s own device extensions. It is never written to our database, never sent to our servers, and never shared with any third party. We have verified this against the source code.
- What our servers do hold is whether blocking should currently apply to you and at what escalation level — derived from your streaks and missed tasks, not from your app usage.
In short: ProveIt does not know, collect, or transmit which apps you use or which apps you chose to block.
Notifications
If you allow notifications, a push token for your device is stored on your profile so we can send reminders and escalation alerts. It is deleted when you sign out. Notifications are delivered via Expo’s push notification service and Apple Push Notification service.
Subscriptions and payments
Subscriptions are sold through Apple’s In-App Purchase system and managed by RevenueCat, which acts as our processor. Your Firebase user ID is used as your RevenueCat identifier so your subscription follows your account. Apple processes the payment and shares purchase and renewal status with RevenueCat, which notifies our server so we can unlock the app. We never receive or store your payment card, bank details or billing address.
Analytics and diagnostics
We use PostHog for product analytics — which screens are opened, which actions are taken, and where people get stuck. Events are linked to your user ID once you sign in. PostHog’s mobile session replay is enabled: it records a reconstruction of your screens and interactions, with all text inputs and all images masked by default, and it captures app console logs and network timing metadata. On the web app we also use Firebase Analytics. A copy of analytics events is additionally stored in our own database to power an in-app dashboard.
2. Why we use your data
- To run the app — authenticate you, store your tasks, verify your proof, apply blocks and stakes, and sync across your devices.
- To provide accountability features — send reminders, escalate when you miss a task, and show your progress to crews you have joined.
- To sell and maintain subscriptions — unlock paid access and restore purchases.
- To improve the product — understand which features are used and diagnose crashes and broken flows.
- To keep the service safe — prevent abuse of shared content and enforce access rules.
We do not sell your personal data. We do not share it with advertisers, and we do not use it for advertising or ad targeting.
3. Your choices
- Camera and photos — optional. Decline, and you can still prove tasks by location, peer review or self-check.
- Location — optional, and revocable at any time in iOS Settings. Location tasks stop working; nothing else does.
- Screen Time / Family Controls — optional, and revocable in iOS Settings. App blocking stops.
- Notifications — optional, and revocable in iOS Settings.
- Crews and sharing — you choose whether to join a crew or share a task. Leaving a crew stops sharing new activity with it.
Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Email us and we will act on your request.
4. Who your data is shared with
We use the following third-party providers. Each receives only what it needs to do its job:
- Google (Firebase) — authentication, database, file storage, Cloud Functions, hosting, and web analytics.
- Google (Gemini API) — AI verification of proof photos.
- Google (Sign-In) — optional sign-in, if you choose it.
- Apple — App Store purchases, and push notification delivery.
- RevenueCat — subscription management and entitlement status.
- PostHog — product analytics and session replay.
- Expo — push notification delivery.
Other ProveIt users see your display name, profile photo, and the activity you share with a crew or a shared task — including proof photos submitted against shared work. As noted above, uploaded files are readable only by the people already entitled to the task they belong to.
We may also disclose data if required by law, or to protect the rights and safety of our users.
5. Retention
We keep your account data and content for as long as your account exists, because the app is built around long-running streaks and history. Push tokens are deleted when you sign out. Analytics events are retained under our providers’ standard retention periods. When you delete your account in the app (section 6) we delete your profile, your content and your uploaded files immediately, other than anything we must keep for legal or accounting reasons. Two things survive on purpose and neither identifies you beyond an opaque account ID: a record that the deletion happened, and the markers that stop a duplicate payment webhook being processed twice. Apple and RevenueCat keep their own records of any purchase regardless of what we delete.
Other ProveIt users’ content is not deleted with yours. Tasks and projects that other people own, or that they share with you, stay with them — your user ID is removed from them rather than the whole record being destroyed, because it is their data as much as yours.
6. Deleting your account and data
There are two different things you may want, and they are not the same.
Start fresh — keep the account, delete what is in it
In the app, open the You tab and use Delete all my data. This permanently deletes your tasks, projects, occurrences, penalties, crew posts, notifications, nudges, areas and every file you have uploaded — proof photos and task attachments alike — and puts you back through setup. It cannot be undone. Your account stays, you stay signed in, and your name and email are kept.
Until 21 August 2026 this feature deleted proof photos but not task attachments, which stayed in our storage. That is fixed, and the fix applies to everyone who uses the feature from now on.
Delete the account itself
In the app, open the You tab and use Delete your account. You will be asked to confirm it is you — your password, or Google — and then shown exactly what is about to go. This deletes everything listed above and your profile, your subscription record, your sign-in, and the account itself. You will not be able to sign in again. It cannot be undone by you or by us, and it does not need an email to us or any other support step.
Work you shared with other people stays with them, with your name removed from it. If you own a crew that other people are in, the crew carries on and another member takes it over. If you use ProveIt Family with the same account, you are also taken out of your household first — see that app’s privacy policy for exactly what happens there.
Cancel your subscription first. A subscription is an agreement with Apple, not with us. Deleting your ProveIt account does not cancel it and Apple will keep billing you. Cancel it in Settings › your name › Subscriptions on your device before you delete your account.
If for any reason you cannot reach the in-app option, you can also email nomanmakhdoom098@gmail.com from the address on your account and we will delete it within 30 days.
7. Children
ProveIt is not directed at children and is not intended for anyone under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.
8. Security
Data is transmitted over encrypted connections and stored on Google Cloud infrastructure with encryption at rest. Access to your account data is enforced by server-side security rules tied to your authenticated user ID, and sensitive values — subscription entitlement, stake balances and pass balances — can only be written by our server, never by a device. No system is perfectly secure, and we cannot guarantee absolute security.
9. International transfers
ProveIt’s servers and its providers process data in the United States. If you use the app from outside the United States, your data will be transferred to and processed there, under laws that may differ from those in your own country.
10. Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will notify you in the app. Continuing to use ProveIt after a change means you accept the updated policy.
11. Contact
Questions, requests, or privacy concerns: nomanmakhdoom098@gmail.com. We aim to respond within 30 days.