Last updated: October 21, 2026
What you write is read by nobody but you. Your photos and voice notes are never sent to us.
This policy explains how FKK Enterprises LLC ("we," "us") handles information in the Gratitude First mobile apps, the web app, getgratitudefirst.com, the account website gratitudefirstapp.com, and the Gratitude First extension for Chrome.
Your entries, photos and voice notes are stored on your device: in the app's private storage on your phone, or in your browser's storage if you use the web app. We never upload them to our servers, read them, or analyze them.
The one exception is described in "Your account, the account website and the Chrome extension" below: if you sign in there and turn on journal sync, the text of your entries — never photos or voice notes — is copied to our server so the website and the extension can share them.
On Android, they can also be copied to your own Google account by Android backup, as described in the next section. If you share an entry or a card, it goes to the app you pick, and that app's privacy policy applies.
If you uninstall the app, everything it stored on your phone is deleted, except any copy of your journal you saved yourself (see below). If Android backup was on, your latest backup stays in your Google account, and Android can restore it when you reinstall the app on a phone signed in to that account. Google keeps that backup under its own rules, and you can delete it from your Google account's backups. If you use the web app, clearing its site data in your browser deletes what it stored.
To put a pause in front of the apps you pick, Gratitude First needs permission to see which app is in the foreground on your phone. It uses this to know when to show the gratitude screen.
For the apps you've chosen to guard, it also records on your phone when they were opened, for how long, and whether you wrote an entry or walked away, so it can show you your own patterns. It keeps up to 90 days of time totals and sessions, and your most recent 500 gratitude screens. This record is included in your Android backup, but it's never sent to us. We don't collect your list of apps or your usage.
On iPhone and iPad, Gratitude First uses Apple's Screen Time framework (Family Controls, Managed Settings and Device Activity) instead of the Android permissions below. You grant it Screen Time access once, and you can revoke it any time in Settings → Screen Time.
This section describes the Android app.
This is the only feature that uses our server, and only after you send, open or accept a challenge invite. Your entries, photos, voice notes and the apps you lock are never sent to our server.
What we store for each person in a shared challenge:
Who sees what:
If you install the Android app from an invite page, Google Play passes the invite to the app the first time it opens, so it can offer you that challenge. On iPhone and iPad, the invite page copies the invite link to your clipboard when you tap Join the Challenge; the app reads it only when you tap Paste on the Challenges screen.
Where it's handled: the service runs on Cloudflare, provided through our app-building platform, Rork. Both act only as our service providers. As part of delivering each request, Cloudflare processes your device's IP address. We don't store IP addresses with your challenge data. Data is sent encrypted (HTTPS), is never used for advertising or analytics, and is never sold.
How it's deleted:
gratitudefirstapp.com is the account website: you sign in there with Google, and the Gratitude First extension for Chrome connects to the same account. This section covers both, plus the server account behind them.
Signing in. We use Google's sign-in, and we ask Google only for your name, email address and profile photo. We never see your Google password, and we don't get access to your email, files or anything else in your Google account. Signing in creates your account; there's no other way to make one.
What syncs through your account: the sites you guard, whether the gate is on, your unlock rules, the first name used in your greeting, your streak and challenge progress, your badges, and whether you have Premium. Your entries are not part of this sync.
Journal sync is off by default. It starts only when you turn on "Sync my journal" in the Account tab. While it's on, the text of your entries — plus the mood tags, the day, and which site you wrote before — is stored on our server, so the website and the extension can show your journal. Photos and voice notes never leave your device. Entries are capped at 500 characters, as in the app. Turning the switch off deletes the server copy right away.
The extension blocks on your computer. It keeps your list of guarded sites in your browser and checks every address against that list locally. Nothing about your browsing — no addresses, pages or history — is collected, logged or sent to us or anyone else. Your entries and unlock records live in your browser's own storage. The gate works with no internet and before you sign in; sync catches up later.
Connecting the extension. Only gratitudefirstapp.com is allowed to hand your sign-in to the extension, and the extension confirms the sign-in with our server before accepting it.
