# CraveMastery Privacy Policy
**Effective Date:** May 14, 2026
**Last Updated:** May 14, 2026
---
## Overview
CraveMastery (“CraveMastery,” “the App,” “we,” “us,” or “our”) is operated by Sigurd Stubsjoen / Sigurd Stubsjøen, Norway.
This Privacy Policy explains how CraveMastery collects, stores, uses, and protects information when you use the App, including account creation, onboarding, WHY reflections, image features, subscription access, and optional AI-assisted features.
CraveMastery is a self-development, mindfulness, and craving-regulation app. It is not a medical device and does not replace medical care, psychological treatment, addiction treatment, emergency support, or advice from a qualified healthcare professional.
**Contact / Support:** sigurd.stubsjoen@gmail.com
**Terms of Use / EULA:** https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
---
## Important Health and Safety Notice
CraveMastery is designed to support self-reflection, craving awareness, mindfulness, and behavioral self-regulation.
CraveMastery does not diagnose, treat, cure, or prevent any disease, disorder, addiction, or medical condition. The App is not intended for emergency situations or for people who need immediate medical, psychological, or crisis support.
If you are experiencing severe distress, suicidal thoughts, risk of harm, severe addiction, withdrawal symptoms, or a medical emergency, contact local emergency services or a qualified healthcare professional immediately.
Use of the App is voluntary and should not replace professional help when professional help is needed.
---
## Age Requirement
CraveMastery is intended for users aged **18 and older**.
We do not knowingly collect personal data from individuals under 18. If you believe that a person under 18 has used the App and provided personal data, please contact us at sigurd.stubsjoen@gmail.com so we can take appropriate action.
---
## What Data We Collect and Store
CraveMastery stores some data locally on your device and some account-linked data securely through cloud services. This is necessary for account access, onboarding, WHY reflections, uploaded WHY images, premium access, and app functionality across sessions and app updates.
### Account Information
When you create or use an account, we may process:
- email address
- authentication/account information
- Supabase user ID
- account creation and login-related metadata
- session/authentication status
This data is used to identify your account, keep you signed in, and connect your app data to the correct user account.
### Onboarding and WHY Data
When you complete onboarding or create your WHY, we may store:
- answers you provide during onboarding
- WHY statements or motivational text
- selected reflections or app setup information
- data linked to your user account
This information may be stored in Supabase so the App can display your WHY and preserve your onboarding state.
### WHY Image / Uploaded Image Data
If you choose to upload or select a WHY image, the App may store:
- the uploaded image itself, or
- a storage URL/path that points to the image
This image is used to display your motivational WHY image inside the App.
We do not require you to upload a personal image. Image upload is optional.
### App Data Linked to Your Account
Depending on which features you use, CraveMastery may store app data linked to your user account, such as:
- onboarding status
- WHY-related data
- craving-related entries or sessions
- app state needed for functionality
- account-linked settings or feature access information
The exact data stored depends on which parts of the App you use.
### Subscription and Purchase Data
CraveMastery may use RevenueCat and Apple App Store services to manage premium access.
We may process:
- subscription status
- purchase entitlement data
- product access status
- renewal/cancellation status as provided by Apple/RevenueCat
- anonymous or account-linked purchase identifiers needed to unlock premium features
We do not receive your full payment card details. Payments are handled by Apple and/or the App Store payment system.
---
## Third-Party Services We Use
CraveMastery uses selected third-party services to operate the App.
### Supabase
We use Supabase for authentication, account management, cloud storage, and account-linked app data.
Supabase may process:
- email address
- authentication/account data
- user ID
- onboarding / WHY data
- uploaded WHY image or image URL/path
- app data linked to your account
Supabase helps us securely manage user accounts and store app data required for the App to function.
### RevenueCat and Apple
We use RevenueCat and Apple App Store services to manage subscriptions and premium access.
These services may process:
- subscription and purchase entitlement data
- purchase status
- renewal and cancellation status
- information needed to unlock premium features
Apple handles App Store payments according to Apple’s own terms and privacy practices.
### OpenAI
CraveMastery may include an optional AI-powered WHY generation or suggestion feature.
If you choose to use this feature, the App may send user-entered text to OpenAI, such as:
- answers you typed into the WHY questionnaire
- context needed to generate a WHY suggestion
We do not intentionally send your uploaded photos to OpenAI for this feature.
The AI feature is optional. You can use the App without using AI-generated suggestions.
OpenAI processes the submitted text according to its own privacy policy and service terms.
### Kajabi
We may use Kajabi for education, support, free resources, onboarding resources, or communication outside the App.
If Kajabi contact sync is active, Kajabi may process:
- email/contact information
- tags such as app user, free resources, onboarding, or support-related tags
- information needed to provide education, support, or related resources
Kajabi is not the identity authority for the App. Supabase is used for app authentication, and RevenueCat/Apple are used for subscription entitlement status.
---
## Permissions We May Request
CraveMastery may request device permissions only when needed for specific features.
### Camera
Used only when you choose to take a photo for a craving-related feature or motivational image feature.
### Photo Library
Used only when you choose to select an image from your device.
You can deny these permissions and still use other parts of the App, although image-related features may not work without them.
---
## How We Use Your Data
We use your data to:
- create and manage your account
- keep you signed in
- save and display onboarding information
- save and display your WHY statement
- save and display your WHY image
- provide craving-regulation and reflection tools
- manage premium access and subscriptions
- provide optional AI-generated WHY suggestions
- provide support and respond to user inquiries
- maintain app security and reliability
- comply with legal obligations where applicable
We do not sell your personal data.
We do not use your personal data for third-party advertising.
