Privacy Policy | Dark Horse App

Information we collect

Depending on the features you use, we collect:

Website waitlist information: your email address, first name if supplied, consent, referral details and campaign source.
Account information: your name, email address, sign-in method, account identifier and account activity dates such as account creation, confirmation and last sign-in.
Your private journey: Founder Compass answers, business context, goals, projects, milestones, next moves, commitments, work windows, preferences, recorded time, manually added time, session outcomes, reflections, evidence, progress, ranks and achievements.
Evidence you choose to add: links, photos, documents and related descriptions attached to confirmed work.
Attention and redirect records: app names or aliases you choose, productive-app shortcuts, redirect events and reclaimed-time records used to show your patterns and support your next move.
Optional product insights: if you opt in, broad categories such as founder stage, common obstacles, work windows and project type. Exact personal wording and account identifiers are not included in these aggregate submissions.
Optional support payment information: the support amount, payment status and contact or transaction details supplied by Stripe for a website support payment. Stripe processes payment credentials; Dark Horse does not receive your complete card or bank details.
Technical service records: our providers may process IP address, browser or device details and request logs needed to host, secure, troubleshoot and protect the app and website.

How app accounts are protected

The Dark Horse iOS app supports Sign in with Apple and email accounts through Supabase. Supabase Auth stores the account identity and sign-in records. The database stores one founder profile and the latest private journey snapshot for that account. A private Storage bucket holds evidence files you choose to upload.

Account access tokens are protected in the iOS Keychain. Database rows and evidence files are restricted to the authenticated account using row-level access controls. Dark Horse does not sell account data, use it for third-party advertising, or make one founder's private journey available to another founder.

Screen Time and selected apps

Screen Time features use Apple's Family Controls, Managed Settings and Device Activity frameworks. You must grant Screen Time access and privately choose apps through Apple's system picker. Dark Horse does not receive your complete Screen Time history. Names or aliases you choose for selected apps, productive-app shortcuts and redirect events may be included in your private journey so insights and shortcuts can be recovered.

Anonymous product insights

Optional product insights are off unless you approve them. If enabled, Dark Horse converts selected signals into approved broad categories on the device. Your authenticated session may be checked to prevent misuse, but no account identifier or exact founder wording is saved with the monthly aggregate count. Categories with fewer than ten observations are not included in internal reports.

Why we use information

We use information to:

manage the beta waitlist and send requested beta or product updates;
create, secure and recover app accounts;
save, restore and sync the journey you ask Dark Horse to protect;
run timers, reminders, accountability, Screen Time interventions, progress views and business journey summaries;
process optional website support payments through Stripe;
protect Dark Horse from abuse, diagnose problems and keep the service reliable; and
improve future versions using optional aggregate product insights.

We do not sell personal information or use it for third-party advertising.

Service providers and overseas processing

We use Supabase for authentication, private cloud journey storage and optional aggregate insights; Apple for Sign in with Apple, Screen Time, notifications and TestFlight; Stripe for optional website support payments; Netlify for website hosting and waitlist submissions; and MailerLite for requested beta and product emails. These providers may process information in Australia and other countries, including the United States.

Storage, security and retention

Private account data is stored in Supabase's Sydney region and protected by account-based access controls. Dark Horse also keeps an on-device copy so it can work reliably. No service can promise perfect security, but we take reasonable technical and organisational steps to protect the information entrusted to us.

We retain account and journey information while your account is active or as reasonably needed to provide the service. Using Delete Account and Journey removes the Supabase authentication account, founder profile, current cloud journey and cloud evidence, subject to limited operational backups, security records and legal retention obligations. Anonymous product insight totals contain no account link and cannot be removed individually.

Your choices and rights

You can edit your journey in Dark Horse, turn future anonymous product insights on or off, change notification preferences, change or clear Screen Time selections, export an encrypted backup, sign out of a device, or permanently delete your account and cloud journey from Control > Account. You can unsubscribe from marketing emails at any time.

You may also ask to access or correct personal information we hold, request deletion where available, withdraw waitlist consent, or raise a privacy concern. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

Contact

For privacy questions or requests, contact hello@darkhorseapp.com.au. We will review and respond to privacy concerns within a reasonable time.

Postal address: Dark Horse App, PO Box 1085, Canning Vale DC WA 6970, Australia.

Updates to this policy

We may update this policy as Dark Horse develops or our information-handling practices change. The effective date above will show when it was last revised.