Gratitude First

Privacy Policy

Last updated: October 3, 2026

What you write is read by nobody but you. Your gratitude entries are never sent to us.

This policy explains how FKK Enterprises LLC ("we," "us") handles information in the Gratitude First mobile app, the web app, and getgratitudefirst.com.

Your gratitude entries

Your entries, photos and voice notes are stored on your device: in the app's private storage on your phone, or in your browser's storage if you use the web app. We never upload them to our servers, read them, or analyze them.

On Android, they can also be copied to your own Google account by Android backup, as described in the next section. If you share an entry or a card, it goes to the app you pick, and that app's privacy policy applies.

If you uninstall the app, everything it stored on your phone is deleted, except any copy of your journal you saved yourself (see below). If Android backup was on, your latest backup stays in your Google account, and Android can restore it when you reinstall the app on a phone signed in to that account. Google keeps that backup under its own rules, and you can delete it from your Google account's backups. If you use the web app, clearing its site data in your browser deletes what it stored.

Backup and moving to a new phone

• Android backup is on for this app. If backup is switched on for your phone, Android copies your journal, settings (including your first name), streak, challenge progress (including the first names and done days of friends in your shared challenges), guarded apps, unlock rules, the app's record of time spent in your guarded apps, and your photos and voice notes to your own Google account. On Android 9 and later, if your phone has a screen lock, the backup is encrypted with your PIN, pattern or password. This is what lets your journal survive a lost phone. We never receive this backup and can't read it.
• You can switch it off in your phone's Settings, usually under Google → Backup. The app keeps working exactly the same.
• Android allows each app about 25 MB of backup. Your written journal and settings always go first. Photos and voice notes fill the rest of that space, newest first, so in a large journal some older photos and voice notes may not be backed up.
• Your purchase and trial status aren't in the backup. Google Play keeps track of your purchases. App permissions don't carry over either, so you grant them again on a new phone.
• Saving your own copy. In Settings, Save a copy of your journal writes one file, including photos and voice notes, to wherever you choose. That file goes only where you put it. Import a saved journal reads it back and only adds what's missing. It never overwrites or deletes anything already on your phone.

Which apps you choose to lock

To put a pause in front of the apps you pick, Gratitude First needs permission to see which app is in the foreground on your phone. It uses this to know when to show the gratitude screen.

For the apps you've chosen to guard, it also records on your phone when they were opened, for how long, and whether you wrote an entry or walked away, so it can show you your own patterns. It keeps up to 90 days of time totals and sessions, and your most recent 500 gratitude screens. This record is included in your Android backup, but it's never sent to us. We don't collect your list of apps or your usage.

Permissions the app asks for, and why

• Usage access. Used only to notice when an app you've chosen to guard comes to the front. It reads the name of the app you switch to. It doesn't read what's on screen or what you type, and none of it is sent to us. You can turn it off in your phone's settings and the rest of the app keeps working.
• Display over other apps. Lets the gratitude screen appear in front of the app you opened. It reads nothing.
• Running in the background. Keeps the watch going while the app is closed, and starts it again after your phone restarts. While it runs, Android shows a quiet notification so you always know blocking is on.
• Microphone. Used only while you record a voice note. Recordings are saved on your phone and are never sent to us.
• Camera and photos. The app doesn't ask for camera or photo-library permission. When you add a photo, it opens your phone's camera app or Android's photo picker, and only the photo you take or choose is copied into the app. Photos are never sent to us.
• Notifications. For your nightly reminder, a heads-up before a free trial ends, and a warning when an unlock is about to run out. They're created on your phone, and you can turn them off.
• Seeing your apps. The app can see which of your apps have a home-screen icon, so you can choose which ones to guard, and whether a few social apps are installed, to show quick share buttons for them. It doesn't build a profile of your installed apps.

Shared challenges

This is the only feature that uses our server, and only after you send, open or accept a challenge invite. Your entries, photos, voice notes and the apps you lock are never sent to our server.

What we store for each person in a shared challenge:

• a random identifier the app creates for this purpose (it isn't taken from your Google account, your device or anything else);
• the first name you entered during setup, if any (if you left it blank, friends see "A friend");
• which days of that challenge you completed (your most recent 60 at most);
• the date you joined the group, and the date your app last sent an update.

Who sees what:

• People in the same challenge group see your first name and which days you've done. They don't see your identifier (their app gets only a scrambled version of it, used to tell members apart), or your join and last-update dates. Anyone who has the invite link can join the group.
• Anyone who opens the invite link before joining sees only how many people are in the group and the total number of days they've done together, with no names. If you're the only person in the group so far, that total is your own count.
• An invite link you send contains your first name, so whoever receives it, or anyone it's forwarded to, can see it.

If you install the app from an invite page, Google Play passes the invite to the app the first time it opens, so it can offer you that challenge.

Where it's handled: the service runs on Cloudflare, provided through our app-building platform, Rork. Both act only as our service providers. As part of delivering each request, Cloudflare processes your device's IP address. We don't store IP addresses with your challenge data. Data is sent encrypted (HTTPS), is never used for advertising or analytics, and is never sold.

How it's deleted:

• In the app: open the challenge and choose Leave → Leave the group, keep going alone. Your name, days and dates are deleted from the server right away, or as soon as you're back online.
• Automatically: if your app hasn't sent an update for a group in 180 days, everything stored about you in that group is deleted on a schedule, whether or not anyone opens the group again. This also covers people who uninstalled the app.
• By email: send us the invite link for the challenge and the first name you used, and we'll delete your data from that group. If you no longer have the app, this is the way to do it. After a deletion by email, a scrambled form of your identifier is kept for up to 180 days, only so your phone can't re-add you to that group. Your app then carries on with that challenge on its own.

Purchases

We don't handle or store your payment details. Purchases are processed by Google Play (Android) or our web payment processor, and subscription status is managed through RevenueCat, which tells the app whether your premium access is active.

For that, a randomly generated app user ID and your purchase and subscription status are shared with RevenueCat. If you buy on the web, checkout also asks for your email address, used for receipts and the reminder before a free trial ends. Card numbers never reach us. See RevenueCat's privacy policy and the policy of the store you bought through.

Feedback and ratings

If you send feedback from the app, it opens your email app with a message to us. Below the space where you write, the message includes the app version, Android version and phone model, to help us fix problems. You can delete those lines before sending. The app may also ask Google Play to show its rating prompt. Any rating or review you leave goes to Google Play, not to us.

Our website and the wait-list

getgratitudefirst.com is hosted on Netlify, and some of its pages load fonts from Google Fonts. Both receive your IP address when you visit, as part of serving the page. The invite page also asks our challenge server how many people are in that group.

If you enter your email address on our website, we use it once to tell you when the app launches on your platform. We don't sell it or add you to a marketing list.

Crash and diagnostic data

App stores may give us anonymized crash reports and performance data so we can fix bugs. These don't include your entries.

Children

Gratitude First isn't directed at children under 16, and we don't knowingly collect information from them.

Your rights

We never receive your entries, so you control them directly. Uninstalling the app deletes them from your phone, and you can delete your Android backup from your Google account, as described above. Shared-challenge data can be deleted in the app, or by emailing us the invite link and the first name you used, as described above. To ask about, export, or delete information tied to a purchase, a shared challenge or your wait-list email, write to us and we'll handle it within 30 days.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Privacy questions: hello@getgratitudefirst.com