Succeszia Privacy Policy

Welcome to Succeszia, an Android mobile application developed to empower individuals to reclaim focus, build sustainable daily habits, manage complex personal goals, capture notes, schedule exact alarms, and curb compulsive social media scrolling through intelligent Distraction Control.

This Privacy Policy applies to the Succeszia Android application (package identifier: com.althinkbigger.succeszia) and this official website. It describes how Succeszia handles personal data, explains why specific device capabilities and permissions are requested, and outlines your rights and controls.

Succeszia minimizes data collection and restricts its operations to information strictly necessary to provide productivity, alarm, accountability, and distraction-blocking features. The information handled by the application falls into the following specific categories:

A. Account and Authentication Information

• Google Sign-In Credentials: When you connect your account using Google Sign-In, Succeszia receives your verified Google account email address, display name, and an authentication ID token via Google Play Services and Firebase Authentication.
• Anonymous Authentication Token: If Google Sign-In is not yet completed, the app utilizes Firebase Anonymous Authentication to assign a temporary pseudonymous token so that local device requests can securely communicate with cloud services without requiring immediate email identification.
• No Passwords Collected: Succeszia never requests, accesses, or stores your Google account password or financial credentials.

B. User-Created Productivity Data (Stored Locally)

All content you actively create within the application is stored in your private local on-device database:

• Notes: Titles, rich text formatting, categories, assigned color codes, pin and favorite statuses, and note type classifications (Simple Note or Document Note).
• Tasks: Task titles, descriptions, categories, priority levels (Low, Medium, High, Critical), scheduled due dates, progress percentages (0–100%), completion status, and alarm audio preferences.
• Habits & Records: Habit names, categories (Morning, Afternoon, Evening, Night), tracking frequencies, target day goals, color tags, and daily completion logs.
• Goals & Milestones: Goal titles, descriptions, target deadlines, categories (Short-Term, Mid-Term, Long-Term), progress indicators, and structured subtasks.
• Thoughts & Reflections: Personal motivational reflections and daily thoughts recorded in the app.
• Calendar Events: Event titles, descriptions, categories, start/end timestamps, date markers, and reminder alarms.
• Smart Alarms: Custom alarm labels, scheduled times, repeat rules (Once, Everyday, Custom Weekdays), and trigger logs.

C. Distraction Control Configuration Data

To enforce your personalized focus environment, Succeszia processes your local configuration preferences:

• Enabled filtering toggles for supported platforms (YouTube Shorts, Instagram Reels, Facebook Reels, Threads, X / Twitter, and WhatsApp Status).
• Custom motivational intervention message (e.g., "Stay focused! Your goals are more important than endless scrolling.").
• Visual blur intensity settings.
• "Free Hours" scheduled time windows (start and end times where distraction filtering is paused).
• Temporary unlock or pause duration timestamps.

D. Accountability Relationship and Access Request Data

When you participate in the Accountability Partner feature, the following data is transmitted to Cloud Firestore:

• Student email address and partner email address.
• Accountability relationship status (Pending, Active, Declined) and unique relationship invitation codes.
• Access Requests submitted by students: Target application name (e.g., Instagram), requested access duration (in minutes), and an optional student request message (limited to 100 characters).
• Single-use 6-digit authorization codes generated by partners to temporarily disable protection or remove a relationship, associated with a 15-minute expiration timestamp.

E. Information We NEVER Collect

Succeszia uses collected and processed data exclusively for the functional purposes described below:

Succeszia adheres to a local-first architectural model. The primary repository of your personal productivity data is the physical storage of your Android smartphone:

• Room / SQLite Database (succeszia_db): All notes, task lists, habit logs, goal roadmaps, thoughts, calendar events, and alarm profiles are recorded in an encrypted/sandboxed SQLite database located within Succeszia's private internal storage directory (context.getDatabasePath("succeszia_db")). Android's operating system security sandbox strictly forbids other installed applications from reading this database.
• Android SharedPreferences: Non-sensitive application configuration flags (application theme, Distraction Control toggles, Free Hours schedules) are stored in private XML preference files (distraction_control_prefs and settings_prefs).
• Internal Cache Directory: When you choose to export a note as a document or prepare a cloud backup summary, temporary files are written to context.cacheDir and deleted immediately after use.

Succeszia incorporates select Google Firebase SDKs for authentication and lightweight real-time data exchange. To ensure complete transparency, we distinguish precisely how each Firebase product is used:

1. Firebase Authentication (In Use)

Used to authenticate your identity securely via Google Sign-In OAuth credentials. If Google Sign-In has not been completed, an anonymous authentication token is provisioned so that the client can securely communicate with Cloud Firestore without revealing unauthenticated endpoints.

