Privacy

Last updated 31 August 2026

Era is a daily routine app. Most of what you put into it never leaves your phone, and the small amount that does exists only so the friends in your circle can see that you showed up. This page explains exactly which is which.

What stays on your phone

These are stored in Era's local database and file storage on your device. They are not uploaded, not backed up to us, and the code that talks to our server has no field capable of carrying them.

• Your daily photos.
• Your journal entries and your letter to your future self.
• The answers you gave during onboarding, and the routine built from them.
• Your full day-by-day history, including which items you ticked and when.
• The pages of your book. A page you choose to share leaves only through the iOS share sheet, as an image you send yourself; Era never uploads it.

If you delete the app, this data is deleted with it. We cannot recover it, because we never had it.

Apple Health

Connecting Apple Health is optional. If you do, Era reads steps, workouts, sleep and mindful minutes on your phone so the matching routine items can tick themselves. Those readings stay on your phone: they are never sent to our server, never shared with anyone, and never used for advertising. When a Health-filled habit is on your shared checklist, your circle sees the item's title and that it is done, the same as any habit you tick by hand, and never the underlying numbers. Era never writes to Apple Health.

Cycle and energy

The cycle and energy features are optional and live entirely on your phone, in a file inside Era's own storage. It can hold the mode you chose, the period start dates you logged, estimated cycle and bleed lengths, your regularity answer, a pill-rhythm choice, daily energy levels, soft-day choices and period-preparation state. None of it is uploaded, the sync layer has no field for it, and it does not read from or write to Apple Health. You can erase it at any time with the cycle feature's Delete everything action. Its predictions are estimates for personal planning, not medical advice.

What reaches our server

Era uses Supabase (Postgres, authentication and storage) as its backend. The following is stored there:

• Your account. When you sign in with Apple, we receive the identifier Apple gives us and, on the first sign-in only, the name you approve sharing. Era does not request your email address, and we never see your Apple password.
• Your profile. A display name you choose and your time zone, so days line up correctly across a circle.
• One row per day. The date, whether you completed it, how many items you ticked out of how many, your current streak number, and a shared checklist of up to twelve items: each item's title, whether it is done, and the time it was ticked. This is what lets your circle see the shape of your day, so write item titles knowing your circle reads them.
• Circle membership. Which circles you belong to and the invite code that joined you.
• Nudges. A record of nudges sent, which also enforces the rate limits that keep them from becoming spam.
• Photos you post to Discover, and only those. Posting is a deliberate action with a confirmation; nothing is posted automatically.

Who can see it

• Your check-ins are readable only by people who share a circle with you. This is enforced by row-level security rules in the database, not merely by app code.
• Discover posts are visible to other Era members browsing Discover. You can delete one at any time, which removes both the record and the stored image.
• You can block another member, which hides everything they have posted from you.
• Nobody outside Era sees any of it. We do not sell data, and we do not share it with advertisers or data brokers.

Tracking, or rather the absence of it

Era does not use the advertising identifier (IDFA) and does not show an App Tracking Transparency prompt, because there is nothing to ask you about. We use the strict, identifier-free build of AppsFlyer so we can tell which marketing campaign an install came from; it cannot follow you across other apps or websites. We do not use third-party advertising SDKs and we do not build advertising profiles.

Payments

Subscriptions are purchased and billed through Apple. Apple tells us whether a subscription is active, via RevenueCat, which manages entitlements on our behalf. We never receive or store your card details.

Notifications

Era sends at most three notifications a day: a morning line, a conditional midday nudge and an evening close, plus a Sunday recap. Circle events can also push, if you opt in. All of it can be turned off in Settings, in the app or in iOS.

Deleting your data

Settings contains a Delete account action. It removes your profile, your check-ins, your circle memberships, your device tokens and every Discover post you made, including the stored images, and asks Apple to disconnect Sign in with Apple for Era. Anything held only on your phone goes when you delete the app. Deletion is immediate and cannot be undone.

Age

Era is for people aged 13 and over. We do not knowingly collect data from anyone younger, and we remove accounts we learn belong to someone under 13.

Changes

If this policy changes in a way that affects what we collect or who can see it, we will say so in the app before the change takes effect.

Who is responsible

Era is published by RETRONAX PTE. LTD., a company registered in Singapore, which is responsible for this policy.

Contact

Questions, requests or a copy of your data: main@retronax.com.