Privacy Policy

1. About Tenor

Tenor is a habit-tracking app that helps you build and maintain habits. Our approach is simple:

• Your habit data belongs to you.
• Almost all of your data stays on your own device.
• We collect as little information as possible — only what's needed to run the app, process payments, and keep it stable.

2. Who We Are

Tenor is developed and operated by Brihat Sharma ("Tenor," "we," "us," or "our"), based in India.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary responsible for the personal data described in this policy. Where the GDPR applies to you (Section 9), we act as the data controller.

Contact and Grievance Officer: Brihat Sharma, reachable at brihats34@gmail.com

If you have a complaint about how we handle your data, please contact us first using the details above. We'll acknowledge and work to resolve grievances promptly.

3. Information We Collect

Habit Data

Tenor stores what you create inside the app: habits, habit names, icons, colors, notes, completion history, streaks, goals, and app settings.

This is stored locally on your device only. We do not operate servers that receive or store your habit data.

Subscription Information

If you purchase Tenor Premium, your purchase is processed by Google Play Billing and verified through RevenueCat. RevenueCat may receive:

• An anonymous App User ID
• The product purchased
• Purchase status
• Subscription expiration date
• Your Google Play store account identifier

RevenueCat does notreceive your habit data. RevenueCat's privacy policy: https://www.revenuecat.com/privacy

Google Drive Backup (Optional, Premium)

If you enable this feature, your habit database is uploaded to the App Data folder of your own Google Drive account — a private folder tied to your Google account that only Tenor can write to, and that we cannot see or access. Google may process this data under its own privacy policy. You can disable backups at any time in Settings.

Diagnostic Information

If crash reporting is enabled, we collect technical information needed to fix bugs — app version, Android version, device model, and crash logs. This does not include your habit data and is not used to identify you personally. Where required, we ask for your consent before this is collected, and you can turn it off in Settings at any time.

4. Information We Do Not Collect

We do not ask for, and do not intentionally collect:

• Your name or email address (beyond what you choose to share if you email us)
• Phone number, contacts, photos, messages, or calendar
• Precise location
• Microphone or camera access
• Payment card details — Google Play handles all payments; we never see your card information

We do not use advertising identifiers (such as the Android Advertising ID), and Tenor does not contain an advertising SDK.

5. How We Use Your Information

We use information only to:

• Save your habits, locally on your device
• Restore purchases and enable Premium features
• Create and restore your Google Drive backup, if you enable it
• Improve app stability and fix bugs

We do not sell your data. We do not rent your data. We do not build advertising profiles.

Legal basis (for users in the UK/EEA):we process subscription data because it's necessary to perform our contract with you (GDPR Art. 6(1)(b)); we process optional diagnostic data on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time; and we rely on legitimate interests (Art. 6(1)(f)) for basic security and stability of the app.

6. Who We Share Information With

We work with a small number of service providers, and share only what each one needs to do its job:

• Google Play— app distribution, purchases, and subscription management. Governed by Google's Privacy Policy.
• RevenueCat— subscription verification and purchase restoration. See Section 3 for what's shared, and https://www.revenuecat.com/privacy.
• Google Drive API — only if you enable backups, to upload and restore backup files to your own private App Data folder. Tenor only ever accesses backup files it created itself.

We do not otherwise share, sell, or disclose your information to third parties, except where required by law (for example, in response to a valid legal request).

7. Data Storage, Retention & International Transfers

Habit data is stored locally on your device using on-device storage and is retained until you delete it, clear the app's storage, or uninstall the app.

If Google Drive Backup is enabled, backup files are retained in your own Google Drive account until you delete them or disable the feature.

We do not operate cloud servers that store your personal habit information.

Subscription records may be retained by Google Play and RevenueCat in line with their own legal and operational obligations. Diagnostic information, if enabled, is retained by our crash-reporting provider only as long as needed to diagnose and fix issues.

Because our service providers (including RevenueCat and Google) operate internationally, limited data — such as the subscription and diagnostic information described above — may be processed on servers outside your own country, including in the United States or the European Union. Where this involves transferring personal data out of the EEA/UK, our providers rely on recognized safeguards such as the EU Standard Contractual Clauses.

8. Your Rights

Because almost all of your habit data lives only on your device, exercising most rights over it is direct and immediate — deleting a habit, clearing app storage, or uninstalling the app removes it completely, and no request to us is required.

For the limited data that is processed on our behalf by Google Play, RevenueCat, or our crash-reporting provider, you have rights to access, correct, or request deletion of that data. Contact us using the details in Section 14, and we will help coordinate with the relevant provider where we're able to.

If you're in India (DPDP Act)

As a Data Principal under the DPDP Act, you have the right to:

• Access information about the personal data we hold and how it's processed (Section 11)
• Correction and erasure of your personal data (Section 12)
• Grievance redressal — you can raise a grievance with us directly using the contact details in Section 14, and we will respond within a reasonable time (Section 13)
• Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity (Section 14)
• Withdraw consent at any time for anything we process on the basis of your consent (such as crash reporting), without affecting the lawfulness of processing before withdrawal

If you're not satisfied with how we've handled your grievance, you may complain to the Data Protection Board of India.

Tenor complies, and will continue to comply, with the DPDP Act and its rules as their provisions come into effect.

9. If You're in the UK, EEA, or Switzerland (GDPR)

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Request erasure (Art. 17)
• Restrict processing (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time (Art. 7(3))
• Lodge a complaint with your local supervisory authority (Art. 77)

To exercise any of these, contact us using the details in Section 14.

10. If You're a California Resident (CCPA/CPRA)

To the extent the CCPA applies to our processing of your information, you have the right to know what personal information we collect, request deletion or correction of it, and not be discriminated against for exercising these rights.

We do not sell or share personal information for cross-context behavioral advertising, so there is no "opt-out of sale" process required. The categories of personal information we handle are limited to identifiers (such as an anonymous app user ID) and commercial information (purchase records) — see Section 3 for the full picture.

11. Children's Privacy

Tenor is intended for users aged 18 and older. We do not knowingly collect personal information from children, and Tenor is not directed toward children.

If you believe a child has provided personal information through Tenor, please contact us and we will take steps to delete it.

12. Security

We take reasonable technical and organizational measures to protect the information handled by the app. However, no software, device, or storage method can guarantee absolute security.

If a data breach occurs that's likely to affect you, we will notify affected users and the relevant authorities as required by applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For minor changes, the updated policy will take effect as soon as it's published here, and we'll update the effective date above.

For material changes — anything that meaningfully changes what we collect or how we use it — we'll provide reasonable advance notice, such as an in-app notification, before the change takes effect.

Your continued use of Tenor after changes take effect means you accept the revised policy.

14. Contact Us

Questions, requests, or grievances about this Privacy Policy can be sent to:

Email: brihats34@gmail.com

We aim to respond to all privacy-related requests as promptly as we can.