The short version
- Your rules, check-ins and contract stay on your phone and in your own iCloud or Google backup. We never receive them.
- Doing an arc on your own needs no account, and nothing about you is stored on our servers.
- If you join a crew, we store your first name, the email your sign-in provider gives us, and what your crew needs to see: daily counts, streaks, cheers, nudges and chat messages.
- Your crew never sees your rules, your difficulty, your misses or your contract.
- There are no ads, no advertising or analytics SDKs, and we never sell your data.
- You can export or delete your data from the app at any time.
Who we are
90North is made by Zekcs (zekcs.dev), an independent developer (“we”, “us”). We decide how your personal data is used, which makes us the controller under data protection law. Write to support@90north.app about anything in this policy, including requests to use your rights.
What stays on your phone
The app is built so that the personal part of your arc never reaches us. These live only on your phone:
- your rules, with their names, areas, times, deadlines and reminders
- every check-in and slip, with the time it was recorded
- your sick days and the outcome of each day
- your contract, including your signature
- your settings
If backup is on, your phone copies this to your own iCloud account (iPhone) or Google account (Android). Apple and Google store that backup under their own terms, and we can’t read it. Your rules and contract are never sent to our servers, even when you’re in a crew.
If you use 90North on your own
Solo arcs don’t need an account, and nothing about you is stored on our servers. Two things still leave your phone:
- Purchases. The App Store or Google Play handles the payment. We use RevenueCat to check that a purchase is valid and to restore it on a new phone. RevenueCat receives an anonymous ID created by the app, the purchase details the store provides (product, price, currency, date and whether it was refunded) and basic device details such as the app version and country. We never see your card or payment details.
- Crash reports. If the app crashes, it may send a report with the device model, operating system, app version and what the app was doing at the time. Crash reports never include your name, your rules or your messages.
If you join a crew
Crews need an account so your friends know it’s really you. When you sign in and use a crew, we store the following on our servers.
| What | Details |
|---|---|
| Account | Your first name (up to 20 characters, which you can change), your initials, the ID your sign-in provider gives us, the email address it shares, when you signed up, and the age range reported by the App Store or Google Play. If you sign in with Apple and choose Hide My Email, we only get a relay address. |
| Crew membership | Which crew you’re in, whether you’re its owner, and when you joined or left. |
| Daily summary | For each day: how many rules were due and how many you hit, when you finished, your streak and best streak, your day number, whether you were resting, and the camps you reached. Never the names of your rules. |
| Cheers and nudges | Who sent one to whom, on which day, and the one-tap reply. |
| Chat messages | The text you send to your crew and when you sent it. |
| Crew activity | Events such as joins, finishes, camps, summits and full-crew days. |
| Safety | People you block, and reports you make or that are made about you, with the reported message and the few messages before it. |
| Device | A push notification token for your phone, its platform and your time zone, so nudges wait until noon where you are. |
How we use it and why we’re allowed to
If you’re in the European Economic Area, the UK or Switzerland, the law asks us to name a legal basis for each use.
| What we do | Legal basis |
|---|---|
| Run your crew: show your crew your counts, deliver cheers, nudges and messages, and keep crew activity. | Performing our contract with you (the Terms of Use). |
| Send the notifications you turned on. | Performing our contract. You control every type in the app and in your phone’s settings. |
| Check your purchase and restore it on another device. | Performing our contract. |
| Keep crews safe: filter names and messages, review reports, remove people and ban accounts. | Our legitimate interest, and that of other users, in a safe service. |
| Prevent abuse and keep the service secure, for example with rate limits and access logs. | Our legitimate interest in protecting 90North and its users. |
| Fix crashes. | Our legitimate interest in an app that works. Crash reports contain no personal details. |
| Check the age range the store reports before turning on crews and chat. | Legal obligations under age-assurance laws, and our legitimate interest in keeping children under 13 out of crews. |
| Answer your emails. | Performing our contract, or our legitimate interest if you don’t use the app. |
| Comply with the law and respond to valid legal requests. | Legal obligation. |
We don’t use your data for advertising and we don’t build profiles about you. The word filter can stop a name or message from being saved, but a person reviews every report before anyone is removed from a crew.
What your crew sees
In the app, tap your own name on the Crew tab to see exactly this.
| Your crew sees | Your crew never sees |
|---|---|
| Your first name and initials | What your rules are, or when each one was checked |
| Your day, today’s count and when you finished | Your difficulty, misses or slips (only your streak number) |
| Your streak and the camps you reached | Your contract |
| Whether you’re resting or finished | Your email or any account detail |
A crew sees your chat messages and your crew activity from the moment they joined. Moderators can open a message only when someone reports it, together with the few messages before it, and every time they do is logged.
