Ascent Privacy Policy

Last updated: July 1, 2026

1. Who We Are

Ascent is a local-first routine, focus, workout, and personal progression application operated by Caos Domado ("Ascent", "we", "us", or "our"). This Privacy Policy explains how Ascent accesses, collects, uses, stores, shares, retains, and deletes information when you use the Ascent mobile app, website, account features, and related services.

Privacy contact: privacy@caosdomado.com.

2. Short Version

Ascent is designed to work local-first. Routine, agenda, focus, and workout data is saved on your device before any optional sync.
Account creation and cloud sync are optional service features. If you sign in, selected app data may sync through Supabase so you can back up and restore your account.
We do not sell your personal information, use it for behavioral advertising, or run third-party ad SDKs in the app.
We only share data with service providers needed to operate the app, authentication, hosting, email, sync, security, and support.
You can request access, correction, export, deletion, or account deletion by contacting us.

3. Information You Provide

Depending on the features you use, you may provide:

Account information, such as email address, password credentials handled by our authentication provider, and third-party sign-in identifiers if you choose Google or Apple sign-in.
Profile and app preference data, such as codename, selected legend/avatar, selected paths, neon accent, locale, timezone, feedback preferences, rest-day settings, and sync preferences.
Agenda and routine data, such as task titles, notes, dates, times, difficulty, completion status, snooze state, missed state, progress counts, action history, and sync metadata.
Focus data, such as local focus timer choices, linked agenda items, Pomodoro/progressive session state, and audio preference choices.
Workout and body-progress data you choose to enter, such as training plans, workout days, exercises, target sets, set logs, rest timers, session summaries, measurements, photos, nutrition, habits, or related progress records when those features are available and used.
Support communications, such as messages, screenshots, or diagnostic details you choose to send us.

Do not enter information you do not want stored in the app or synced to your account.

4. Information Collected Automatically

Ascent may collect or generate limited technical information needed to operate, secure, and improve the service:

Device and app information, such as app version, platform, operating system, language, crash context, and basic diagnostics.
Authentication and security logs, such as sign-in events, token state, password reset requests, email confirmation activity, IP address, and timestamps processed by our service providers.
Sync and notification metadata, such as local IDs, remote IDs, retry state, last sync attempt, pending notification IDs, reminder schedule state, and conflict markers.
Website hosting logs, such as request metadata collected when you visit the public Ascent website or this Privacy Policy.

Ascent does not currently use third-party advertising SDKs or cross-app behavioral tracking SDKs.

5. Sensitive Data

Some information you choose to enter may be sensitive because it can reveal routines, discipline patterns, workout activity, nutrition choices, body measurements, photos, performance history, health- adjacent habits, or personal goals. We use this data only to provide Ascent features you request, such as agenda management, local progress tracking, workouts, reminders, feedback, sync, restore, and account support.

We do not use sensitive routine, fitness, nutrition, or body-progress data for advertising, insurance, employment eligibility, credit decisions, or unauthorized social sharing.

6. Local Storage and Optional Cloud Sync

Ascent is built to save user-owned routine data locally first. Local data is stored on your device using app storage and may remain there until you delete it, reset the app, uninstall the app, or use an available in-app deletion control.

If you sign in and sync is configured, selected local data may be sent to Supabase for account-backed backup, cross-device sync, authentication, and recovery. Local changes are intended to persist before remote sync is attempted. Failed sync attempts may be retried through durable sync metadata.

7. How We Use Information

Provide, operate, maintain, and secure Ascent.
Create, edit, complete, snooze, miss, delete, and restore agenda items.
Run local focus, workout, reminder, feedback, and progression features.
Authenticate accounts and support email confirmation, password recovery, and sign-out.
Sync account data after sign-in and preserve local-first integrity.
Send service messages, such as account confirmation or password reset emails.
Respond to support, privacy, security, and account deletion requests.
Detect, prevent, investigate, and address abuse, fraud, security incidents, and technical issues.
Comply with legal obligations and enforce applicable terms or policies.

8. Notifications, Permissions, and Device Features

Ascent may request permissions needed for reminders, actionable notifications, audio, haptics, authentication callbacks, and future device integrations. Android notification permissions allow Ascent to show local reminders and notification actions such as complete or snooze. Notification actions route through the same app logic as in-app actions where supported.

