Torchday privacy policy

Last updated: 16 October 2026 · Back to Torchday

In short: Torchday keeps your habits, to-dos and health notes so you can use them on your phones. It doesn't sell your data, show ads or track you across other apps or websites.

Using Torchday without an account

If you choose "Continue without an account", everything you enter stays on your phone. Nothing is sent to us.

What we store when you have an account

Account details: your email address, your username and, if you sign in with Google, the name on your Google account.
What you enter in the app: habits and their history, to-dos, and your settings.
Profile: the name, date of birth, height, weight, gender and avatar you enter.
Health: food and calories you log; sleep times; and, if you use it, your cycle tracker entries (bleeding, spotting and symptoms).

We use this only to run the app: to save your data and sync it between your phones, and to sign you in.

Invite requests

If you ask for an invite on this website, we store your name, your Gmail address and, if you add one, what you'd like to track. We use them only to decide on and send your invite. Email us to have your request deleted.

Who handles your data for us

Supabase stores your account and synced data and handles sign-in.
Resend sends our emails (sign-up, log-in and password reset codes).
Google, only if you choose "Continue with Google", confirms who you are and shares your name and email with us.
Cloudflare hosts this website, and Cloudflare Turnstile checks that a person, not a bot, is asking for an invite or logging in. It may look at technical details of your device and connection for this check.
Google Fonts supplies the fonts on this website, so your browser asks Google for them.

They process data only to provide these services. We don't share your data with anyone else, unless the law requires it.

How your data is protected

Your data travels encrypted between the app and our servers. Access rules on the server let each account read and change only its own data. Logging in with email needs your password and a code sent to your email. We only look at stored data if needed to fix a problem you report, or if the law requires it.

Keeping and deleting your data

We keep your data while you have an account. To delete your account and everything stored with it, email us from the address you signed up with; we'll do it within 30 days. Signing out removes your data from that phone.

Children

Torchday isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date above and, for important changes, tell you in the app.

Contact

Questions or requests: habitflow-support@googlegroups.com