Privacy Policy for Witspark

This Privacy Policy describes how Witspark (“the App”, “we”, “us”), operated by Luximo Labs (“the Developer”), collects, uses, stores, shares, retains, secures, and deletes information when you use the Witspark mobile application and the website at https://no-fap-pro.web.app. Luximo Labs is the entity responsible for Witspark on Google Play.

1. Who we are — Witspark by Luximo Labs

Witspark is a private, gamified discipline and streak-tracking app developed and published by Luximo Labs for Android on Google Play.
Legal entity / Developer name on Google Play: Luximo Labs
Contact for privacy & support: lakshmeshwar15183@gmail.com
Google Play package: com.nofappro.streaker
Website & Privacy Policy URL: https://no-fap-pro.web.app/privacy.html
Account Deletion URL: https://no-fap-pro.web.app/account-deletion.html

All references to “we” in this policy mean Luximo Labs as the developer of Witspark.

2. Summary — what this means for you

• Witspark requires an account (email or Google Sign-In) to sync your progress.
• Your journal and mood logs are private to your account and protected by Firebase security rules.
• We do not sell your personal information and we do not show third-party advertising SDKs in Witspark.
• You can delete your account and associated data at any time from inside the app or by emailing us.

3. Information Witspark collects

We collect only what is needed to operate Witspark. We do not collect location, contacts, phone number, photos/videos, audio, files outside the app, calendar, or browsing history.

Category	Examples	When collected
Account data	Email address, display name, Firebase UID, authentication identifiers (password hash handled by Firebase; Google ID token when you use Google Sign-In)	When you create an account or sign in with email/Google
App progress & user content	Streak start time, XP, coins, totalCoins, claimed milestones, inventory, relapses, longestStreak, urgesSurvived, mood logs (val 1–5 + emoji + label + date), journal entries (text up to 4000 chars, max 100), completed challenges, theme choice, lastCoinTime, boost expiries, dateKey	When you use the app (check-ins, journal, challenges, shop)
Purchase verification data	If you buy coin packs: Google Play purchase token, product ID, order ID (verified server-side); we do not collect full card numbers — payments are handled by Google Play Billing. On web, optional Razorpay order/payment IDs when that channel is used.	Only if you make an in-app purchase
Technical / diagnostic data	Authentication tokens, online/offline state, local cache identifiers, basic device/app diagnostics needed for Firebase Auth & Firestore, on-device error log (last ~40 errors) shared only if you tap “Report a problem” and choose to email support	Automatically when the app runs
Optional analytics	Aggregate, anonymized usage events (e.g., which screens you open) via Firebase Analytics, if enabled. This may use an app-instance / advertising identifier. You can disable “Opt out of Ads Personalization” / “Reset advertising ID” in Android settings and analytics is loaded dynamically (no always-on tracker).	Only if Firebase Analytics is enabled in the build you use
Local-only cache	Offline queue and profile cache stored in localStorage / device storage to support offline use	On your device only; not sent until you are online and signed in

We do not knowingly collect health data beyond the discipline-tracking fields above. Mood/urge logs are treated as private user-generated content, not as medical data, and are never shared with other users.

4. How Luximo Labs uses information

• To create and secure your Witspark account (Firebase Authentication, email verification, password reset)
• To save and sync your Witspark progress across sessions and devices (Firestore)
• To provide in-app features: streak timer, XP/levels, challenges, shop, journal, mood, widget
• To verify purchases and credit coins safely (server-side verification, idempotent ledger)
• To improve reliability, fix crashes, and provide support when you contact us
• To send account-related emails (verification, password reset) via Firebase

We do not use your journal or mood content for advertising, and we do not sell personal information.

5. Where data is stored

Account and progress data are stored using Google Firebase (Firebase Authentication and Cloud Firestore) on Google Cloud infrastructure, under Luximo Labs’ Firebase project no-fap-pro. Optional usage analytics are processed by Firebase Analytics on Google Cloud. A local cache may also be stored on your device for offline use (localStorage and device storage). Purchase verification records, when applicable, are stored in Firestore collections purchases / razorpay_orders with server-only write rules.

6. Journal & sensitive content — private by design

Journal entries and mood logs in Witspark are private to your account. Firestore security rules enforce that only the authenticated owner (matching UID) can read, create, update, or delete their own users/{uid} document. Sharing is not a feature — your content is not visible to other Witspark users. Do not store passwords, payment details, or other highly sensitive secrets in journal text.

