Privacy Policy

This Privacy Policy explains how We Sell Things LLC ("we", "us", "our") collects, uses, and protects your information when you use the Drift mobile application ("Drift" or "the App"). By using Drift, you agree to the terms described here.

1. Information we collect

To provide Drift's core habit tracking and subscription features, we collect the following information:

Account information

• Email address — required to create an account and to authenticate you across devices. Provided by you when you sign up.
• User identifier — a unique account ID generated by our authentication provider (Firebase Authentication).
• Display name — if you sign in with Apple or Google, we receive the name and email address associated with that account. If you use Sign in with Apple's private relay, we only ever see the relay address, not your real one.

Habit data

• Habit names, units, and emoji — that you enter when creating a habit (e.g. "Smoking", "cigarettes", "🚬").
• Goal settings — your chosen target (e.g. "5 per day"), period type, and averaging method.
• Daily entries — the count you log for each habit each day.
• Pause history and goal history — when you paused or changed your goal.

Subscription and purchase information

• Purchase history and subscription state — managed by Apple App Store or Google Play. We receive transaction identifiers and subscription status from these platforms to validate your purchase, but we do not receive your credit card or payment details.

Push notification token

• Firebase Cloud Messaging (FCM) token — to send you notifications, such as when you've earned a free week. You can disable notifications at any time in your device settings.

Technical information

• Time zone — to evaluate your weekly goals at the correct local time.
• Device platform and app version — iOS or Android, and the app version and build number, for compatibility, diagnostics, and support.
• IP address — received automatically whenever your device contacts our servers. We use it to operate and secure the service (for example, rate limiting and abuse prevention), and our analytics provider derives an approximate, city-level location from it.

Product analytics

We use Mixpanel to understand how the app is used so we can improve it. Mixpanel receives:

• A small set of events — currently when the app is opened, when a habit is logged, and when a subscription starts. We do not send your habit names, your entry counts, your goals, or the substance you are tracking.
• Your account identifier and email address, and which method you signed in with, so events can be tied to one account across devices.
• Device platform, app version and build, and IP address, from which Mixpanel derives an approximate, city-level location.

We have disabled Mixpanel's automatic event collection, so it records only the events listed above. Mixpanel processes this data on our behalf as a service provider and is contractually prohibited from using it for its own purposes. See Mixpanel's privacy policy. If you would rather not be included in analytics, email us and we will exclude your account.

We do not collect: precise or GPS location, contacts, browsing history, photos, audio, advertising identifiers, or biometric data. We do not use advertising or cross-app tracking, and we do not sell your data.

2. How we use your information

We use the information we collect only to:

• Provide habit tracking, charts, and statistics features.
• Sync your data between your devices (iPhone, iPad, Android).
• Calculate whether you've stayed under your goal and qualify for a free billing week.
• Validate and process your subscription with Apple or Google.
• Send transactional notifications (e.g. "Claim your free week").
• Diagnose technical problems, and understand how the app is used through the limited analytics described above, so we can improve it.
• Communicate with you about your account or significant changes to the service.

3. How we share your information

We do not sell, rent, or trade your personal information. We share information only with the following service providers, and only as necessary to operate Drift:

• Firebase (Google LLC) — authentication and push notification delivery.
• Hetzner Online GmbH — server hosting in Germany. Our application server and our database both run on this infrastructure; Hetzner does not access your data.
• Mixpanel, Inc. — product analytics, as described in Section 1.
• Apple App Store and Google Play — payment processing and subscription validation.

Each service provider is contractually bound to protect your data and use it only for the purposes we specify.

We may disclose information if required by law, legal process, or to protect the rights, property, or safety of users or the public.

4. Data retention

We retain your account and habit data for as long as your account is active. If you delete your account, we permanently delete your habit data within 30 days, except where retention is required by law (for example, tax records of purchases).

5. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — update inaccurate information through the App.
• Delete — request deletion of your account and personal data.
• Export — request a copy of your habit data in a portable format.
• Withdraw consent — stop using Drift at any time. Cancel your subscription through your Apple or Google account.

To exercise any of these rights, email us at support@ardaventures.me.

6. Children

Drift is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. International transfers

Our servers and database are located in Germany, within the European Union. If you use Drift from outside the EU — including from the United States — your information is transferred to and processed in Germany.

Some of our service providers process data elsewhere: Firebase (Google) and Mixpanel are United States companies and may process data in the United States or other countries. Where those transfers involve personal data of individuals in the EU, UK, or Switzerland, they are made under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

We are the controller of your personal data. If you are in the EU or UK, the lawful bases we rely on are: performance of our contract with you (providing the app, your account, and your subscription), our legitimate interests (securing the service, preventing abuse, and understanding how the app is used), and your consent where we ask for it (such as push notifications).

8. Security

We use industry-standard measures to protect your information, including encrypted connections (TLS), encrypted storage at rest, and authentication tokens with short lifetimes. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Last updated" date above. Material changes will be communicated through the App or via email.

10. Contact us

If you have questions about this Privacy Policy or our practices, contact:

We Sell Things LLC
Email: support@ardaventures.me