Privacy Policy

Fast & Bear It is a fasting timer published by Ensonova LLC ("Ensonova", "we", "us"). This Privacy Policy explains what the app collects, what it does not, who else receives anything, and what you can turn off. It covers the iOS and Android versions of the app and no other product or website. Where a section applies to only one platform, it says so.

1. The short version

• Your fasts, hydration, streaks and history are stored on your device. We do not have a copy.
• There is no account. We never ask for your name, your email, or any contact details inside the app.
• The app is free and is supported by advertising, so Google serves ads inside it. Section 4 explains exactly what that involves.
• We collect a small amount of anonymous usage analytics through Mixpanel so we can fix what is broken.
• A single purchase removes the advertising entirely, and when it is active the advertising software is never even started.

2. Information stored only on your device

Your fasting history, your chosen schedule, hydration check ins, streaks, coins, the bear's outfits and your notification preferences are stored on your device. None of it is transmitted to us, and if you delete the app or wipe your device it is gone. We operate no server that holds your fasting data, and there is no cloud backup or sync built into the app.

If you add a photo to a summit card, that photo is read from your device to build the card and is not uploaded to us. Whether you then share the card, and with whom, is entirely your choice.

3. Analytics

3.1 What Mixpanel receives

We use Mixpanel, a product analytics service, to understand which parts of the app are used and where they fail. Mixpanel acts as a sub processor under contract and processes this on our behalf. It receives events describing app activity, such as starting or completing a fast, opening a screen, or a purchase completing, together with the app version and standard device and app context.

3.2 The identifier we use

The first time the app runs it generates a random identifier and stores it on your device. That identifier is sent with each analytics event so that events from the same install can be grouped together. It is not your name, your email, your Apple ID, your Google account, or your advertising identifier. If you reinstall the app a new identifier is generated and earlier activity is not linked to it.

3.3 What Mixpanel does not receive

• Your name, email address, phone number, postal address, or any contact details.
• Photos you attach to a summit card.
• Your contacts, microphone, calendar, or location.
• Any payment information.

We do not use a crash reporting service. An earlier version of this policy said we collected crash reports; that was inaccurate and has been corrected.

4. Advertising

Fast & Bear It is free and is paid for by advertising. Ads are served by Google AdMob, a Google service, and appear as banners in parts of the app and as occasional full screen ads after a fast completes or when you share a card. Google acts as an independent controller for advertising, under its own privacy policy at policies.google.com/privacy.

To serve and measure those ads, Google receives standard device and network information, including your IP address, device model, operating system version, and general app context. On Android it also receives your device's advertising identifier, which is a resettable identifier your phone provides for advertising.

On iOS the app does not ask for permission to track you across other companies' apps and websites, and does not present Apple's App Tracking Transparency prompt. Because we never request it, the iOS advertising identifier is not available to the ads in this app, so the ads you see are not targeted using your activity in other apps.

Google does not receive your fasting history, your hydration entries, your streaks, your photos, or your Mixpanel identifier. Ads are not selected using the contents of your fasts.

4.1 Turning advertising off

A single in app purchase removes advertising from the app completely. When it is active the advertising software is not merely hidden, it is never started, so nothing is requested from Google at all.

You can also limit ad personalization at the device level. On Android, open Settings, then Privacy, then Ads, and either delete your advertising identifier or turn on the option to opt out of ads personalization. On iOS, Settings, then Privacy & Security, then Tracking and Apple Advertising control the equivalent.

5. Purchases

Fast & Bear It is free to download. Optional in app purchases remove advertising, unlock extras, and buy coin packs. Payment is handled entirely by Apple on the App Store or by Google on Google Play, and those companies are the data controllers of the payment details you give them. We never receive your card number, your billing address, your Apple ID, or your Google account. Your entitlement is stored on your device and restored through the store you bought it from.

6. Permissions the app asks for

The app requests only two permissions, and only when you use the feature that needs them:

• Camera and photo library. Only so you can attach a photo of a meal to a summit card. The photo stays on your device.
• Notifications. Only if you turn on reminders. You can revoke this in your device settings at any time.

The app does not request location, contacts, microphone, calendar, or health permissions, and it does not read Apple Health or Google Fit.

7. How long information is kept

Mixpanel analytics events are retained for up to twenty four months and then deleted on a rolling basis. Aggregate statistics derived from them, such as monthly active install counts, may be kept for longer for product planning. Data received by Google for advertising is retained under Google's own policy, which we do not control. Anything stored on your device stays there until you delete the app or clear its data.

8. Sharing

We share product analytics with Mixpanel, which acts as a sub processor under contract. We share the advertising data described in section 4 with Google, which acts as an independent controller. We do not share information with data brokers. We do not sell information for money. Some privacy laws, including the California Consumer Privacy Act, define "sale" and "sharing" broadly enough to cover passing an advertising identifier to an advertising network. If you are covered by one of those laws, treat the Google advertising described in section 4 as sharing for cross context behavioral advertising, and see section 4.1 for how to stop it. If we are required by law, by valid legal process, or to protect our rights or the safety of users, we may disclose information to the extent required.

9. Children

Fast & Bear It is not directed to children under thirteen, and its store listings are rated accordingly. Fasting is not appropriate for children, and the app is not designed or intended for them. We do not knowingly collect personal information from children under thirteen within the meaning of the Children's Online Privacy Protection Act or comparable laws elsewhere. If you are a parent or guardian and believe a child has provided personal information we should remove, write to us and we will act promptly.

10. Your choices

• Remove advertising. The in app purchase described in section 4.1 stops the advertising software from running at all.
• Limit ad personalization. Use the device controls described in section 4.1.
• Stop analytics. Deleting the app removes the locally stored identifier and stops all analytics. We do not currently offer an in app analytics switch. We are considering adding one and will update this page if we do.
• Notifications. Turn reminders off in your device settings.

Depending on where you live you may have rights under laws such as the General Data Protection Regulation, the United Kingdom GDPR, or the California Consumer Privacy Act, including rights of access, correction, deletion and objection. Because the only thing we hold that could relate to you is a random per install identifier with no name attached, the practical scope of those rights is limited. You can still send any privacy request to the address in section 14 and we will respond within the time your jurisdiction allows.

11. International transfers

Ensonova LLC is based in the United States. Mixpanel and Google process data in the United States and in other countries where they operate. If you use the app from outside the United States, the information described above will be transferred to and processed in those countries. Where required by law we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

12. Security

Analytics and advertising requests are sent over encrypted HTTPS connections. We use commercially reasonable safeguards to protect information against unauthorized access, alteration, disclosure and destruction. No method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

13. Not medical advice

Fast & Bear It is a timer and a game. It is not a medical device, a clinical tool, or a source of medical advice, and the milestone descriptions in the app are general education rather than guidance about your body. Fasting is not safe for everyone. If you are pregnant or breastfeeding, are under eighteen, have diabetes or a history of disordered eating, take medication that must be taken with food, or have any other medical condition, speak to a healthcare professional before fasting. Stop and seek help if you feel faint, confused or unwell.

14. Changes and contact

If our practices change we will update this page and the date at the top. Material changes will be highlighted here. For privacy questions or requests, write to Ensonova LLC at support@ensonova.com with the subject line "Fast and Bear It privacy".