What we store for your account: your name, email address and profile photo from Google; the sync data listed above; the text described under journal sync, if that's on; and a record of your sessions, each stored only as a one-way hash that can't be turned back into the sign-in. Sessions lapse after 180 days of not being used.
Your Premium purchase. If you bought Premium on the web in a browser before signing in, that purchase attaches to your account the first time you sign in, so it follows you to the extension. Payment details are handled as described under Purchases.
Where it's handled: the account website is hosted on Netlify, the extension is distributed through the Chrome Web Store, and the account server runs on Cloudflare, provided through our app-building platform, Rork. These providers process your IP address as part of serving each request. We don't use this data for advertising or analytics, and we never sell it.
How it's deleted:
We don't handle or store your payment details. Purchases are processed by the Apple App Store (iPhone and iPad), Google Play (Android) or our web payment processor, and subscription status is managed through RevenueCat, which tells the app whether your premium access is active.
For that, a randomly generated app user ID and your purchase and subscription status are shared with RevenueCat. If you buy on the web, checkout also asks for your email address, used for receipts and the reminder before a free trial ends. Card numbers never reach us. See RevenueCat's privacy policy and the policy of the store you bought through.
To understand which parts of the iPhone, iPad and Android apps help people and where they get stuck, the apps send anonymous usage statistics to PostHog, our analytics provider, hosted in the United States.
What's sent: a random identifier created by the app (not linked to your name, email, Google or Apple account, or advertising ID), your app version, device model and operating system, and named events such as finishing setup, turning blocking on, finishing an unlock, opening the upgrade screen, choosing a plan, starting or cancelling checkout, a confirmed purchase or free trial, and starting, joining or completing a challenge. Events carry only simple details, like which plan you picked, how many apps you guard, whether an entry had a photo, or the library ID of a challenge. Your IP address reaches PostHog only as part of delivering each request; we've set PostHog to discard it, so it isn't stored or used to work out your location.
What's never sent: the text of your entries or prompts, your photos or voice notes, your name or friends' names, which apps you guard, invite links or codes, and anything you type. Nothing is collected automatically from every tap or screen.
Screen recordings are off until you allow them. The app asks once, after your first successful unlock, and never during setup. If you tap Allow, it records from then on only the setup screens (if you revisit them), the upgrade screen and Settings, as a low-detail replay of what was on screen. Typed text, photos, images and your name are blacked out before anything leaves your phone. Your journal, the entry screen, the camera, voice recording, the gratitude lock screen, challenges and the Home screen are never recorded.
Your choices: in Settings → Privacy, turn off Share anonymous usage to stop all statistics, or Screen recordings of setup & upgrade to stop recordings. Either takes effect immediately. We use this data only to improve Gratitude First. It isn't used for advertising, isn't combined with data from other companies, and is never sold. Events and recordings are kept for up to 12 months. See PostHog's privacy policy.
If you send feedback from the app, it opens your email app with a message to us. Below the space where you write, the message includes the app version, Android version and phone model, to help us fix problems. You can delete those lines before sending. The app may also ask Google Play to show its rating prompt. Any rating or review you leave goes to Google Play, not to us.
getgratitudefirst.com is hosted on Netlify, and some of its pages load fonts from Google Fonts. Both receive your IP address when you visit, as part of serving the page. The invite page also asks our challenge server how many people are in that group.
If you enter your email address on our website, we use it once to tell you when the app launches on your platform. We don't sell it or add you to a marketing list.
App stores may give us anonymized crash reports and performance data so we can fix bugs. These don't include your entries.
Gratitude First isn't directed at children under 16, and we don't knowingly collect information from them.
We never receive your entries, so you control them directly. Uninstalling the app deletes them from your phone, and you can delete your Android backup from your Google account, as described above. Shared-challenge data can be deleted in the app, or by emailing us the invite link and the first name you used, as described above. Account data is deleted by you, directly, with Delete my account in the Account tab, as described above. To ask about, export, or delete information tied to a purchase, a shared challenge, your account or your wait-list email, write to us and we'll handle it within 30 days.
If this policy changes, we'll update the date at the top of this page.
Privacy questions: hello@getgratitudefirst.com