2. Cloud Firestore (In Use for Accountability & Settings)

Cloud Firestore is a cloud database service provided by Google. In Succeszia, Cloud Firestore is utilized strictly for the Accountability Partner feature and remote Distraction Control synchronization. The specific collections are:

• accountability_relationships: Stores connection records between students and their accountability partners.
• accountability_invitation_codes: Holds single-use invitation codes generated during pairing.
• accountability_codes: Contains 6-digit authorization codes generated by partners with 15-minute expiry timestamps.
• access_requests: Stores pending or resolved student requests to unlock an app for a specific duration.
• distraction_settings: Syncs Distraction Control toggles under the user's account ID so that designated accountability partners can view active protections.

3. Firebase Storage (NOT Used for User Data)

Although the Firebase Storage client library is declared in the project dependency tree (via Hilt dependency injection), Succeszia does NOT upload, store, or host any user files, images, notes, or media in Firebase Storage. All document storage and backups occur solely on your device and in your personal Google Drive account.

4. Firebase Realtime Database (NOT Used)

Succeszia does not utilize Firebase Realtime Database. No databases or endpoints exist under this product.

5. Firebase Analytics (Aggregated Diagnostics Only)

The Firebase Analytics library is integrated through Google Play Services to provide basic, non-personally identifiable diagnostic health metrics (such as application crashes and aggregate session statistics). Succeszia implements no custom analytics event tracking and does not profile individual user behaviors, search queries, or note contents.

Succeszia offers Google Sign-In through official Google Play Services APIs. When you initiate Google Sign-In:

• You authenticate directly against Google's secure OAuth 2.0 servers.
• Google returns a cryptographically signed identity token (ID token), your email address, and your public profile name.
• Succeszia passes this token to Firebase Authentication to establish a secure user session.
• Your account email serves as your unique identifier for Google Drive backup file naming and accountability pairing.

Google handles your authentication credentials according to the Google Privacy Policy.

Succeszia includes integrated cloud backup functionality powered by the official Google Drive API (GoogleDriveManager). We want to be completely explicit about how this third-party integration operates:

A. Google OAuth Scopes Requested

When you enable Google Drive integration, Succeszia requests two specific, limited OAuth scopes:

• https://www.googleapis.com/auth/drive.appdata (DriveScopes.DRIVE_APPDATA): Grants access strictly to Succeszia's hidden Application Data folder in your Google Drive, preventing other applications from tampering with the database.
• https://www.googleapis.com/auth/drive.file (DriveScopes.DRIVE_FILE): Allows Succeszia to create and manage a visible backup folder within your personal Google Drive. Succeszia cannot read, modify, or delete any other files in your Google Drive.

B. What Data is Uploaded to Google Drive

When synchronization executes, two files are uploaded:

1. The Complete Local Database (succeszia_{sanitized_email}.db): A complete copy of your local SQLite database file, containing your notes, tasks, habits, goals, events, and alarms. This file is saved to both your hidden App Data folder and your visible Succeszia Backups folder.
2. Human-Readable Summary (succeszia_summary_{sanitized_email}.json): A formatted JSON summary file uploaded to your visible Succeszia Backups folder. This summary lists your email, last synced timestamp, total counts, task titles/categories/completion status, note titles/categories (note body content is omitted from this summary), habit names/categories, and goal titles/progress.

C. When Backups Occur

• Live Auto-Sync: A non-blocking auto-sync is triggered whenever you create, edit, toggle, or delete a task, habit, goal, note, or event. Changes are debounced by 300 milliseconds to batch rapid updates efficiently.
• Periodic In-App Sync: An active background coroutine checks every 1 minute for pending changes while the application is in use.
• WorkManager Scheduled Backup: An automated background worker (BackupWorker) is scheduled every 4 hours via Android WorkManager to ensure your remote backup remains current even during periods of light usage.
• Manual Backup: You can trigger an immediate manual upload at any time from the in-app Settings screen.

D. Restore and Data Download

From the Settings screen, you can tap "Download Cloud Backup" (syncFromDrive()). This retrieves the latest .db file from Google Drive and replaces your local database, allowing seamless data recovery when moving to a new phone.

E. User Control & Deletion

Because backups are stored in your personal Google Drive, you retain absolute ownership. You can view, download, or delete the Succeszia Backups folder directly from drive.google.com at any time, or disconnect Succeszia via Google Account Security Settings > Third-party apps with account access.

