Privacy Policy

Last updated: September 13, 2026

I Promise List ("we", "our", "us") is a personal promise and habit tracker. This Privacy Policy explains what data the I Promise List mobile app, the website i-promise-list.com and the Telegram bot @ipromiselist_bot collect, why, and what you can do about it.

The short version: we collect only what is needed to run the app, we do not sell your data, and you can delete your account and everything in it from the app at any time.

1. Data you give us

• Account: your first name, email address and a password. The password is stored only as a salted hash.
• Guest mode: if you use the app without an account, we create an anonymous user record identified by a random ID and your device ID. It contains no name or contact details. When you sign up later, your promises are moved to your account.
• Your content: promises, their descriptions, schedules, completion marks and the plugins you install. This is the core of the app and is synchronised with our server so it survives reinstalls and works across your devices.
• Preferences: interface language and the daily reminder time.
• Waitlist and support: an email address you enter on the website, and anything you send us by email.

2. Data collected automatically

• Technical data needed to sync: a random device ID, timestamps of changes and the app version. We do not collect your location, contacts, photos or advertising identifiers.
• Website analytics: the page viewed, the referring page, the language and a random per-session ID, sent to our own server. No third-party analytics or advertising trackers are used.
• Server logs: IP address and request details kept for a short time for security and troubleshooting.

3. AI features

Two features use a large language model provided by Anthropic (Claude):

• AI mentor (Pro): to write a personal message of praise we send your first name, your interface language and two numbers: your current streak of days with all promises kept and your total number of such days. No promise texts are sent.
• Plan generator on the website: the goal text you type is sent to the model to draft a set of promises. Results are cached so identical goals are not sent twice.

Anthropic processes this data under its API terms and does not use it to train models. We never send your email, password or full promise history to any AI provider.

4. Subscriptions and payments

Pro subscriptions are sold through Apple In-App Purchase. Apple processes the payment; we never see your card details. We use RevenueCat to validate purchases: it receives your app user ID and Apple purchase receipts and tells our server until what date your subscription is active. That date is the only payment-related data we store.

5. Telegram bot

If you use @ipromiselist_bot, Telegram gives us your chat ID and the messages you send to the bot. We store the chat ID, your language, your progress in the 7-day programme and, if you write one, your own promise text. We do not store your Telegram phone number or contacts.

6. How we use data

• To run the app: sync, reminders, streaks and progress.
• To provide Pro features you paid for.
• To answer your support requests.
• To understand, in aggregate, how the app and website are used and to fix bugs.
• We do not send marketing emails without your consent and we do not sell or rent personal data.

7. Who we share data with

• Service providers acting on our instructions: Google Cloud (hosting and database), Apple (App Store, TestFlight, payments), RevenueCat (subscription validation), Anthropic (AI features), Telegram (bot delivery).
• Authorities, when required by law.
• A successor, if I Promise List is transferred to another owner; this policy would still apply to your data.

8. Storage and security

Data is stored on servers in the United States. All traffic is encrypted with TLS, passwords are hashed, and access to production systems is limited to the developer. No system is perfectly secure; if a breach affects you, we will notify you as required by law.

9. Retention and deletion

Your data is kept while your account exists. You can delete your account from Profile in the app: this removes your account and all your promises from our servers immediately. Guest data that was never linked to an account, and bot data, are deleted on request by email. Server logs are deleted within 30 days.

10. Your rights

Depending on where you live (including the EU and the UK under GDPR, and California under CCPA) you may have the right to access, correct, export or delete your data, and to object to or restrict its processing. Most of this you can do directly in the app; for anything else, email us and we will respond within 30 days.

11. Children

The app is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect their data; if you believe a child has provided data to us, contact us and we will delete it.

12. Changes

We may update this policy. The date at the top shows the current version; material changes will also be announced in the app.

13. Contact

Armen Yakhshibekyan, developer of I Promise List. Email: armen@i-promise-list.com