Privacy Policy

Last changed: 28 September 2026.

This policy covers the app "VRATA — a trainer for practice" in all its forms: on the web, in the App Store and on Google Play.

Who is responsible for your data. Mamikon Melkumov, independent developer, Portugal. This is the same developer named on the app's store listing.

Where to write about data. mamikon.arch@gmail.com. We answer within thirty days. A postal address is provided on request at the same address.

The short version

Everything you write and do in the trainer stays on your device. There is no account, there is nowhere to log in, and no server holding your records exists.

The only thing that leaves the device is anonymous usage statistics about which screens people use: not one word you have written, and not your name. You can switch it off with a single toggle in settings.

Besides that, if you subscribe on your phone, the subscription service RevenueCat receives the purchase details from the store — without your records and without your name.

There are no ads, no ad networks, no trackers, no social buttons and no sale of data in this app.

What is stored on your device

Everything you enter and build up:

• the profile name and, if you choose, an email address — used only to sign a backup file and to tell one profile from another;
• practice sessions: the exercise, the date, the duration, the number of distractions, your own mark for how it went;
• journal entries and your notes on exercises;
• traits in the mirrors of the soul, their weight, their direction and their link to the list of qualities;
• your answers to the questions of the list;
• "The shadow of the past" and "A letter to yourself a year from now";
• settings: language, theme, sound, reminders, the state of the thirty-day plan.

All of it sits in local storage on your device. We do not reach into it, do not copy it and do not send it anywhere — technically we cannot: there is no receiving end.

Cookies and tracking

The app uses no cookies, no fingerprinting and no comparable techniques to recognise you beyond the app or to follow your behaviour on other sites. Everything held in your device's storage serves only the working of the app. It can leave the device in two ways, and you choose both: a backup file that you save or share yourself, and the device's own system backup, if it is switched on in your phone's settings.

What leaves the device

Anonymous usage statistics: which screens are opened, where people stop, how many days of practice run in a row. We need it to see where the app gets in the way instead of helping.

Only events from a fixed list are sent. Each has a name and a few numeric or enumerated values. An event that is not on the list is not sent at all, and a value of an unknown shape is dropped.

Not a single line you have written ever reaches the developer. Not a journal entry, not the wording of a trait, not the profile name, not the email address, not the intention you picked. This rule is checked by an automated test on every build.

What is actually sent:

• the event name from the list — for example, "practice started", "paywall shown", "streak continued";
• the exercise identifier — for example, 01-Д-01;
• numbers: seconds of practice, count of distractions, day of the streak, day of the trial;
• enumerated values: the subscription plan chosen, where the subscription screen was shown, the interface language, the kind of export;
• a random device identifier created on first launch.

The random identifier is a string of letters and digits generated on the device. It is tied to no name, no email and no account, and it cannot identify you outside these statistics. IP addresses and location data are not stored.

Who receives data

There are exactly four parties, and each receives strictly what is named below.

PostHog — the processor of the statistics; the project is hosted in the European Union. It receives only the events listed above. It processes them on our instructions and under a data processing agreement, may not use them for its own purposes, and must protect them no less than described here. Its automatic page capture, session recording and page-address collection are explicitly turned off.

Apple and Google — if the app was installed from the App Store or Google Play, the store handles the subscription under its own rules and its own privacy policy. Through RevenueCat we learn only whether a subscription is active and until when. Card details, billing address and payment history we neither see nor store: they pass through the store and never reach us.

RevenueCat (RevenueCat, Inc., USA) — if you subscribe in the app installed from the App Store or Google Play, this processor verifies the purchase. From the store it receives the purchase details — which plan, when it started, until when it runs, whether it renews — and links them to a random identifier it creates itself, which is not connected to your name, your email or your profile in the app. It does not receive your records, your profile name or your email address, and, like us, it never sees your card details. It processes this data on our behalf under a data processing agreement; transfers to the USA rely on the European Commission's Standard Contractual Clauses.

Nobody else. The app carries no ad networks, no social analytics, no data brokers and no third-party SDKs beyond those named. We do not sell or rent data.

The community link. The settings hold a link to a community of practitioners on Telegram. Following it takes you to an outside service that operates under its own rules and its own privacy policy; we have no influence over them and pass no data there.

Grounds for processing

For anyone to whom European data protection law applies.

• Anonymous statistics — your consent, Article 6(1)(a) GDPR. You may withdraw it at any moment, with one toggle, with no explanation and with no effect on how the app works.
• Running the subscription and giving access to the content — performance of our contract with you, Article 6(1)(b).
• The data on your device we do not process at all: it is under your control.

The statistics are processed in the European Union. If an app store transfers data outside the EEA, it does so on its own grounds, described in its own policy.

How long it is kept

• On your device — until you delete the profile, clear the data or remove the app. We set no deadline: these are your records.
• The local event log on the device — the last five hundred entries; older ones are pushed out by newer ones.
• Statistics at the processor — twelve months from the event, then deleted.
• Purchase details at RevenueCat — for as long as the app uses this processor; deleted on request to the address above.

Security

Your records are protected by the platform itself: only the app can reach its own storage, and on a phone that storage is additionally covered by device encryption.

Statistics travel over an encrypted connection (HTTPS). Access to the statistics project belongs to the developer alone and is protected by two-factor authentication.

The strongest measure is the one built into the design: there are no user texts in the statistics at all, so even full access to them would not reveal what you have written.

The PIN protects a profile from casual opening on this device and is asked for at every launch. It does not encrypt your records. A backup is a readable, unencrypted file: when you save or share it, you decide who gets it. System backups of the device (iCloud, Google) are made and kept under the platform's rules and your phone's settings; on Android the app is not included in automatic backup.

Your rights

You have the right to obtain your data, correct it, delete it, take it away in a portable form, object to processing and withdraw consent.

Almost all of it is done inside the app and needs no request to us:

• See it and take it — Settings → export profile: a file with all your records. In the same place, Diagnostics → "Export events": a file with everything written to the log.
• Withdraw consent to statistics — Settings → Diagnostics → "Do not send anonymous statistics". Sending stops at once.
• Delete — deleting the profile in settings, or deleting the app, wipes everything that was stored on the device. Nothing remains on our side, because nothing was ever there.

If you need statistics already sent to be deleted, write to the address above and include the random device identifier — it is shown in Settings → Diagnostics. Without it we cannot find your events, because there is nothing else to match them to.

If you subscribed, the purchase details held by RevenueCat are deleted on request to the same address.

If you believe we have handled your data wrongly, you have the right to complain to the data protection authority of the country where you live. In Portugal that is the CNPD (Comissão Nacional de Proteção de Dados).

Children

The trainer is intended for adults. We do not knowingly collect children's data. If you believe a child has used the app and their data may have reached the statistics, write to us and we will delete it.

Changes

If this policy changes in any material way, we will show it in the app before the change takes effect. The date of the last change is at the top.

Contact

mamikon.arch@gmail.com — questions about data, withdrawal of consent, deletion, complaints.