Privacy Policy

Introduction

This Privacy Policy applies to the TwentyFour (24 HOURS) mobile application (available on Android via package twenty.hours.app and iOS) and related cloud synchronization services operated by Rajnandani Haldiya.

By using TwentyFour, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect only the essential information needed to synchronize your 24-hour daily timeline and preserve your personal focus preferences:

• Google Account Information (When Signed In): If you choose to sign in with Google, we receive your Google User Identifier (UID), primary email address, display name, and avatar URL provided by Google Identity Services. We do not have access to your Google password or private Google account data.
• Productivity Ledger & Tasks: Task titles, scheduled circadian hours, energy check-in states (High, Balanced, Low, Exhausted), 2-minute micro-start tiny steps, and daily review reflections you record in the application.
• Circadian & Wellness Preferences: Configured day start/end timings (e.g., 08:00–22:00), preferred planning styles (Micro-Steps, Time Blocks, Energy First, Flexible), and gentle habit reminder settings.
• Local Guest Data: If you use the app in Guest Mode, all tasks, settings, and reflection notes remain stored 100% locally in your device storage.

How We Use Your Information

Your information is used strictly to provide and improve the TwentyFour experience:

• To authenticate your identity across your devices via Google Sign-In.
• To synchronize your daily 24-hour ledger, open tasks, and reflection archives securely across devices via Google Cloud Firestore.
• To adapt recommendations based on your selected energy state without transmitting biometric data.
• To prevent data loss and allow zero-guilt daily rollover of unfinished tasks.

Third-Party Services

TwentyFour utilizes trusted, industry-standard infrastructure providers to deliver cloud synchronization:

• Google Identity Services & Firebase Authentication: Used to facilitate seamless, secure Google OAuth authentication.
• Google Cloud Firestore: Used as our encrypted cloud database for authenticated users. Data is encrypted both in transit (TLS 1.3) and at rest (AES-256).

We do not use third-party analytics trackers, behavioral ad networks, or data brokers.

Your Rights & Data Deletion

You maintain complete ownership of your data at all times:

• Access & Export: You can view all active and archived ledger entries directly within the application.
• One-Tap Account & Data Deletion: You can permanently delete your TwentyFour account and all associated cloud tasks/reviews at any time directly in Profile & Settings → Delete Account. This immediately purges your Firestore records.
• Revoke Google Access: You can revoke TwentyFour's access anytime in your Google Account Security Permissions.

Data Security

We implement robust administrative and technical safeguards to protect your personal information. API keys and OAuth secrets are strictly managed with restricted client IDs and SHA-1 certificate fingerprints. However, no electronic transmission over the internet is 100% immune, and we urge you to maintain secure credentials.