Who we share it with
We don’t sell your personal data and we don’t share it for advertising. We use a small number of service providers that process data on our behalf, under data processing agreements, and only to run 90North.
| Provider | What for | What they receive |
|---|---|---|
| Our hosting provider, with servers in the EU | Storing crew data and chat, running our API | The crew data listed above |
| Apple Push Notification service and Firebase Cloud Messaging (Google) | Delivering push notifications | Your device token and the notification text |
| RevenueCat, Inc. | Checking and restoring purchases | An anonymous ID, purchase details and basic device details |
| Our crash reporting provider | Crash reports | Device and app details, with no personal data |
Apple and Google also act on their own account when you sign in with them, buy through their stores or back up to iCloud or Google. Their privacy policies apply to that: Apple, Google and RevenueCat.
We may also disclose data when the law requires it, to protect someone’s safety, or if 90North moves to a company that takes it over, including one we set up to run it. In that last case this policy keeps applying to your data.
What we don’t collect
- No location, contacts, photos, camera, microphone or health data. The app doesn’t read Apple Health or Health Connect.
- No advertising identifier, and no tracking across other companies’ apps or websites. The app never shows Apple’s tracking prompt because it has nothing to ask.
- No analytics SDKs. The numbers we look at, like how many arcs were started or reached day 30, are counted on our servers from crew data and purchases, not from tracking you.
Sharing a camp, summit or recap image uses your phone’s share sheet, so the app never needs access to your photos.
How long we keep it
| Data | Where | Kept for |
|---|---|---|
| Rules, check-ins, contract | Your phone and your own iCloud or Google backup | Until you delete them |
| Account, crew membership, daily summaries, cheers and nudges | Our servers | Until you delete your account |
| Crew activity | Our servers | 180 days |
| Chat messages | Our servers, encrypted at rest | 30 days. A reported message is kept until its report is closed. |
| Reports and the moderation log | Our servers | 1 year, to handle abuse |
| Server backups | Our hosting provider | Deleted data is cleared from backups within 30 days |
| Purchase records | Apple, Google and RevenueCat | Under their policies. We delete your RevenueCat customer record when you delete your account; the purchase itself stays with the store. |
Where your data is stored
Our servers are in the European Union. Some providers, such as RevenueCat, Apple and Google, may process data in the United States or other countries. When personal data leaves the EEA, the UK or Switzerland, we rely on an adequacy decision, such as the EU-U.S. Data Privacy Framework, or on the European Commission’s Standard Contractual Clauses.
How we protect it
- Everything is encrypted in transit, and our database and backups are encrypted at rest.
- Your session is stored in the iPhone Keychain or the Android Keystore.
- Moderator access is limited by role, and every look at reported content is logged.
- Invite codes are random and lookups are rate-limited, so they can’t practically be guessed.
No system is perfectly secure. If a breach ever affects your data, we’ll tell you and the authorities as the law requires.
Your rights and choices
- Get a copy. Settings, Export your data gives you a ZIP with your rules, check-ins, contract, crew activity and the messages you sent. Other people’s messages aren’t included.
- Correct it. Change your name in Settings.
- Delete it. Crew users can use Settings, Delete account, and solo users Settings, Delete all data. You can also ask at 90north.app/delete-account without the app. Deleting the app removes the data on your phone but not your iCloud or Google backup.
- Notifications. Every type can be turned off in Settings or in your phone’s settings.
- Leave or block. You can leave a crew or block anyone at any time.
Depending on where you live, you may also have the right to access, correct or delete your data, to object to processing based on legitimate interests, to restrict processing, to data portability, and to complain to your local data protection authority. We’d like the chance to sort things out first, so please write to support@90north.app. We answer within 30 days and don’t charge for requests.
California
In the last 12 months we collected identifiers (name, email and account IDs), user content (chat messages) and app activity (daily counts) from crew users, for the purposes described above. We don’t sell or share personal information as the California Consumer Privacy Act defines those terms, and we don’t use sensitive personal information to infer anything about you. You can ask to know, correct or delete your information, and we won’t treat you differently for asking.
Children
90North is for people 13 and older. At first launch and at sign-in the app asks the App Store or Google Play for an age range, never your date of birth. If the store says you’re under 13, crews and chat stay off, the app works only on your phone, and nothing about you is stored on our servers. If a crew member’s age range later shows they’re under 13, crews and chat turn off for them and they leave the crew. Parental consent for teens is handled by Apple and Google. If you believe a child under 13 has given us personal data, write to us and we’ll delete it.
This website
90north.app doesn’t use cookies, analytics or advertising tags, and it doesn’t load anything from other companies’ servers. Our hosting provider keeps standard server logs (IP address, browser, the page requested and the time) to deliver the site and protect it from abuse. The Cookie Policy has the details.
Invite pages show the code from the link. They may ask our server for the crew’s name, size and start date, never its members’ names.
Changes to this policy
If we change this policy in a way that matters, we’ll tell you in the app before the change takes effect. The date at the top of this page shows when it last changed.
Contact
90North is made by Zekcs (zekcs.dev). Write to support@90north.app.