Succeszia offers an optional Accountability Partner system to help users stay committed to their focus commitments through mutual support.

A. How the Feature Operates

A user ("Student") can invite a trusted mentor, friend, or family member ("Accountability Partner") by manually typing their email address in the application. An invitation record is generated in Cloud Firestore with status PENDING.

B. Information Shared with an Accountability Partner

When an accountability relationship is active, your partner can access only the following data:

• Your verified account email address and relationship connection status.
• Your Distraction Control configuration settings (e.g., which platforms you have blocked and your Free Hours schedule).
• Access Requests: If you attempt to access a blocked app during restricted hours, you can send an Access Request containing the requested application name (e.g., Instagram), the requested duration (e.g., 20 minutes), and an optional short message (up to 100 characters).
• Authorization Codes: 6-digit numeric codes generated by your partner to authorize temporary unlocks or to dissolve the partnership. Codes expire automatically after 15 minutes.

C. Terminating an Accountability Relationship

Either party can end an accountability partnership. To prevent impulsive overrides, removing a partner requires inputting a 6-digit removal authorization code generated by the partner. When confirmed, the relationship document in Cloud Firestore is immediately deleted.

1. Why is the AccessibilityService Permission Requested?

Distraction Control is designed to help users curb compulsive scrolling by intercepting addictive, algorithmic short-form video feeds (such as YouTube Shorts and Instagram Reels) while permitting productive use of the underlying applications (such as watching long-form educational videos or messaging family). The Android operating system does not provide standard application lifecycle APIs capable of distinguishing specific internal screens or video player fragments within third-party apps. Android's AccessibilityService framework is the sole official API capable of detecting when these specific distracting UI views are displayed.

2. What Information Is Accessed?

When enabled by the user in Android Settings > Accessibility, DistractionControlService listens to window state and window content accessibility events (typeWindowStateChanged, typeWindowContentChanged, typeViewScrolled, typeViewClicked, typeViewFocused). Under the declared configuration canRetrieveWindowContent="true", the service inspects:

• Foreground Application Package Name: Determines if the active window belongs to a supported social platform (com.instagram.android, com.facebook.katana, com.instagram.barcelona, com.twitter.android, com.google.android.youtube, or com.whatsapp).
• UI View Hierarchy Identifiers: In applications like YouTube and WhatsApp, the service reads view resource IDs (e.g., shorts_video_player, reel_player), UI class names (e.g., reelwatch), and accessibility labels (e.g., "shorts", "remix") to calculate whether a short-form video or status reel is actively on screen.

3. Strict Ephemeral, In-Memory Local Processing

4. Gestures and Global Actions Used

Under the declared capability canPerformGestures="true":

• Video Pause Gesture: When a distracting short-form video is positively identified, the service dispatches a single tap gesture (dispatchGesture) at the center coordinates of the screen solely to pause the playing video.
• Return to Home Screen: When the user taps the motivational overlay intervention, the service invokes the standard system action performGlobalAction(GLOBAL_ACTION_HOME) to return the device to the launcher home screen.

5. User Control and Revocation

Distraction Control is strictly opt-in. The user can disable the feature within Succeszia's settings or completely revoke the permission at any time via Android Settings > Accessibility > Succeszia Distraction Control > Turn Off. When disabled, the service stops immediately.

Succeszia declares only permissions strictly required to execute its stated productivity and focus functions. Below is an exhaustive list of every sensitive permission declared in AndroidManifest.xml and why it is necessary:

Succeszia features a built-in document exporter (NoteExporter) allowing you to export individual notes in multiple open formats: PDF, DOCX, HTML, Markdown (.md), and plain text (.txt).

• Sandboxed Generation: Exported documents are generated on-demand inside your application's private cache directory (context.cacheDir/exported_notes).
• Android FileProvider: To share a document with another app (such as email, messaging, or cloud storage), Succeszia uses an unexported Android FileProvider (com.althinkbigger.succeszia.fileprovider) with temporary URI read permissions (grantUriPermissions="true").
• User-Initiated: File sharing occurs exclusively through the standard Android system share sheet when you explicitly tap the "Share" or "Export" button. Succeszia never shares or broadcasts notes autonomously.

