JOURNEY / PRIVACY
Privacy policy
This policy explains how VecBits handles information when you use Journey (远行), our focus timer, and this help website.
Effective date ·
Focus records are saved on your device. Cloud sync requires active Pro access. Using the app without Apple sign-in does not mean that no information is processed by our service providers.
1. Information we process
Journey saves completed focus sessions, dates, durations, task text, optional journal notes, selected virtual destinations and discoveries. Creature familiarity, keepsakes and achievements are calculated from this progress. Preferences and an active timer are stored on your device.
The app may automatically create an anonymous Supabase account with a randomly assigned user ID. If you choose Sign in with Apple, Apple supplies an account identifier and may supply the name and email address you authorize, including a private relay address. We do not receive your Apple password.
Apple and RevenueCat process purchase and subscription information, such as product IDs, transactions and entitlement status. Journey associates the Supabase user ID with RevenueCat to check and restore Pro access. We do not receive your payment card details.
Our hosting and service providers process technical request information, such as IP addresses, request times and connection details, to deliver and protect their services. If you contact us, we receive the email address, message and any attachments you send.
2. Local storage and cloud sync
The app uploads and downloads journey progress only when Pro access is confirmed as active. The synchronized data includes focus totals, journey dates and durations, task text, optional notes, destination IDs, discovered creatures and keepsake information. Collections and achievements can be reconstructed from the synchronized records.
An anonymous Pro account may synchronize before you connect Apple. Connect the same Sign in with Apple account on your devices for cross-device recovery. Anonymous access alone is not a reliable way to recover an archive after a reinstall or a device change.
Without active Pro access, the app does not synchronize journey snapshots. It may still contact authentication and subscription services. Pro expiration stops sync; it does not automatically delete previously uploaded records. Device backup services, if enabled by you, are separate from Journey’s Supabase sync.
3. Why we use this information
We use information to save and restore progress, authenticate accounts, provide cloud sync, verify purchases, manage subscription entitlements, answer support requests and protect the service from misuse. RevenueCat also provides subscription reporting, such as purchase history and aggregate subscription performance.
Journey does not display third-party ads, sell your personal data or use it for cross-app advertising tracking. We do not send your task text or journal notes to an AI model. The destinations and coordinates displayed in the app describe virtual scenes, not your physical location.
4. Service providers and sharing
Supabase provides authentication and the database for cloud progress. Apple provides Sign in with Apple, App Store billing and subscription management. RevenueCat validates purchases and manages Pro entitlements. Cloudflare delivers this website and its HTTPS connection.
Providers process information needed for these functions. We may also disclose information when required by law, to protect users and service security, or in a business transfer subject to appropriate notice and safeguards. We do not publish your task text or journal notes.
Supabase · Apple · RevenueCat · Cloudflare
5. Storage, security and retention
Local progress remains on your device until removed. Signing out switches to a separate local archive and is not an account-deletion request. Cloud account and progress data are retained to operate your account until deletion is requested or retention is otherwise no longer necessary.
A successful in-app account deletion removes the Supabase account and its linked progress, and clears that account’s progress on the current device. It does not erase Apple’s transaction records or automatically delete all data held by RevenueCat. Contact us for requests involving subscription-provider records. Limited security logs, backups or records required by law may remain for their necessary retention period.
Connections to our cloud services use HTTPS and database access is scoped to the authenticated user. These controls are not end-to-end encryption, and no service can guarantee absolute security. Providers may process data in countries outside your own; their processing terms and applicable transfer safeguards also apply.
6. Your choices and requests
You can use the free focus features without connecting Apple, leave optional journal notes blank and manage notification permission in iOS Settings. Account details for an Apple-connected account include sign-out and deletion controls under Profile → Account & Sync. Deletion may require Apple identity confirmation.
If you use an anonymous account, cannot reach a deletion control or cannot sign in, contact us for help with a data request. We may need proportionate verification to identify your account safely. Please do not send passwords, login tokens or verification codes.
Depending on your location, you may have rights to access, correct, delete or receive a copy of your data, and to object to or restrict certain processing. You can make these requests using the contact details below. Where applicable, you may also complain to your local data protection authority.
Deleting Journey or its account does not cancel an App Store subscription. Manage cancellation separately in Apple’s subscription settings.
7. This website and children’s information
These pages do not require a login and do not contain advertising, analytics scripts or a contact form. We do not set application cookies or store your browsing activity in local storage. Cloudflare may process technical requests and use security mechanisms needed to provide the site. External links and your email provider have their own privacy practices.
Journey is not designed to solicit children’s personal information. If you are a parent or guardian and believe a child has supplied personal data that should be removed, contact us so we can investigate and assist.
8. Updates and contact
We update this page when our practices change and show the effective date above. Material changes will also be communicated in the app or release information where appropriate. Contact VecBits using the email below for privacy questions or requests.
Contact VecBits
Need help, or want to access, correct or delete personal data? Email us.
kylecai.cc@gmail.comInclude your app version, iOS version and a description of the issue. Hide private details in screenshots. Never send passwords, verification codes or full payment details.