Privacy Policy
Last updated 11 October 2026
PROOV is an accountability app. It records that you did the thing you said you would do. That is a small amount of data about a personal subject, so this page says exactly what is kept, why, and how to get rid of it — in plain sentences rather than the usual fog.
The short version. We collect your email address, the name and handle you choose, which challenges you join, which days you completed, and anything you choose to post, like or comment on — including any photo or short video you attach to a day as proof. If you turn notifications on, we store a push token for that device. There are no advertising identifiers, no analytics SDKs and no tracking of any kind in the app. Nothing is sold or shared with advertisers, and nothing in PROOV can be bought, so we hold no payment information of any kind. Deleting your account deletes your data, and you can do it yourself from inside the app in about ten seconds.
Who we are
PROOV is operated by the makers of PROOV ("we", "us"). You can reach a human at proov.get@gmail.com. If you are in the UK or EU, that address is also how you exercise the rights described below.
What we collect, and why
To give you an account
| Data | Why |
|---|---|
| Email address | It is your login, and it is where the six-digit confirmation code goes. Confirming it is how we know the address belongs to you — which is what makes reporting, blocking and account recovery mean anything. |
| Password | Stored only as a one-way hash by our authentication provider. We never see it and cannot recover it. |
| Display name and handle | Shown next to your posts, your comments, your likes, and on the daily board of a challenge you have joined. |
| Time zone | A challenge day ends at midnight where you are. Without your time zone we cannot tell whether you made the deadline, or when to send a reminder. |
| Profile photo | Optional. It is stored in our file storage and served from a public web address, because that is how it appears next to your name — anyone who has the link can open it. Edit profile → remove photo deletes the file. |
To run the challenges you join
| Data | Why |
|---|---|
| Your enrolments | Which challenge, which version of it, the day you started, the time zone you started in, and whether it is active, paused, finished or abandoned. |
| Your PROOVs | For each day you complete: the day number, the calendar date in your time zone, the moment it was recorded, and whether it was a catch-up or make-up day. This is the record the whole app exists to keep. |
Because it is a shared space
| Data | Why |
|---|---|
| Posts you write | The text, which day of the challenge it refers to, and the photo or video attached to it if there is one. |
| Proof photos and videos | Optional. When you complete a day you can attach a photo or a video of up to one minute, either taken there and then with your camera or chosen from your photo library. A video includes the sound the camera recorded with it. The file is stored in our file storage and served from a public web address, because that is how it appears in your post — people in the challenge see it, and anyone who has the link can open it. A day counts with or without one. |
| Comments you write | The text, which post it is on, and when. Up to 500 characters. A comment you delete is hidden from everyone but stays in our database, so that a report filed against it still has something to point at. |
| Likes you give | Which post, and when. The author is told who liked it. |
| "Let PROOV feature this" | Off unless you turn it on for a photo or video post. If you do, we may use that post on PROOV's Instagram, website or ads, credited with your first name. To turn it on you confirm once that you are 18 or older, and we store the date you confirmed. Posts by anyone under 18 are never featured. Turn it off on the post, or email proov.get@gmail.com, and we stop using it in new promotion within 30 days. See the Terms. |
| Completion events | When you PROOV a day, the challenge board shows that you did. It shows the day and your name — never a note unless you added one. |
| Reports you make | What you reported, why, your note if you wrote one, and your account, so the same person cannot report one post repeatedly. |
| Accounts you block | So we can stop showing you each other, in both directions. |
If you turn on notifications
| Data | Why |
|---|---|
| A push token for that device | An anonymous address issued by Expo's push service that lets a notification reach this phone. It is not your phone number, not your device's serial number, and not an advertising identifier. It says nothing about you except where to deliver. |
| Whether the device is an iPhone or an Android | Apple and Google run separate delivery services and a token has to go to the right one. |
| Your two switches and your reminder hour | Daily reminder on or off, social notifications on or off, and the hour you picked — read in your own time zone. |
| The notifications we queued for you | The title and one line of text, and the date we sent it. Kept so that a retry cannot send the same thing twice. |
Off is off. Turning notifications off, or signing out, deletes this device's token from our database. We do not keep it and filter it out later — the row is gone. Other devices you are signed in on keep their own.
If you joined the waiting list on this website
Your email address, which page you submitted it from, and the referring URL if your browser sent one. Nothing else. This list is separate from the app, and being on it does not create an account.
If you pay us anything
You cannot. PROOV is free, there is no subscription, and nothing in the app or on this website can be bought — so there is no card number, no billing address and no payment processor anywhere in this picture. If that ever changes, this policy will be updated and say so before any payment is taken, not after.
What other people can see about you
Some of this app is public on purpose, so it is worth being exact about which parts:
- Anyone signed in can open your profile and see your display name, handle, photo, and two numbers: how many days you have PROOVed and how many challenges you have finished. Those are totals and nothing else — not which challenges, not which days, not who you are doing them with.
- People in a challenge with you see your name and the days you completed on that challenge's board, plus anything you posted to it.
- Anyone, signed in or not, can see the profile of someone who has published a challenge, because a challenge has to say who wrote it.