We do not sell, rent, monetize, or trade your personal data. Personal information is only disclosed under the specific, transparent circumstances detailed below:

• User-Directed Sharing (Accountability Partner): If you activate the Accountability Partner feature, your partner can view your email, Distraction Control settings, and specific app unlock requests. No notes, tasks, or personal diary entries are ever shared.
• User-Directed Document Sharing: When you export or share a note via the Android share sheet, your file is transferred only to the specific third-party application you select.
• Service Providers & Cloud Infrastructure:
  • Google LLC (Firebase & Google Drive): Provides authentication, cloud database infrastructure for accountability, and user-controlled Drive backups under strict data protection terms.
  • ZenQuotes API: Receives anonymous GET requests for public inspirational quotes. No user identifiers or telemetry data are transmitted.
• Legal Requirements: We may disclose information if required to do so by applicable law, regulation, valid court subpoena, or enforceable governmental request.

Succeszia adheres to functional, principle-based retention practices rather than arbitrary timelines:

• On-Device Local Data: All notes, tasks, habits, goals, events, alarms, and settings remain stored on your physical device until you manually delete them within the app, clear the application data in Android Settings, or uninstall the application.
• Google Drive Cloud Backups: Backup files (.db and summary .json) remain in your personal Google Drive until overwritten by a newer backup operation or deleted by you directly through Google Drive.
• Cloud Firestore Accountability Records:
  • Accountability relationships and associated distraction settings persist in Firestore as long as the relationship remains active.
  • 6-digit authorization codes generated by partners carry a strict 15-minute expiration timestamp, after which they are marked as expired and rendered invalid.
  • When an accountability relationship is removed, the relationship document is immediately deleted from Firestore.

We respect your right to manage, export, and delete your personal data. Below is a factual guide to deleting your data across all storage layers:

1. Deleting Individual Content in the App

You can delete individual notes, tasks, habits, goals, thoughts, and alarms at any time. When deleted locally, the database is updated immediately, and the change is mirrored to your Google Drive backup upon the next synchronization.

2. Disconnecting and Deleting Accountability Data

You can remove an accountability partner at any time by entering a partner authorization code. This operation permanently deletes the pairing record from Cloud Firestore.

3. Clearing All Local On-Device Data

To wipe all local databases, preferences, and cache from your phone, navigate to Android Settings > Apps > Succeszia > Storage & cache > Clear storage, or simply uninstall the application. This action permanently deletes your local SQLite database.

4. Deleting Google Drive Backups

Because your backups reside in your personal Google account, you can delete them independently of the app:

• Open Google Drive and delete the Succeszia Backups folder.
• To remove hidden App Data, open Google Drive Settings on the web > Manage Apps > find Succeszia > click Options > Delete hidden app data.

5. Permanent Account & Cloud Deletion Requests

Succeszia implements reasonable, industry-standard technical and organizational safeguards designed to protect your information against unauthorized access, loss, or misuse:

• Transport Layer Security (TLS/HTTPS): All network communications with Google APIs, Firebase, and ZenQuotes are encrypted in transit using TLS 1.2/1.3 cryptographic protocols.
• Android Application Sandbox: Local SQLite databases are stored in private internal application storage, inaccessible to other apps running on the device.
• Scoped OAuth 2.0 Tokens: Google Drive integration requests only restricted scopes (AppData and app-created files), preventing access to the remainder of your Google Drive files.
• Ephemeral RAM Processing: AccessibilityService event data is analyzed exclusively in volatile RAM and is never committed to persistent storage or logs.

Succeszia is a general-audience personal productivity and habit management tool designed for individuals seeking to improve focus and time management. It is not directed toward children under 13 years of age (or under 16 in the European Economic Area).

We do not knowingly collect or solicit personal identifiable information from children under the applicable age threshold. If you believe that a child has provided us with personal information, please contact us immediately at [SUPPORT_EMAIL]. Upon verification, we will promptly delete the associated records from our cloud systems.

Succeszia interfaces with a limited set of verified third-party technology providers. Below are the official privacy policies for each provider:

Succeszia's third-party cloud infrastructure is hosted by Google Cloud Platform (Firebase and Google Drive). Information processed through these services may be transferred to, stored, and processed in data centers located in the United States or other global regions where Google operates facilities. Google complies with established international data transfer legal frameworks and contractual clauses ensuring adequate data protection.

We may update this Privacy Policy from time to time to reflect modifications in our application features, Android platform requirements, or applicable regulatory standards. When changes occur, the updated policy will be posted on this canonical URL (https://succeszia.web.app/x/privacy-policy), and the "Last Updated" date at the top of the policy will be updated accordingly.

We encourage users to review this page periodically. Continued use of Succeszia following the posting of an updated policy signifies your acknowledgment of the revised practices.

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or cloud deletion requests, please contact us: