Privacy Policy
Last updated October 6, 2026
SinStats is a social app for logging habits and comparing them with friends. This policy explains what we collect, why, who can see it, and how to remove it. Questions go to support@sinstats.app.
What we collect
- Account details. Your email address and a password, which is stored in hashed form and which we cannot read. If you sign in with Google or Apple, we receive your email address and the basic profile details that service shares (such as your name and profile picture) instead of a password.
- Profile. Your username, display name, bio, profile picture and time zone.
- What you log. The counts and hours you enter for each category, the dates they belong to, and any categories you create. Depending on what you choose to track, this can include information about alcohol, drug and nicotine use and sexual activity. You decide what to track; none of it is required.
- What you post. Captions, photos, comments and reactions.
- Connections. Who you follow, who follows you, the groups you belong to, and anyone you have blocked or reported.
- Settings. Your privacy choices and notification preferences.
- Technical data. Our hosting providers keep standard server logs, such as IP address and browser type, to run and protect the service.
We do not collect your contacts, your precise location, or anything from other apps on your device.
How we use it
- To run the app: your stats, feed, leaderboards, levels and streaks.
- To show your activity to the people you have allowed to see it.
- To send the notifications and emails you have switched on, and account emails.
- To keep the service safe, including reviewing reports and enforcing our terms.
We do not sell your data, and we do not use it for advertising.
Who can see what
You control this. Your account, each category and each post has its own audience: only you, your followers, or anyone signed in. People must ask to follow you and you approve each request. Members of a group you join can see the stats that group counts, where you share them. Blocking someone hides you from each other entirely. Your email address is never shown to other users.
Anything you make visible to others can be copied or screenshotted by them, and we cannot take that back.
Who we share it with
Only the companies that run the service for us, and only as needed to do so:
- Supabase, for the database, sign-in and photo storage.
- Vercel, for hosting the app.
- Resend, for sending email.
- Google or Apple, if you choose to sign in with them.
We may also disclose information if the law requires it, or to protect someone from serious harm. If SinStats is ever sold or merged, your data would move with it under the same commitments.
Cookies
We use only the cookies needed to keep you signed in. There are no advertising or tracking cookies.
Keeping and deleting your data
We keep your data for as long as you have an account. You can download everything you have logged from Settings, delete any single post from the log screen, and delete your whole account from Edit Profile. Deleting your account removes your profile, entries, posts, photos, comments and connections. Backups and server logs held by our providers may take a short while longer to expire.
You can also ask us to access, correct or delete your data by emailing support@sinstats.app. Depending on where you live, you may have further rights under local privacy law, and you can use the same address to exercise them.
Security
Data is encrypted in transit, access to each person's records is restricted at the database level, and photos are stored privately and served through expiring links. No system is perfectly secure, so please use a strong, unique password.
Age
SinStats is for adults aged 18 and over. We do not knowingly collect data from anyone younger, and we remove accounts we learn belong to minors.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before it takes effect.