Exerank

             Privacy Policy — Exerank

# Privacy Policy — Exerank

**Last updated:** February 28, 2026

**Effective for:** Exerank mobile app (iOS and Android)

---

## 1. Introduction

Exerank ("we," "our," or "us") is a productivity and performance tracking app. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Exerank app on Android (Google Play) or iOS (App Store).

**Operator:** Exerank is operated by Coşkun Tıraş, an independent developer based in Turkey.

By using Exerank, you agree to this Privacy Policy. If you do not agree, please do not use the app.

---

## 2. Data We Collect

### 2.1 Account & Authentication Data

When you sign up or sign in, we collect:

- **Email address** — used for account creation and sign-in

- **Name** — your display name (optional; can come from Google or other providers)

- **Profile image** — if you use Google Sign-In or similar, we may receive your profile photo

- **User identifier** — a unique ID (e.g. Clerk user ID) that links your account to your data

This data is processed by **Clerk** (our authentication provider). We store a subset (email, name, image URL) in our own database for app functionality.

### 2.2 Profile & Preferences

- **League nickname** — a name you choose for leaderboard display (optional; can differ from your real name)

- **Subscription plan** — whether you use Free or a paid plan

- **Notification preferences** — such as daily reminder time, “notify when passed” in rankings, etc.

### 2.3 Task & Activity Data

To provide core features (scoring, rankings, performance insights), we collect:

- **Task titles and descriptions** — what you enter when creating tasks

- **Proof text** — optional completion notes or evidence you add

- **Plan nodes, todos, categories** — structure of your tasks

- **Scores and metrics** — difficulty, impact, clarity, integrity, etc., computed by our system

- **Completion dates and times** — when tasks were done

- **Task categories** — e.g. deep work, admin, physical

This data is stored in **Convex** (our backend) and used to calculate your points and rankings.

### 2.4 League & Ranking Data

- **Points** — earned per task and aggregated (daily, weekly, monthly)

- **Ranks** — your position in the leaderboard

- **League nickname** — shown publicly in rankings (others see your nickname, not your email)

- **Rank snapshots** — historical rank and points for analytics

### 2.5 Performance Analytics

- **Aggregated metrics** — consistency, clarity, integrity, impact ratio, etc.

- **AI-generated analysis** — short interpretive text based on your metrics (e.g. “Your consistency dropped 12% this week”)

### 2.6 Technical & Device Data

- **Device and platform** — e.g. Android or iOS

- **App version** — for support and compatibility

- **Crash and error logs** — if collected by our infrastructure (e.g. Convex or Expo), to fix bugs

We do **not** sell your personal data. We do **not** use your data for advertising or profiling beyond app functionality.

---

## 3. How We Use Your Data

We use your data to:

1. **Provide the app** — create and manage your account, store tasks, compute scores, and show your progress.

2. **Power the League** — calculate rankings and show you and others (via nicknames) on leaderboards.

3. **Generate insights** — produce performance analyses and recommendations.

4. **Improve the service** — fix bugs, improve performance, and develop new features.

5. **Communicate** — send notifications (if you enable them) and important service messages.

6. **Comply with law** — when required by law or to enforce our terms.

---

## 4. Third-Party Services

We rely on the following third parties:

| Service | Purpose | Data shared | Privacy / Terms |

|--------|---------|-------------|------------------|

| **Clerk** | Authentication (sign-in, sign-up) | Email, name, profile image, user ID | [Clerk Privacy Policy](https://clerk.com/privacy) |

| **Convex** | Database and backend | All app data (tasks, users, ranks, metrics) | [Convex Privacy Policy](https://www.convex.dev/legal/privacy-policy) |

| **OpenAI** | AI scoring and analysis | Task text, proof text, aggregated metrics (no personal identifiers) | [OpenAI Privacy Policy](https://openai.com/policies/privacy-policy) |

| **Apple / Google** | In-app purchases | Transaction IDs, subscription status (we do not see payment details) | [Apple](https://www.apple.com/legal/privacy/) / [Google](https://policies.google.com/privacy) |

- **Clerk** and **Convex** store and process your personal and task data.

