Privacy Policy

Last updated: June 20, 2026

This privacy policy covers all iOS applications published under the developer name Tabish Hassan on the Apple App Store. It applies collectively to every app in the portfolio unless a specific app ships its own supplemental policy inside the app.

Two kinds of apps. Most of our apps are offline and store your data locally on your device. A few apps are cloud-connected and require an account to work — for example Project Hub, a 1:1 chat with the developer. Cloud-connected apps are covered in the “Cloud-Connected Apps” section below, which governs them where it differs from the general terms.

Summary

For most apps, your data is stored locally on your device using Apple's SwiftData framework, and no account is required.
Cloud-connected apps (e.g. Project Hub) require sign-in and store your account and messages on Google Firebase servers — see the dedicated section below.
We do not sell your personal content, and we do not track you across other apps or websites.
Some offline apps display third-party ads (Google AdMob) in the free tier. Premium subscribers see no ads. Cloud-connected apps like Project Hub contain no ads.

Data We Access (Offline Apps)

Depending on the specific app and the features you use, the following data may be accessed locally on your device:

Content you create in the app (notes, habits, moods, flashcards, budgets, books, etc.)
App preferences (theme, language, notification schedule)
Health data (only for apps that explicitly request HealthKit permission — you control this in iOS Settings)
Photos and camera (only for apps that request picker permission on demand)
Purchase receipts (processed by Apple StoreKit)

For these offline apps, all of the above is processed and stored on your device. None of it is transmitted to servers we own or operate.

Cloud-Connected Apps (e.g. Project Hub)

Some apps need an account and a server to work. Project Hub is a one-to-one consultation chat that connects you directly with the developer. These apps use Google Firebase and collect and store the following on Firebase servers:

Account information — your name and email address when you sign up with Email, Google, or Sign in with Apple. If you continue as a Guest, you may optionally provide a name and contact email so we can reply.
Messages & content — the text (and, where supported, images, documents, and voice messages) you send in your conversation.
Identifiers — a unique account identifier (Firebase user ID) and, if you enable notifications, a device push token used to deliver message alerts.
Project details you choose to share — e.g. a project category, budget, timeline, or company name.

This data is used solely to operate the service: to create and secure your account, deliver your messages to the developer (and replies back to you) in real time, and send you reply notifications if you enable them. These apps contain no advertising, do no behavioral tracking, and do not collect the advertising identifier (IDFA), location, or health data.

You can permanently delete your account, profile, and entire conversation at any time from Settings → Delete Account inside the app. Conversations include safety tools: you can report content, and the developer can block users and remove content that violates the app's Terms of Use.

Third-Party Services

Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging) — used by cloud-connected apps such as Project Hub to store your account, messages, and attachments and to power real-time delivery and push notifications. Firebase processes this data on Google's servers on our behalf. See Firebase's privacy information and Google's Privacy Policy.
Sign in with Apple & Google Sign-In — used only to authenticate you in cloud-connected apps. If you use Apple's “Hide My Email,” we receive a private relay address.
Apple StoreKit — processes in-app purchases and subscriptions. Governed by Apple's privacy policy.
Apple iCloud — if you enable iCloud sync, your data syncs via your Apple ID. Managed by Apple; we have no access.
Apple HealthKit — for apps that use it, reads the specific data types you authorize. We never write, upload, or share HealthKit data.
Google AdMob — in offline apps that display ads, Google's Mobile Ads SDK may access the Advertising Identifier (IDFA) and device diagnostics to serve and measure ads. This happens only if you consent via the Apple App Tracking Transparency prompt. You can opt out in iOS Settings → Privacy & Security → Tracking. See Google's Ads privacy policy.
Google User Messaging Platform (UMP) — for GDPR-region users of ad-supported apps, shows a consent dialog before any ad network is initialized.
Open Library API — ReadingLog sends book search queries to openlibrary.org over HTTPS. No personal identifiers are transmitted.

Advertising (Ad-Supported Apps Only)

Apps marked "Free with In-App Purchases" may show banner and interstitial advertisements from Google AdMob. Purchasing the premium subscription removes all ads immediately. Ads are never shown in:

Any app listed in the Apple App Store Kids category.
Any app targeted at children under 13.
Any cloud-connected app such as Project Hub (these contain no ads).

Children's Privacy

We do not knowingly collect personal information from children under 13. Apps designed for children operate entirely offline, do not include third-party analytics or behavioral advertising, and comply with the Apple App Store Kids category rules and COPPA. Cloud-connected apps such as Project Hub are not directed to children under 13.

Data Retention & Deletion

For offline apps, all data is stored locally on your device — you can delete everything at any time by deleting the app or clearing data from the in-app Settings screen, and no residual data remains on servers because we do not operate any for those apps.

For cloud-connected apps (e.g. Project Hub), we retain your account and messages while your account exists. You can permanently delete your account and all associated data at any time from Settings → Delete Account in the app, which removes it from our Firebase database and authentication system.

Your Rights (GDPR, CCPA)

If you are located in the EU, UK, or California you have rights including access, rectification, erasure, and objection regarding personal data. For offline apps you exercise these directly on your device. For cloud-connected apps you can delete your data in-app, or contact us for any other request at the email below.

Changes to This Policy

If we update this policy, the revised version will be posted at this URL with an updated "Last updated" date. Material changes will be communicated through an in-app notice where feasible.

Contact

Questions about this policy? Reach out to tabishhassan01998@gmail.com.