Privacy Policy

Daily Constitutional · Last updated: October 7, 2026 · Version 2.0

Daily Constitutional (the "App") is published by Heavin Astern LLC ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the App on iPhone and Android, and to the pages at dailyconstitutional.heavinastern.com.

1. Information we collect

Information you give us

• Account information: your email address and password (we never see your password in readable form), or an Apple or Google sign-in identifier. If you use "Hide My Email" with Apple, we receive Apple's private relay address instead of your real email.
• Optional first name, used for greetings.
• Your settings: reminder time, lesson mix, text size, theme, notification choices.
• Notes, highlights and bookmarks you create (Premium features).
• Messages you send us, including reports of inaccuracies in a lesson and emails to support@heavinastern.com.

Information created as you use the App

• Learning activity: lessons started and completed, quiz answers and scores, mastery and review schedules, streaks, badges, and the time zone of your device (used to decide when your day starts and ends).
• Subscription status: whether you have Premium, which plan, and its dates. Payments are handled by Apple or Google; we never receive your card or payment details.
• Device and app information: app version, operating system, device model, and a push notification token if you turn on reminders.
• Product analytics and crash information, as described in section 4.

Information we do not collect We do not collect your precise location, contacts, photos, health information, or advertising identifiers. We do not use advertising or third-party tracking SDKs, and the App does not ask for App Tracking Transparency permission.

2. How we use your information

• To provide the App: create and secure your account, deliver lessons and quizzes, schedule reviews, calculate streaks and badges, and sync your notes and bookmarks.
• To manage Premium access and restore purchases.
• To send reminders and other notifications you have turned on. You can change these in Settings or in your device settings.
• To improve the App, fix problems, and keep it secure and free of abuse.
• To answer your messages and requests.
• To meet legal obligations.

3. Who we share information with

We do not sell your personal information and we do not share it for advertising.

We use these service providers, who process information only to help us run the App:

• Supabase: account sign-in, database and storage.
• RevenueCat: subscription and entitlement management.
• PostHog: product analytics and session replay (see section 4).
• Google (Firebase Crashlytics): crash reports (see section 4).
• Apple and Google: sign-in (if you choose it), purchases, and push notification delivery.
• Expo: app updates and build services.
• Our email provider: verification, password reset, data export and support emails.

We may also disclose information when required by law, to protect the rights, safety or security of users or the App, or as part of a merger, acquisition or sale of assets, in which case we will tell you if your information becomes subject to a different privacy policy.

4. Analytics and session replay

We use PostHog to understand how the App is used (for example which screens people reach and where they get stuck). Session replay records on-screen activity to help us fix problems; it masks all text fields, including email, password and your notes, and anonymizes IP addresses.

• If you are in the European Economic Area, the United Kingdom or Switzerland, analytics is off until you say yes in a prompt the first time you open the App. You can change your choice at any time in Settings > Privacy.
• Everywhere else, analytics is on by default and you can turn it off in Settings > Privacy.

Turning analytics off does not affect the features of the App.

Crash reports. We use Firebase Crashlytics, a service from Google, to find and fix crashes. When the App crashes, a report is sent that includes the error details, your device model and operating system version, the App version, the time of the crash, and your account ID so we can help you if you contact support. Crash reports are not part of the analytics choice above, because we need them to keep the App working. Google acts as our service provider for this data, keeps crash reports for 90 days, and does not use them to show you ads. We do not use crash reports to track you across other companies' apps or websites.

5. Notifications

Reminders and other notifications are sent from our servers as push notifications. You choose the reminder time, and you can turn notifications off in the App or in your device settings. We limit how many we send.

6. How long we keep information

• Account, learning and notes data: until you delete your account.
• When you delete your account, it is deactivated immediately and you are signed out. Your personal data is permanently deleted within 30 days, except where we must keep something for legal or tax reasons. Copies in our backups are overwritten within 90 days after deletion.
• Crash reports: kept by Google for 90 days, then removed.
• Analytics data: kept by PostHog according to the retention settings we configure; it is not linked to a deleted account after the purge.
• Support emails: kept as long as needed to help you and meet legal requirements.

7. Your choices and rights

In the App (Settings) you can:

• Change your email, password, reminder time and other preferences.
• Request an export of your data (progress and notes). We email a download link to your verified email address.
• Delete your account. Deleting your account does not cancel an App Store or Google Play subscription; please cancel that first in your store account. If you cannot open the App, you can also request deletion at https://dailyconstitutional.heavinastern.com/delete.
• Turn analytics on or off.

Depending on where you live, you may also have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to data portability, and to withdraw consent. You can contact us at support@heavinastern.com to use these rights. We will respond within the time required by law and may need to verify who you are. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

8. Children

The App is not directed to children under 13 and you must be at least 13 (or the age of digital consent where you live) to create an account. If we learn we have collected personal information from a child under 13, we will delete it. If you believe a child has given us information, contact support@heavinastern.com.

9. Security

We use encryption in transit, access controls, row-level security on user data, and secure authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for transfers from the EEA, UK or Switzerland.

11. Changes to this policy

If we make material changes we will post the new policy here, update the date above, and notify you in the App or by email. Your continued use of the App after a change means you accept it.

12. Contact us

Questions or requests: support@heavinastern.com