Privacy Policy

This Privacy Policy explains how We Sell Things LLC ("we", "us", "our") collects, uses, and protects your information when you use the Drift mobile application ("Drift" or "the App"). By using Drift, you agree to the terms described here.

1. Information we collect

To provide Drift's core habit tracking and subscription features, we collect the following information:

Account information

• Email address — required to create an account and to authenticate you across devices. Provided by you when you sign up.
• User identifier — a unique account ID generated by our authentication provider (Firebase Authentication).
• Display name — if you sign in with Apple or Google, we receive the name and email address associated with that account. If you use Sign in with Apple's private relay, we only ever see the relay address, not your real one.

Habit data

• Habit names, units, and emoji — that you enter when creating a habit (e.g. "Smoking", "cigarettes", "🚬").
• Goal settings — your chosen target (e.g. "5 per day"), period type, and averaging method.
• Daily entries — the count you log for each habit each day.
• Pause history and goal history — when you paused or changed your goal.

Subscription and purchase information

• Purchase history and subscription state — managed by Apple App Store or Google Play. We receive transaction identifiers and subscription status from these platforms to validate your purchase, but we do not receive your credit card or payment details.

Push notification token

• Firebase Cloud Messaging (FCM) token — to send you notifications, such as when you've earned a free week. You can disable notifications at any time in your device settings.

Technical information

• Time zone — to evaluate your weekly goals at the correct local time.
• Device platform and app version — iOS or Android, and the app version and build number, for compatibility, diagnostics, and support.
• IP address — received automatically whenever your device contacts our servers. We use it to operate and secure the service (for example, rate limiting and abuse prevention), and our analytics provider derives an approximate, city-level location from it.

Product analytics

We use Mixpanel to understand how the app is used so we can improve it. Mixpanel receives:

• A small set of events — currently when the app is opened, when a habit is logged, and when a subscription starts. We do not send your habit names, your entry counts, your goals, or the substance you are tracking.
• Your account identifier and email address, and which method you signed in with, so events can be tied to one account across devices.
• Device platform, app version and build, and IP address, from which Mixpanel derives an approximate, city-level location.

We have disabled Mixpanel's automatic event collection, so it records only the events listed above. Mixpanel processes this data on our behalf as a service provider and is contractually prohibited from using it for its own purposes. See Mixpanel's privacy policy. If you would rather not be included in analytics, email us and we will exclude your account.

Advertising and attribution

We advertise Drift on Meta's platforms (Facebook and Instagram). To measure which ads actually bring people to Drift, the App includes the Meta (Facebook) SDK, which sends Meta:

• A small set of conversion events — app install and app open, account creation, starting a free trial, completing a purchase (including the amount and currency), creating your first habit, and whether you were still using Drift two and seven days after installing. We do not send your habit names, your entry counts, your goals, or the substance you are tracking.
• Your device's advertising identifier — the IDFA on iOS or the Google Advertising ID on Android. On iOS this is only sent if you allow tracking when the App asks; see "Your choices" below.
• Your account identifier, so that purchases can be matched to the install that produced them. Like the advertising identifier, this is only sent if you allow tracking.
• Device platform, app version, and IP address, collected automatically by the SDK.

This is cross-app tracking as Apple defines it, and it is used for advertising rather than only for operating the App. Unlike our other providers, Meta does not act purely on our instructions — it also uses this data for its own purposes under Meta's privacy policy. We rely on your consent for this, and you can decline it without losing any Drift functionality.

We do not collect: precise or GPS location, contacts, browsing history, photos, audio, or biometric data. We do not show ads inside Drift, and we do not sell your data for money.

2. How we use your information

We use the information we collect only to:

• Provide habit tracking, charts, and statistics features.
• Sync your data between your devices (iPhone, iPad, Android).
• Calculate whether you've stayed under your goal and qualify for a free billing week.
• Validate and process your subscription with Apple or Google.
• Send transactional notifications (e.g. "Claim your free week").
• Diagnose technical problems, and understand how the app is used through the limited analytics described above, so we can improve it.
• Measure which of our advertisements bring people to Drift, so we can spend less on advertising — but only where you have allowed it, as described above.
• Communicate with you about your account or significant changes to the service.

3. How we share your information

We do not rent or trade your personal information, and we do not exchange it for money. We share information with the following companies:

• Firebase (Google LLC) — authentication and push notification delivery.
• Hetzner Online GmbH — server hosting in Germany. Our application server and our database both run on this infrastructure; Hetzner does not access your data.
• Mixpanel, Inc. — product analytics, as described in Section 1.
• Apple App Store and Google Play — payment processing and subscription validation.
• Meta Platforms, Inc. — advertising measurement, as described in Section 1, and only where you have allowed tracking.

Every company above except Meta is a service provider, contractually bound to protect your data and use it only for the purposes we specify. Meta is different: it uses the advertising data for its own purposes as well as ours.

