Google Play Privacy

Only if you choose to create an account: - Email address — used to sign you in. - Name — the name you provide (one field; whatever you'd like to be called). An account is optional. Mahadhi works fully without one.

- Location data. - Contacts, browsing history, or search history. - Advertising ID. - Usage analytics — Mahadhi embeds no analytics or tracking SDKs. The only diagnostic service is the crash reporting described below. - Audio — voice-to-text runs on your device. Recordings are never uploaded.

Mahadhi does not share your personal data with third parties for advertising or marketing, and does not sell it, and no data broker is involved. The external services we use, each processing only what its own job needs: Supabase (sign-in, and the Rhythms you choose to share), RevenueCat (your purchase and receipt, if you buy Pro), Anthropic (the block title you submit to "Break it down"), and Sentry (crash reports). Each operates under its own privacy policy. Full detail is in our main Privacy Policy.

Mahadhi reports crashes to Sentry so failures can be found and fixed. This is the one thing that is sent without an account. A report carries the technical detail of the failure, the app and update version, your device model, OS and basic device state, and a short trail of the screens and requests that preceded it. It may include a random identifier for that install so repeat reports count as one problem; it is not linked to your account. It does not carry your blocks, to-dos, thoughts, history, name, email, screenshots or any recording of your screen, and the app's own diagnostic logs are excluded because they mention block names. Nothing is sent on a normal launch: session and app-hang reporting are switched off deliberately, so data leaves only when something fails.

Your focus blocks, plans, thoughts, subtasks, and session history are kept in your device's local database, not on our servers. Your sign-in token is stored in the Android Keystore.

Data sent between Mahadhi and our servers is encrypted in transit using HTTPS/TLS. Authentication tokens are held in your device's secure storage.

Each permission is requested only when you use the feature that needs it: - Microphone & Speech Recognition — to turn your voice into text when adding a thought. On-device only. - Photos & Media — to attach a screenshot to a bug report. - Notifications — to deliver local reminders for focus blocks and anchored times. - Alarms & reminders (exact alarms) — so a block-end alert fires at the exact minute even when the phone is idle. Scheduled and rung on your device. You can revoke any of these in Android Settings, and Mahadhi keeps working without them.