The onboarding permission screen may ask for, check, or open Android settings for the following access categories:

Notifications, to show reminders, streak-risk alerts, wake-up prompts, and actionable task notifications.
Activity recognition, to support step, workout, and movement-based progress features.
Precise, approximate, and background location, to support place-aware routines such as gym, school, work, or other future context-based arenas when enabled by the user.
Usage access, to support focus and distraction-protection features that need to know whether distracting apps are being used.
Calendar read and write access, to turn outside obligations into agenda missions and, where supported, create or update calendar entries at the user's direction.
Camera access, to support future photo proof, body-progress, or task-completion evidence features.
Microphone access, to support future spoken commitment, alarm, or voice-driven capture features.
Biometric capability, to check whether the device can protect sensitive goals, quitting flows, or account/security actions with local biometric controls. Biometric templates remain managed by the operating system.
Display-over-other-apps access, to support future intervention screens over distracting apps during focus blocks.
Exact alarm access, to keep critical reminders, wake-up prompts, and streak-risk alerts from arriving late.
Health Connect read permissions for steps, exercise, calories, and background health reads. These permissions are declared for future Health Connect integration; Ascent does not claim Health Connect access until the in-app grant flow is implemented and the user grants it.
Device restart handling, to support restoration or rescheduling of local reminders after the device restarts where supported.

You can manage operating-system permissions through your device settings. If you deny or disable a permission, the related feature may not work.

9. How We Share Information

We do not sell personal information. We may share information only in these limited cases:

Service providers and processors that help operate Ascent, such as Supabase for authentication, database, sync, and backend services; email providers for confirmation and password recovery messages; Vercel for public website hosting; Cloudflare for public asset delivery and DNS; and Google or Apple when you choose their sign-in services.
Legal, safety, and security reasons, such as complying with law, valid legal process, enforcing rights, protecting users, or investigating abuse.
Business transfers, such as a merger, acquisition, financing, reorganization, or sale of assets, where privacy commitments remain attached to the transferred data.
With your direction or consent, such as future clan, leaderboard, social, sharing, export, or integration features that you deliberately enable.

10. Data Retention and Deletion

We retain personal information only for as long as reasonably needed for the purposes described in this policy, including providing the app, maintaining your account, preserving local sync integrity, complying with law, resolving disputes, enforcing agreements, and protecting security.

Local device data remains on your device until removed through app controls, device controls, uninstall, or local reset.
Synced account data remains until you delete it, request deletion, or the account is deleted, subject to limited retention for legal, security, backup, and fraud-prevention needs.
Backup and log data may persist for a limited period before automatic deletion under provider retention schedules.

To request account deletion or deletion of synced account data, contact privacy@caosdomado.com. We may need to verify your identity before completing the request.

11. Your Choices and Rights

Depending on where you live, you may have rights to access, know, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to appeal a privacy request decision or lodge a complaint with a data protection authority.

California residents may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including rights to know, delete, correct, limit use of sensitive personal information, and opt out of sale or sharing. Ascent does not sell personal information or share it for cross-context behavioral advertising.

European Economic Area, United Kingdom, Swiss, and similar-region users may have rights under data protection laws including access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. Where required, our legal bases may include contract performance, consent, legitimate interests, legal obligation, and protection of vital interests.

Submit requests through privacy@caosdomado.com.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include local-first storage boundaries, account authentication, access controls, provider security controls, and secure handling procedures for synced user data. No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

13. International Processing

We and our service providers may process information in countries other than where you live. These countries may have data protection rules that differ from your jurisdiction. Where required, we rely on appropriate safeguards for international transfers.

14. Children

Ascent is not directed to children under 13 and is not intended for users who are too young to consent to personal data processing under applicable law. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Ascent, contact us and we will take appropriate steps to delete it.

15. Third-Party Links and Services

Ascent may link to third-party services, app stores, operating-system settings, authentication providers, or support channels. Their privacy practices are governed by their own policies.

16. Changes to This Policy

We may update this Privacy Policy as Ascent, legal requirements, or our data practices change. If changes are material, we will take reasonable steps to notify users, such as updating the date above, posting the new policy, or providing in-app notice when appropriate.

17. Contact

For privacy questions, requests, or complaints, contact:

Caos Domado / Ascent
Email: privacy@caosdomado.com
Website: https://ascent.caosdomado.com