EndorFine

Privacy Policy

Effective date: March 2, 2026  ·  Last updated: March 2, 2026

EndorFine ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use the EndorFine mobile application (the "App").

1. Information We Collect

We collect only what is necessary to provide the Service:

• Account information – your email address and display name, used for authentication and personalization.
• Journal entries and moments – text you write in the App, stored locally on your device and synced to your private cloud account.
• Emotional metadata – sentiment and resistance scores derived from your entries, used for progress tracking and coaching insights.
• AI chat messages – messages exchanged with the AI coach, stored locally and synced; sent to Google Gemini for response generation (see Section 4).
• Screen time selections – apps you choose to monitor, stored securely on-device only and never transmitted to any server.
• Crash and diagnostic data – anonymized crash reports collected via Firebase Crashlytics, only with your explicit consent.

2. How We Use Your Information

• To provide, maintain, and improve the App and its features.
• To generate AI-powered coaching insights via Google Gemini.
• To sync your data securely across your devices.
• To send optional notification reminders you configure within the App.
• To diagnose crashes and improve stability (only with your consent).

We do not use your data for advertising, profiling, or sale to third parties.

3. Data Storage and Security

Your data is stored locally on your device using SwiftData with full-disk encryption (iOS file protection class Complete), meaning it is inaccessible when your device is locked. Cloud sync is handled by Firebase Firestore with strict per-user access controls — only you can read or write your data.

All data transmitted between the App and our servers or third-party services is encrypted using HTTPS/TLS.

4. Google Gemini AI Processing

EndorFine uses Google's Generative AI service (Gemini) to power its coaching features. When you use AI features, your journal entries and chat messages are sent to Google's servers for processing. Before any data is transmitted:

• Email addresses, phone numbers, social security numbers, and other personal identifiers are automatically stripped.
• Text is truncated to limit the amount of data shared per request.
• Moment identifiers are replaced with opaque references to prevent correlation.

Google processes this data in accordance with their own privacy policy and terms of service. You can review Google's privacy practices at policies.google.com/privacy.

AI features require your explicit consent, which you grant the first time you open the Endo tab. You can revoke this consent at any time in Profile > Settings, which will disable AI features without affecting your locally stored data.

5. Third-Party Services

We use the following third-party services to operate the App:

• Firebase Authentication (Google) – account login and session management.
• Firebase Firestore (Google) – encrypted cloud storage for your data.
• Firebase Crashlytics (Google) – crash reporting, collected only with your consent.
• Firebase Analytics (Google) – aggregated, anonymized usage statistics.
• Google Gemini (Google) – AI coaching and reflection features.
• Google Sign-In (Google) – optional authentication method.

No data is shared with advertisers, data brokers, or any other third parties.

6. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all data — including journal entries, chat history, and emotional metadata — is permanently deleted from our servers within 30 days. Local data on your device is removed immediately upon account deletion.

7. Your Rights

You have the following rights regarding your personal data:

• Access – export all your data as CSV from Profile > Settings > Export Data.
• Deletion – permanently delete your account and all associated data from Account Settings.
• Revoke AI consent – disable AI data sharing at any time from Profile > Settings.
• Portability – your exported data can be used with any compatible service.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal data we collect and how it is used.
• The right to request deletion of your personal data.
• The right to opt out of the sale of your personal data.
• The right not to be discriminated against for exercising these rights.

EndorFine does not sell, rent, or trade your personal information. To exercise any of the above rights, use the Export Data or Delete Account options in your profile settings.

9. Children's Privacy

The App is not directed at children under the age of 17. We do not knowingly collect personal information from anyone under 17. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. Continued use of the App after changes take effect constitutes acceptance of the revised policy. The effective date at the top of this page will always reflect the most recent revision.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at: gaojiaying2008@gmail.com