Your data, kept small.

Draft for legal review. This page describes how MASTRD works today. A lawyer will review it before launch, and it may change.

The short version

MASTRD works without an account. Your progress, answers, missions and settings stay on your iPhone.
If you sign in with Apple for a backup or circles, we store what the app needs to work, on servers we control through our provider, Supabase.
Speak it's audio never leaves your iPhone and is deleted after scoring.
We don't sell your data. There are no ads in MASTRD. Nothing that identifies anyone under 18 goes to an analytics or advertising company.
You can delete your account and everything we store from the app, at any time.

Who we are

MASTRD, the iPhone app and this website, is operated by the founder of MASTRD (legal name and address to be confirmed before launch). Send us a message about anything in this policy.

What stays on your iPhone

Without an account, MASTRD keeps everything on your iPhone: lessons completed, how well you remember each idea, streaks, points and distinctions, your answers, the plans you write in Commitment exercises and missions, your onboarding answers and your reminder settings. Reminders are scheduled on the iPhone itself. Widgets and the Live Activity read the same data on the iPhone.

Microphone and speech. Speak it uses the microphone only while you practice a line. Apple's on-device speech recognition turns it into words and timing on your iPhone. The audio is deleted after scoring and is never sent to us or anyone else.

Photos. When you save a share card, MASTRD asks to add it to your Photos. It can't read your library.

If you sign in with Apple

Signing in is optional. It turns on the backup of your progress, circles, family links and referrals. We then store:

What	Why
The email address Apple gives us (it may be a private relay address from Hide My Email) and an account ID	To recognize your account
Your progress: lessons completed, memory of each idea, streaks, points and distinctions. A linked parent sees a teen's streak, fading ideas, track and unit	Your backup, so a new iPhone picks up where you left off
Your age band (13–15, 16–17 or 18+), never your birthday	To choose suitable lessons and the safety rules for circles
The first name you choose to share, if any	Shown to your circle and linked family
Circles: names you give them, who is in them, and each member's card (streak, the week's points, distinctions, tracks completed, whether they subscribe)	To run your circles and their weekly board
Circle reactions and nudges (a preset: Respect, Keep going, Well played or Nudge), plus invite and family-link codes	To run the circle features. Stored on our server, Supabase
Family links and a parent's approvals	So a parent can approve a teen's circles
Your referral code, and which account invited which	To give the free month a referral earns. A referrer sees only counts, never who joined
Your subscription's status from the App Store: product, renewal date and a transaction number	To unlock what you paid for and to reward referrals. We never see your payment details
Usage data (see below), if "Help improve lessons" is on	To improve lessons and the app

We never collect your contacts, precise location, photos, audio, advertising identifier, or anything you type other than circle names and a shared first name.

Usage data

To find out which lessons work, MASTRD records two kinds of usage data, and sends them to our own database only once you have a backup account. Until then they wait on your iPhone for up to 30 days and are dropped if you never sign in.

Review logs, at every age: which idea was reviewed, how it went and when.
Product events, 16 and over only: onboarding finished (with the first track chosen), a lesson finished (with its score), a refresher finished, the subscription screen shown, a free trial started, a circle joined, something shared (an idea, a streak, a result, a distinction or an invite, never what you wrote), and, if you installed from an Apple Search Ads ad, which campaign, ad group and keyword it was.

Turn this off at any time in Profile with "Help improve lessons". Turning it off drops anything waiting on the iPhone and records nothing more.

Measuring our ads

We advertise MASTRD to adults on Apple Search Ads, Facebook, Instagram and YouTube. To see which ads work, we use the methods below. None uses your advertising identifier (IDFA), so the app never asks to track you, and Google may not use any of it for personalized ads.

Apple Search Ads attribution. On its first launches the app asks Apple, one check retried until Apple answers, whether the install came from an Apple Search Ads ad, and if so, which campaign, ad group and keyword. This is stored as a product event (16+), as above.
Apple's private ad attribution (SKAdNetwork and AdAttributionKit). For everyone, the app tells Apple once that it was opened. If an ad led to the install, Apple then tells that ad network so, without any identifier, after a delay. If you are 18 or older and "Help improve lessons" is on, the app also reports how far you got (finished onboarding, finished a first lesson, started the free week, became a paying member) as a number through the same Apple system.
Google Analytics for Firebase, 18 and over only. If you are 18 or older and "Help improve lessons" is on, the app sends the same steps, and the app's first open, to Google Analytics for Firebase, so Google Ads can tell whether a YouTube ad worked. Firebase uses a random app-instance ID, not linked to your account, and an approximate location derived from your IP address. Google keeps this data for 2 months, under Google's privacy policy. Under 18, or with "Help improve lessons" off, Firebase never starts; turning the switch off stops it and erases its data on your iPhone.

We don't sell personal information. These companies process data for us, only to run MASTRD:

Supabase hosts our database and sign-in, in the United States (Oregon).
Apple handles Sign in with Apple, purchases, subscription notices and ad attribution under its own privacy policy.
Google receives the Firebase events above, for adults only.
Cloudflare hosts this website and delivers messages sent with its contact form.
Microsoft hosts our support email (Microsoft 365), where your messages to us and our replies are kept.

When you share a card to Instagram, X, Messages or another app, the image and link go to that app, and its own privacy policy applies.

Teens

When Apple shares an age range, the app uses it; otherwise it asks. MASTRD is for ages 13 and up: onboarding doesn't let anyone under 13 start, and if Apple later reports an account as under 13, the app signs it out and blocks it, and the account and its data can be deleted. For anyone under 18: no product events from 13 to 15, no Firebase at all, only the single install signal to Apple's ad attribution and Apple's Search Ads install check (one check, retried on the first launches until Apple answers) (a token with no identifier), profiles visible only to their circle and linked parents, circles only with a linked parent's approval, and nothing personal on share cards. Ideas rated 18 and over can be shared only by learners who are 18 or older. A parent can send us a message to ask what we hold about their teen or to have it deleted.

How long we keep data

We keep your account data, backup and usage data until you delete your account. Usage data waiting on your iPhone is kept for up to 30 days. Google keeps Firebase data for 2 months.

Your choices and rights

Delete everything: in the app, open Profile, then Backup, then Delete account, and confirm with Apple. This deletes your account and everything stored on our server, including usage data, and drops any usage data still waiting on your iPhone. It also revokes MASTRD's Sign in with Apple access. Progress on your iPhone stays until you delete the app.
Stop usage data: turn off "Help improve lessons" in Profile.
Access or correct: send us a message and we will send you a copy of your data or fix it, usually within 30 days.

Depending on where you live, including Canada and US states such as California, you may have further rights to know, correct, delete or move your data, and to complain to a regulator. Send us a message to use any of them; we won't treat you differently for doing so.

Security and where data is stored

Data travels encrypted. Each account can read only its own data and what the circle and family features show to its members, enforced in the database itself. Our database is in the United States (Oregon). If you live in Canada, your data is stored and processed in the United States, where it may be accessible to US authorities under US law. Apple, Google and Cloudflare may process data in the United States and elsewhere.

This website

mastrd.app sets no cookies and has no ad pixels. If analytics are switched on, Cloudflare Web Analytics counts page views without cookies and without identifying you. Cloudflare processes IP addresses to deliver the site and keep it secure.

If you use the contact form, we receive your message, your email address and your name if you give it, by email, and use them only to answer you.

Changes

If we change this policy, we will update the date at the top, and tell you in the app before a change that matters takes effect.