---
## Local Data on Your Device
Some data may also be stored locally on your device to make the App work smoothly.
This may include:
- app settings
- cached onboarding or WHY data
- local session information
- local app state
- locally stored reflections or feature data, depending on the App version
If you delete the App from your device, local device data may be removed from that device. However, deleting the App alone may not delete cloud account data stored in Supabase or subscription records handled by Apple/RevenueCat.
To delete account-linked cloud data, use the in-app account deletion feature described below.
---
## Account Deletion
CraveMastery allows users to initiate account deletion from inside the App.
You can delete your account from the App’s settings/system settings area by selecting:
**delete this account**
When you delete your account:
- your CraveMastery account will be deleted
- account-linked onboarding data will be deleted
- account-linked WHY data will be deleted
- account-linked app data will be deleted where technically and legally possible
- local app data will be cleared
- you will be signed out of the App
Account deletion is permanent and cannot be undone.
Some data may remain where required for legal, security, fraud prevention, accounting, payment, or App Store compliance reasons. Subscription and purchase records may also remain with Apple and/or RevenueCat according to their own legal and operational requirements.
Deleting your CraveMastery account does not automatically cancel an active Apple App Store subscription. To cancel a subscription, you must manage the subscription through your Apple account / App Store subscription settings.
---
## Subscription Cancellation
If you have an active subscription, you can manage or cancel it through your Apple App Store account settings.
Deleting the App or deleting your CraveMastery account does not necessarily cancel your Apple subscription. Apple controls subscription billing and cancellation through the App Store.
---
## Data Retention
We retain account-linked data for as long as your account is active or as long as needed to provide the App’s features.
When you delete your account, we delete account-linked app data where technically and legally possible.
We may retain limited information if required for:
- legal compliance
- security
- fraud prevention
- accounting or tax obligations
- resolving disputes
- App Store or subscription-related obligations
---
## Data Security
We use reasonable technical and organizational measures to protect your data.
These may include:
- secure authentication through Supabase
- encrypted network communication where supported
- server-side handling of sensitive account deletion operations
- limited access to service credentials
- account-linked data storage in cloud services designed for secure app infrastructure
No digital service can guarantee absolute security. You are responsible for keeping your device, email account, and login access secure.
We recommend using:
- a device passcode
- biometric lock where available
- up-to-date operating system software
- secure access to your email account
---
## International Data Processing
CraveMastery is operated from Norway, but some service providers may process data in other countries.
Third-party services such as Supabase, RevenueCat, Apple, OpenAI, and Kajabi may process data according to their own infrastructure, subprocessors, and international transfer mechanisms.
By using CraveMastery, you understand that your data may be processed outside your country of residence where necessary to provide the App.
---
## GDPR and European User Rights
If you are located in the EU/EEA, UK, or another jurisdiction with similar privacy rights, you may have rights under applicable data protection law.
These may include:
### Right of Access
You can request information about personal data we process about you.
### Right to Correction
You can ask us to correct inaccurate or incomplete personal data.
### Right to Deletion
You can delete your account inside the App. You may also contact us if you have questions about deletion.
### Right to Data Portability
You may request a copy of certain data in a portable format where technically feasible and legally required.
### Right to Object or Restrict Processing
You may object to or request restriction of certain processing where applicable.
### Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent. For example, optional AI features and optional image permissions do not have to be used.
### Right to Complain
You may have the right to complain to a data protection authority in your country.
**Data Controller:**
Sigurd Stubsjoen / Sigurd Stubsjøen, Norway
Email: sigurd.stubsjoen@gmail.com
---
## AI Feature and User Control
The AI WHY generation feature, if available in your version of the App, is optional.
You control whether you use it.
If you do not want your typed WHY questionnaire answers sent to OpenAI for generation of suggestions, do not use the AI generation feature. You can write your WHY manually instead.
---
## What We Do Not Do
CraveMastery does not:
- sell your personal data
- use third-party advertising networks
- require location access
- access your contacts
- require camera or photo access unless you choose image-related features
- diagnose or treat medical conditions
- replace professional treatment or emergency care
---
## Support and Contact
If you have questions, experience technical issues, need help using CraveMastery, or have privacy-related requests, you can contact:
**Sigurd Stubsjoen / Sigurd Stubsjøen**
**Email:** sigurd.stubsjoen@gmail.com
**Location:** Norway
We aim to respond to support inquiries within 48 hours when possible.
You can contact us about:
- technical issues or bugs
- account deletion questions
- privacy questions
- subscription or billing questions
- feedback or suggestions
- general questions about how the App works
For billing and subscription cancellation, you may also need to use Apple’s App Store subscription settings.
---
## Changes to This Privacy Policy
We may update this Privacy Policy as CraveMastery evolves.
When we update this policy:
- the “Last Updated” date will change
- significant changes may be announced in the App or on our website
- continued use of the App after an update means you accept the updated policy, where permitted by law
If a future feature changes how data is collected or processed, this Privacy Policy will be updated accordingly.
---
## Summary
CraveMastery uses account-based cloud storage and selected third-party services to make the App work.
In summary:
- Supabase is used for authentication, user ID, onboarding/WHY data, and uploaded WHY image storage.
- RevenueCat and Apple are used for subscription and premium access.
- OpenAI may be used only if you choose the optional AI WHY generation feature.
- Kajabi may be used for education, support, resources, or contact tagging if active.
- You can delete your account inside the App.
- Account-linked data will be deleted where technically and legally possible.
- Local app data will be cleared and you will be signed out after account deletion.
- CraveMastery is not a medical device and does not replace professional treatment.
---
**Last Updated:** May 14, 2026
**Version:** App Store Submission Privacy Policy
