Serenity Privacy Policy
Serenity is a wellness and reflection app from Supply4u. This policy describes the current internal-test app, including guest mode, optional accounts, on-device reflections, and optional live AI chat when enabled. It is separate from the Supply4u website privacy notice.
Who provides Serenity
Jarrod M Avery, doing business as Supply4u, provides Serenity. For support, privacy questions, or account-deletion requests, contact serenity@supply4uapps.com. The initial launch is intended for adults in the United States.
Information saved on your device
Journal entries, conversation text, mood check-ins and their dates, conversation-allowance counts, guest-mode choice, and welcome-screen acknowledgments are stored in the app’s local device storage. Reflections may contain sensitive or health-related information that you choose to enter. Premium access is not granted by a local device setting.
Serenity uses this information to display your journal and conversations, show your mood history, choose local responses, and remember your app choices. This release does not synchronize journal entries, conversations, or mood history to a cloud journal database. If you opt in to live AI chat while signed in, the messages described below are transmitted for a reply.
Signed-in accounts now use separate on-device storage areas, so switching accounts does not show another signed-in account’s reflections. Guest reflections use a separate device area. Older notes saved before this separation remain in Guest mode because Serenity cannot safely determine which account owns them. Anyone who opens Guest mode on this installation can see those Guest notes. Signing out does not delete any local reflections.
Example journal cards are built-in sample content, not entries saved by you.
You can use You → Trust & privacy → Export local reflections to download a JSON copy or copy its text. The export contains only the active local profile’s journal, mood history, and conversations on this installation; it does not include other profiles, sign-in credentials, or cloud account records. Creating the export does not send it to Supply4u. The downloaded file and clipboard copy are not encrypted by Serenity, so keep them private.
Optional accounts and sign-in
Guest mode does not require a name, email address, or password. If you create an email account, your chosen name, email address, and password are sent to Supabase, our authentication provider. Supabase manages the account identifier, profile, email-confirmation state, and sign-in credentials. Your password is not saved in your journal or conversations.
A sign-in session and its tokens are stored on the device so you can stay signed in. Account requests, including account deletion, are sent to Supabase over HTTPS. These requests can also expose technical information such as your network address and request time to the service provider.
If you choose an available Google or Apple sign-in option, that provider handles its own sign-in screen and shares the account identity and profile information authorized through that flow. Those providers’ own notices also apply. No social sign-in is required to use guest mode.
Conversation responses, optional live AI, and demo features
Guest conversations and the on-device demo use rule-based responses selected on your device. Those demo messages are not sent to OpenAI for a reply. If live AI chat is enabled in the build, a signed-in adult can choose it separately. After that choice, each new live-chat message and up to seven recent messages from that live-chat segment are sent through a Supabase Edge Function to OpenAI for input moderation, response generation, and output moderation. Older demo messages, journal entries, and mood history are not sent. The resulting reply is saved in the active profile on this device. You can switch back to the demo in Talk.
Live AI has automated safety checks and limited request sizes and usage, but they cannot reliably identify every emergency or prevent every unsafe response. No person monitors conversations for emergencies. The OpenAI request uses store=false, so Serenity does not ask OpenAI to retain a response for later retrieval. OpenAI may still keep abuse-monitoring logs that include prompts and responses for up to 30 days by default, or longer in the circumstances described by its policies. OpenAI states that API data is not used for model training by default unless the API customer opts in. Supply4u must verify the project’s settings and provider terms before wider release.
While signed in, you can choose to submit a response report. Serenity attempts to send only the selected software response and your chosen reason to a Supabase report queue, associated with your account identifier. It does not send the rest of your conversation or journal as part of that report. The app confirms success only if the service confirms saving it; otherwise it shows an error. Guest users can contact support by email instead. Reports are not monitored for emergencies.
Google Play purchases are disabled in this internal-test build, so tapping the plan preview cannot start a charge. The app includes a RevenueCat purchase connection for a future Android test. If it is configured, it checks subscription status using your account identifier; before charging users, this policy and the account-deletion process must be updated for RevenueCat and Google Play transaction records. Live AI, when enabled, has an internal-test limit of 20 requests per signed-in account per UTC day and 200 total requests per UTC day; these are not paid-plan entitlements. A request may count even if no reply is returned.
Service providers and information sent to them
Supabase processes account and authentication information, runs the account-deletion, optional response-reporting, and optional live-chat functions, and stores a submitted response report when the service confirms it. If you choose live AI, the Supabase function relays the selected chat text and reply to OpenAI; Supabase stores per-account and daily aggregate request counts but no chat text in the usage tables. Namecheap Private Email is used to send account verification emails and handle Supply4u email correspondence. These email services process the recipient address, message content, and delivery information needed to deliver the email.
If you email Supply4u, your address, the content you send, and any attachments are processed by the email services involved. They are not part of the on-device journal. Never email passwords or verification links. Include private journal content only if it is necessary for your request and you want to share it.