Because of that, sharing your data with Meta for advertising measurement may count as a "sale" or a "share" for cross-context behavioural advertising under some United States state privacy laws, including the California Consumer Privacy Act — even though no money changes hands. You can opt out at any time using the controls in "Your choices" below, or by emailing us.

We may disclose information if required by law, legal process, or to protect the rights, property, or safety of users or the public.

4. Data retention

We retain your account and habit data for as long as your account is active. If you delete your account, we permanently delete your habit data within 30 days, except where retention is required by law (for example, tax records of purchases).

5. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — update inaccurate information through the App.
• Delete — request deletion of your account and personal data.
• Export — request a copy of your habit data in a portable format.
• Withdraw consent — stop using Drift at any time. Cancel your subscription through your Apple or Google account.
• Opt out of advertising measurement — see "Your choices" below.

To exercise any of these rights, email us at support@ardaventures.me.

Your choices

You can turn off the advertising measurement described in Section 1 at any time. Drift works exactly the same either way — nothing is withheld if you decline.

• In Drift, on either platform — open Settings and turn off Ad measurement. This is the complete opt-out: no events of any kind are sent to Meta afterwards, and we clear the data the Meta SDK holds on your device.
• On iOS — the first time you open Drift, iOS asks whether Drift may track you across apps. If you choose "Ask App Not to Track", we share no advertising identifier and no account identifier with Meta. You can change your answer later in Settings → Privacy & Security → Tracking. Note that this Apple-level choice stops Meta learning who you are, but a small number of anonymous conversion events (such as "a purchase happened") are still sent so we can measure our advertising in aggregate. Use the in-app Ad measurement switch above if you want those stopped too.
• On Android — open Settings → Privacy → Ads and choose "Delete advertising ID" to stop the identifier being shared with any app. As on iOS, this stops the identifier but not the anonymous events; the in-app switch stops both.
• By email — write to support@ardaventures.me and we will exclude your account from analytics, and help you with the above.

6. Children

Drift is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. International transfers

Our servers and database are located in Germany, within the European Union. If you use Drift from outside the EU — including from the United States — your information is transferred to and processed in Germany.

Some of our service providers process data elsewhere: Firebase (Google), Mixpanel, and Meta are United States companies and may process data in the United States or other countries. Where those transfers involve personal data of individuals in the EU, UK, or Switzerland, they are made under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

We are the controller of your personal data. If you are in the EU or UK, the lawful bases we rely on are: performance of our contract with you (providing the app, your account, and your subscription), our legitimate interests (securing the service, preventing abuse, and understanding how the app is used), and your consent where we ask for it (such as push notifications, and the advertising measurement described in Section 1). We do not rely on legitimate interests for advertising measurement. On iOS, we ask for your permission through Apple's tracking prompt, and if you decline we share no identifier that could single you out. On Android, your advertising identifier is governed by your device's system advertising settings, which you control as described in Section 5. You can withdraw permission at any time, on either platform.

8. Security

We use industry-standard measures to protect your information, including encrypted connections (TLS), encrypted storage at rest, and authentication tokens with short lifetimes. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Last updated" date above. Material changes will be communicated through the App or via email.

10. Legal terms that apply to this policy

This Privacy Policy forms part of, and is governed by, our Terms of Service. By using Drift you accept both. The following provisions of the Terms apply to this Policy and to any claim or dispute arising out of it or out of our handling of your information. They are stated in full in the Terms — this is a summary and a pointer, not a separate agreement, and the Terms control if the two ever differ:

• Disclaimer of warranties (Terms §17) — the Service is provided "as is" and "as available", without warranties of any kind, express, implied, or statutory, to the maximum extent permitted by law.
• Limitation of liability (Terms §18) — we are not liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, data, or opportunity; and our total aggregate liability is capped at the greater of what you paid us in the preceding twelve months or one hundred U.S. dollars.
• Indemnification (Terms §19) — you agree to indemnify us against claims arising from your use of the Service or your breach of the Terms or applicable law.
• Termination (Terms §16) — either of us may end your access as described there, and the effects of termination on your data are set out in Section 4 of this Policy.
• Governing law and venue (Terms §22) — Delaware law, with the consumer carve-outs stated there.
• Binding individual arbitration, and class action and jury waiver (Terms §21) — disputes are resolved by individual arbitration rather than in court, and you give up class actions and a jury trial. That section includes an informal-resolution step, a small-claims carve-out, and a 30-day opt-out you are free to take without affecting your use of Drift.

Nothing above limits rights that cannot be limited. These provisions do not waive, restrict, or affect any right you have under data protection law — including the GDPR, UK GDPR, and the California Consumer Privacy Act — to access, correct, delete, port, or object to the processing of your personal data, to withdraw consent, or to lodge a complaint with your national data protection authority, the UK Information Commissioner's Office, or the California Privacy Protection Agency. Those rights are described in Section 5 and are exercisable free of charge, regardless of anything in the Terms.

11. Contact us

If you have questions about this Privacy Policy or our practices, contact:

We Sell Things LLC
Email: support@ardaventures.me