Privacy Policy

Mahadhi is a focus and planning app built for the way ADHD brains actually work. We designed it to hold as little of your data as possible. - You can use Mahadhi without creating an account at all. - Your blocks, thoughts, sessions, and settings live on your device, not our servers. - Voice-to-text happens on your device. Your audio is never uploaded. - We show no ads, use no third-party analytics or tracking SDKs, and never sell your data.

"Mahadhi", "we", "our", and "the app" refer to the Mahadhi application and this website (mahadhi.app). This policy explains what we collect, why, and the choices you have.

Account information (only if you create an account): your email address and the first and last name you provide. Creating an account is optional — Mahadhi works fully without one. Accounts exist so you can sign in and, in the future, sync across devices. Content you create: your focus blocks, plans, thoughts, subtasks, and session history. This is stored locally on your device. It is not uploaded to our servers unless a future feature you turn on requires it, in which case we will update this policy first. Voice input: if you use voice to capture a thought, speech is converted to text using your device's on-device speech recognition. The audio and transcription are processed on your device. We do not record, store, or transmit your audio. Subscription information: if you buy Mahadhi Pro, we (via RevenueCat and the App Store / Google Play) record your purchase status and receipt so we can unlock Pro and restore it across your devices. We never receive or store your payment card details. Photos: if you attach a screenshot to a bug report, that image is included only in the report you choose to send. We do not browse or access your photo library otherwise. Shared Rhythms: if you choose to share a plan ("Rhythm"), the plan's blocks (names, durations, colors) are stored so the recipient can open it. A shared Rhythm does not include your account details or any personal data beyond an optional first name you can choose to attach. We do not collect location data. We do not use advertising identifiers. We do not embed third-party analytics or tracking SDKs.

Mahadhi asks for permissions only when you use the feature that needs them, and only for that purpose: - Microphone & Speech Recognition — to turn your voice into text when adding a thought. On-device only. - Photo Library — to let you attach a screenshot to a bug report. - Notifications — to send you local reminders when a focus block is ending or an anchored time arrives. You can revoke any of these at any time in your device settings. Mahadhi keeps working with those features disabled.

- To provide the app's core features: planning, timing, and reviewing your focus blocks. - To authenticate your account and keep you signed in (if you created one). - To deliver the local reminders you enable. - To respond to bug reports and support requests you send us. We do not use your information to build advertising profiles, and we do not share it for anyone's marketing.

If you are in the European Union, United Kingdom, or another region with similar laws, we process personal data on these bases: - Contract: processing your account email and name to provide and maintain your account. - Legitimate interest: responding to support requests and keeping the app secure and functional. - Consent: any optional feature you turn on (such as sharing a Rhythm). You can withdraw consent at any time by stopping use of that feature or deleting your account.

We keep external services to a minimum: - Supabase — authentication and, for accounts, secure storage of your email and name; also stores Rhythms you explicitly share. Supabase hosts data on cloud infrastructure and operates under its own privacy policy. - RevenueCat — if you purchase a Mahadhi Pro subscription, we use RevenueCat to manage the subscription and confirm your entitlement. RevenueCat receives your purchase/receipt information and an anonymous app-user identifier (linked to your account only if you're signed in). It operates under its own privacy policy. - Apple App Store / Google Play — the payment itself is processed by Apple or Google under their own terms; we never see or store your payment card details. That's the extent of it. There are no advertising networks, no analytics providers, and no data brokers involved in Mahadhi.

- On your device: your blocks, thoughts, sessions, and preferences are stored in your device's local database. Your sign-in token is stored in your device's secure storage (iOS Keychain / Android Keystore). - On our servers (only with an account): your email, name, and any Rhythms you share, via Supabase.

Content on your device is kept until you delete it or uninstall the app. Uninstalling removes the local database from your device. If you have an account, your email and name are retained while the account is active. You can delete your account at any time from Settings → Delete Account inside the app. Deleting your account permanently removes your account record and associated data from our systems. This action cannot be undone. You can also request deletion by emailing support@mahadhi.app. We will verify your request and complete it within 30 days. Rhythms you shared can be removed on request to support@mahadhi.app.

Depending on where you live, you may have the right to: - Access the personal data we hold about you. - Correct inaccurate data (you can edit your name in the app). - Delete your account and associated data (Settings → Delete Account, or email us). - Withdraw consent for optional features at any time. - Object to or restrict certain processing. To exercise any of these, email support@mahadhi.app. We will respond within the timeframe your local law requires (for example, 30 days under GDPR, 45 days under CCPA).

If you are a California resident: - We do not sell or share your personal information, and we have not in the preceding 12 months. - You have the right to know what personal information we collect (your email and name, if you create an account) and to request its deletion. - We will not discriminate against you for exercising these rights. To make a request, email support@mahadhi.app with "California Privacy Request" in the subject.

Mahadhi is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact support@mahadhi.app and we will delete it.

We use industry-standard measures to protect your data: encrypted connections (HTTPS/TLS), secure device storage for authentication tokens, and reputable infrastructure (Supabase). No system is perfectly secure, but because Mahadhi keeps most of your data on your own device and collects so little, your exposure is minimal by design. If a data breach affecting personal data occurs, we will notify affected users and relevant authorities as required by law.

If we change how Mahadhi handles data — for example, adding cloud sync — we will update this policy and change the "Last updated" date above before the change takes effect. Significant changes will be surfaced in the app.