The app does not integrate an advertising SDK or a marketing-analytics SDK. The current app code does not sell reflections or send them for targeted advertising. If the optional RevenueCat connection is configured, it receives the signed-in account identifier and purchase/subscription status from its SDK and Google Play; it does not receive journal or chat text through Serenity’s purchase code. Authentication, email, purchase, and distribution providers may maintain operational or security records under their applicable services and settings. Using Google Play or opening an external website also involves that service’s own data practices.
How long information remains
Local journal entries, mood history, conversations, and persistent app choices remain on the device until you remove the relevant profile using the app’s deletion controls or clear the installation’s app data. Closing the app or signing out does not delete those records. Supply4u cannot recover a locally stored reflection after it has been removed.
The active Supabase account remains until it is deleted. A successful signed-in deletion removes the active account through Supabase and then clears that account’s local profile and sign-in tokens on the device where you requested deletion. Guest notes and other signed-in profiles remain on that device.
If the response-reporting service is enabled and confirms a submission, the selected response, reason, account identifier, and submission time are kept in a restricted Supabase queue for review. The report is linked to your account and is deleted with that account. Automated deletion of older reports is not yet implemented in this internal test; Supply4u must review and remove reports manually.
If live AI is enabled, the restricted Supabase usage table keeps your account identifier, UTC date, request count, and last request time so the service can limit use. That row is deleted when your account is deleted. A separate daily total has no account identifier. The Edge Function does not save your chat text to those tables. OpenAI’s own operational retention is described above and is not erased by deleting local reflections or the Supabase account.
For emailed account-deletion requests, Supply4u completes deletion within 30 days after verifying ownership and confirms completion by email. Resolved support and deletion-request emails, including attachments and copies in Sent or Trash, are deleted within 90 days after resolution unless retention is necessary for a legal obligation.
Service-provider security records, email-delivery logs, and recovery backups are separate from the active account and local journal. They are not all erased by an in-app deletion. Supabase currently makes one day of external logs accessible on our Free plan, database audit-log writing is disabled, and the project dashboard reports no available backups. A dashboard access window is not a guarantee that every provider-held record is erased at that time. Provider-controlled records follow the provider’s operational, security, and legal retention practices; we cannot promise a fixed erasure deadline for those records. Contact us for help with a request involving a provider-held record.
Delete an account or device data
While signed in, open You → Trust & privacy → Delete account & data. Review the warning and confirm Delete my account & data. This is permanent: it deletes the active Serenity account and clears that account’s conversations, journal entries, mood history, preferences, and saved sign-in information from that app installation. Guest and other signed-in profiles remain.
In guest mode, the same settings entry opens Delete device data. Confirming Delete my device data clears Guest reflections and choices on that installation only. It does not delete a signed-in profile or online account. Clearing device data or uninstalling an app is not a substitute for deleting an existing online account.
If the account service cannot confirm deletion, the app keeps local data and shows an error. If local cleanup is interrupted after the account is deleted, reopen the app and use Retry cleanup if prompted.
Local copies on other devices are not remotely erased. Remove them on each device. Returning to the sample Example entry does not restore deleted journal content.
For help if you cannot access the app, contact serenity@supply4uapps.com from the email associated with your account and request account deletion. Supply4u will need to verify account ownership; never send passwords or verification links. This contact link opens your email application and does not send a request or delete an account automatically. Review and send the message to submit your request.
Security and your device
Account-service traffic uses HTTPS. On-device storage relies on the app sandbox and the security of your device; this release does not add a separate journal password or an app-managed encryption layer. We do not describe the journal as end-to-end encrypted.
Protect your device with its lock screen and avoid sharing the app installation. No storage or transmission method is completely secure. Opening a privacy policy or dismissing this reader does not accept the welcome-screen terms, change your sign-in, or remove your saved data.
Your choices and privacy requests
You can choose guest mode, the on-device demo, or optional live AI when available; decide what to write; switch back to the demo; stop using the app; and use the deletion controls described above. Contact serenity@supply4uapps.com for questions or requests concerning access, correction, or deletion of account or correspondence information. Available privacy rights depend on the law that applies to you. Supply4u may need to verify your identity before responding.
This release offers an on-device reflection export but not automated cloud export or recovery. The initial launch is intended for the United States. The account database is hosted in Oregon, United States. Email delivery and service-provider operations may involve processing in other locations under those providers’ arrangements.
Adults and wellness limitations
Serenity is intended for adults age 18 or older. The welcome-screen age acknowledgment is stored locally; it is not government-ID verification. Contact Supply4u if you believe a child has provided account information.
Serenity is not a therapist, healthcare provider, or emergency service. It does not provide medical diagnosis or treatment. Do not use the app to request emergency assistance.
Updates and contact
This policy describes the current internal-test implementation, including the optional live-AI path when enabled. We will update it when data practices change, including before content synchronization, analytics, or payments. Material changes will be explained in the app or through another appropriate notice before they take effect.
Support and privacy contact: serenity@supply4uapps.com. The app includes this policy text so it can be read without leaving Serenity or needing an internet connection.