- **OpenAI** receives task titles, descriptions, proof text, and aggregated metrics to provide difficulty/impact estimates and performance analyses. We do not send your email, name, or user ID to OpenAI. We use the OpenAI API in a **stateless manner**; data is not used for model training under our API usage terms. For more on OpenAI's data handling, see their policies.

- **Payments:** In-app purchases and subscriptions are processed by Apple (App Store) or Google (Google Play). We use RevenueCat to manage subscription status and entitlement validation. **We do not store credit card numbers or payment details.** Payment data is governed by Apple's and Google's respective policies.

---

## 5. Data Storage & Security

- **Storage location** — data is stored in cloud infrastructure (e.g. Convex) in regions such as EU (e.g. EU-West-1). Clerk and OpenAI use their own data centers as described in their policies.

- **Security** — we use industry-standard security measures, including encryption in transit (HTTPS/TLS).

- **Authentication** — handled by Clerk with secure tokens; passwords (if used) are never stored by us.

---

## 6. Data Retention

- **Account data** — kept while your account is active.

- **Task data and metrics** — kept for as long as you use the app; deleted when you delete your account.

- **Performance snapshots** — stored to support historical analytics; deleted with account deletion.

- **Account deletion** — when you delete your account, your data is permanently removed from our systems **within 30 days**. Deletion from Clerk and other sub-processors is requested immediately and completed according to their schedules.

- **Backups** — retained for up to **30 days** for recovery purposes; backups containing deleted account data are purged within this period.

---

## 7. Your Rights

Depending on where you live, you may have rights such as:

- **Access** — request a copy of your personal data

- **Correction** — update or correct inaccurate data

- **Deletion** — request deletion of your account and associated data

- **Export** — receive your data in a portable format (where technically feasible)

- **Object or restrict** — object to certain processing or request restriction (where applicable)

- **Withdraw consent** — where processing is based on consent

### 7.1 Account Deletion

You can delete your account at any time from within the app:

1. Open **Settings**

2. Go to **Account**

3. Tap **Delete account**

Deletion removes:

- Your user profile and preferences

- All tasks and proof text

- Rank snapshots and performance data

- Clerk identity (we request removal of your Clerk account)

This is permanent and cannot be undone.

---

## 8. Children's Privacy

Exerank is not intended for users under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children. If we learn that we have collected data from a child, we will delete it. If you believe a child has provided data to us, please contact us.

---

## 9. International Transfers

Your data may be processed and stored in countries other than your own, including the United States and the European Union. We use providers that comply with applicable data protection frameworks (e.g. EU Standard Contractual Clauses or similar). By using Exerank, you consent to such transfers.

---

## 10. California and Other Jurisdictions

- **California (CCPA/CPRA):** We do not sell personal information. We may share data with service providers (Clerk, Convex, OpenAI) only as needed to operate the app. California residents have rights to know, delete, correct, and limit sale/sharing of personal information.

- **European Economic Area (GDPR):** Exerank acts as the data controller for your personal data within the meaning of the GDPR. Our legal bases for processing are:

 - **Contract performance** — account management, task storage, scoring, rankings, and core app features.

 - **Legitimate interest** — fraud prevention, security, bug fixes, and aggregated analytics to improve the service.

 - **Consent** — push notifications, daily reminders, and other optional features where we ask for your permission.

 You have rights to access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with a supervisory authority.

---

## 11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

- Updating the “Last updated” date at the top

- Posting the new policy in the app (Settings → Privacy Policy)

- Optionally, sending an in-app or email notice for significant changes

Continued use of the app after changes constitutes acceptance of the updated policy.

---

## 12. Contact Us

If you have questions or wish to exercise your rights, contact us:

- **Email:** coskunntirass@gmail.com

---

*This Privacy Policy applies to the Exerank app distributed via Google Play (Android) and the App Store (iOS).*