- Your email address is never shown to anyone. Neither is your time zone, your reminder hour, who you have blocked, or what you have reported.
What we do not collect
- No advertising or tracking identifiers. No IDFA, no App Tracking Transparency prompt, no ad network SDK, no pixel. We do not track you across other companies' apps or websites, and we have nothing installed that could.
- No third-party analytics. No Google Analytics, Firebase, Segment, Amplitude, Mixpanel or equivalent. No crash reporter. The app ships with none of them.
- No location. The app never asks. Your time zone is a setting, not a position.
- No contacts, no calendar.
- No audio on its own. The microphone is used only while you are recording a proof video with the camera, so the video has sound. PROOV never records audio at any other time and has no voice messages or voice features.
- No health data. PROOV does not read Apple Health or Google Fit, and does not collect weight, body measurements, calories, heart rate or anything similar. It records that you completed a day. That is all.
- No data is sold. Not to advertisers, not to data brokers, not to anyone. There is no business model here that depends on it.
The app asks for each permission only at the moment you use the feature that needs it: the camera when you choose to take a proof photo or video (and, on Android, the microphone with it, so a video can have sound), your photo library when you choose an existing photo or video for your profile or a proof, and notifications when you turn them on. It works perfectly well if you decline any of them.
Who else touches your data
These companies process data on our behalf. They are bound by their own agreements to use it only to provide their service to us.
| Processor | What for | Where |
|---|---|---|
| Supabase | The database, authentication and file storage — effectively everything the app stores | United States (West US, Oregon) |
| Resend | Sending the confirmation email, and nothing else. It sees the recipient address and the code | United States |
| Expo | The push notification service. It receives the token for your device and the one line of text we are sending, and passes it to Apple or Google | United States |
| Vercel | Serving this website. It does not hold app data | Global edge network |
Apple and Google deliver the notifications themselves once Expo hands them over, and they distribute the app and may collect their own data about the download, under their own policies, which we do not control.
If you are outside the United States, using PROOV means your data is transferred to and stored there.
How long we keep it
- While your account exists, your history is kept — that is the point of it.
- When you delete your account, see the next section. It happens immediately, not after a grace period.
- Proof photos and videos are kept while your account exists. See the next section for what happens to the files when you delete it.
- Push tokens last as long as notifications are on. They are deleted when you turn notifications off, when you sign out, and when the push service tells us the app is no longer installed.
- Waiting list emails are kept until we launch or you ask us to remove yours, whichever comes first.
- Reports are kept after resolution so a pattern of behaviour is still visible. The reporter's identity is detached if that account is deleted.
Deleting your account
Settings → Delete account, inside the app. You type a confirmation and it runs immediately. Here is precisely what happens, because "we delete your data" on its own is not a useful sentence:
- Deleted outright: your login, profile, handle, display name, time zone, every enrolment, every PROOV you recorded, every post you wrote (and with it the link to any photo or video attached to it), every comment, every like, the blocks you set, your notification preferences, and every push token for every device you were signed in on.
- Challenges you created that nobody ever joined are deleted with everything else.
- Challenges you created that other people did join are not deleted. Ownership transfers to a platform account and the challenge is archived. Your name comes off it. It survives because other people's records of their own effort are attached to it, and deleting your account should not erase their history.
- Deletion is refused while people are part-way through a challenge you created. The app tells you to archive it and let them finish first. This is the one case where you cannot delete immediately.
- Reports you filed stay, with your identity detached, so a reported pattern does not disappear when one reporter leaves.
One exception, and we would rather tell you than let you find out. If you uploaded a profile photo or attached proof photos or videos, the files can outlive the account. Everything that pointed at them — your profile, your posts, your name, your handle — is gone, but the files themselves are still in our storage at the addresses they always had, and nothing in the app links to them any more. For your profile photo, remove it first: Edit profile → remove photo deletes the file there and then. For proof photos and videos, email proov.get@gmail.com from the address on your account, before or after deleting it, and we will delete every file you uploaded within 30 days. We are fixing this so that deleting your account does it for you.
Deletion cannot be undone and we keep no backup copy for you to restore from.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send you a copy. Most of that is already in the app; for anything else, email proov.get@gmail.com and we will answer within 30 days.
If you are in the UK or EU, our lawful basis is contract for everything needed to run your account and your challenges, and legitimate interests for keeping the service safe — moderation, reports and blocks. Notifications run on your consent, which is the switch, and you can withdraw it at any time without losing anything else. You have the right to complain to your local data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right.
Children
PROOV is not for children under 13, and we do not knowingly collect anything from them. If you believe a child has created an account, email us and we will remove it.
Security
Every connection is encrypted in transit. Access to your data is enforced by row-level security in the database itself rather than by application code, so a bug in a screen cannot expose another person's records. Passwords are hashed by our authentication provider and are never visible to us. Nobody can send themselves a notification or read anyone else's: the notification queue is not reachable from the app at all.
No system is perfect. If you find a security problem, please email proov.get@gmail.com before disclosing it publicly, and we will work with you.
Changes to this policy
If we change it in a way that matters, we will say so in the app rather than quietly updating the date at the top. The date at the top still tells you when it last changed.
Questions
proov.get@gmail.com — a real person reads it.