7. Sharing & third parties

We do not share your personal Witspark content with other users.

• Service providers (processors): Google Firebase / Google Cloud processes data only to operate Witspark (Auth, Firestore, Analytics where enabled) under Google’s terms and security controls.
• Payments: Google Play Billing (on Android) and, where offered on web, Razorpay — they receive purchase tokens/IDs needed to verify the transaction, not your Witspark journal.
• No ad SDKs: Witspark does not include third-party advertising SDKs.
• Legal: We may disclose if required by law or to protect the security of Witspark and its users.

8. Data retention & deletion — Witspark accounts

We keep your Witspark account and associated cloud profile while your account is active and as needed to provide the service.

• In-app deletion (fastest): Open Witspark → Profile screen → “Delete account & data”. This deletes your Firestore users/{uid} document and your Firebase Authentication account after a recent-login re-authentication if required (for email users you may be asked for your password; for Google users you may be asked to sign in again). Local cache on the device is cleared on sign-out/delete when possible.
• Deletion by email: Email lakshmeshwar15183@gmail.com from your Witspark account email with subject “Witspark — Delete my account” and include the email address associated with Witspark. Luximo Labs will delete or anonymize your Witspark account and cloud profile within 30 days and confirm by email. If you request deletion by email, we may ask you to verify ownership.
• What is deleted: Email, display name, streak/XP/coins, journal, mood logs, inventory, challenges, and purchase ledger entries linked to that UID are deleted or anonymized. Backups, if any, are purged on the next rotation cycle (typically within 90 days).
• What is retained: We may retain anonymized, aggregated analytics that cannot identify you, and records required for legal, fraud-prevention, or accounting purposes to the extent permitted by law, but not your identifiable Witspark profile after deletion.
• Web / account-deletion page: Full instructions are always available at https://no-fap-pro.web.app/account-deletion.html without requiring login.

For details on how to request deletion and what happens next, see our dedicated page: Witspark Account & Data Deletion.

9. Your choices & rights

• Access & export: In Witspark → Profile you can export a copy of your streak, journal, and settings as JSON (witspark-export-YYYY-MM-DD.json).
• Correction: Update display name in the app; email changes follow Firebase verification.
• Deletion: As described in §8.
• Analytics opt-out: Disable personalized ads / reset advertising ID in Android Settings; Firebase Analytics in Witspark is optional and dynamically loaded.
• Marketing: Witspark does not send marketing emails. Account emails are transactional only.

10. Children’s privacy

Witspark by Luximo Labs is not directed at children under 13, and we do not knowingly collect personal data from children under 13. The app requires you to be old enough to use Google/Firebase services in your country (generally 13+). If you believe a child has provided personal data to Witspark, contact lakshmeshwar15183@gmail.com and we will delete it promptly.

11. Security — how Luximo Labs protects Witspark data

We use industry-standard transport security (HTTPS/TLS) and Firebase security rules so Witspark users can only access their own documents. Passwords are handled by Firebase Authentication (not stored in plaintext by Luximo Labs). Device-local data is sandboxed to the app. No method of transmission or storage is 100% secure, but we apply reasonable technical and organizational measures appropriate to a consumer discipline app.

12. International transfers

Firebase/Google may process and store Witspark data in data centers outside your country (including the United States and other Google Cloud regions). By using Witspark you acknowledge this processing as needed to provide the service under Firebase’s data processing terms.

13. Health disclaimer

Witspark is a self-help and habit tool. It is not medical advice and does not diagnose, treat, cure, or prevent any condition. Luximo Labs does not provide clinical support. If you need medical or mental-health support, contact a qualified professional or local emergency services. Benefits timelines and quotes in the app are general motivation only; results vary.

14. Changes to this policy

We may update this Privacy Policy for Witspark as the app evolves. The “Last updated” date at the top will change when we do, and we will post the new version at https://no-fap-pro.web.app/privacy.html. Continued use of Witspark after changes means you accept the updated policy. For material changes, we may also notify you in the app or by email.

15. Contact Luximo Labs — Witspark privacy

Questions about this Witspark Privacy Policy, or requests to exercise deletion/rights:
Luximo Labs — Witspark
Email: lakshmeshwar15183@gmail.com
Website: https://no-fap-pro.web.app
Firebase project: no-fap-pro  ·  Google Play package: com.nofappro.streaker

If you are a Google Play reviewer: this page specifically governs Witspark by Luximo Labs (package com.nofappro.streaker) and is linked from the Witspark Play listing and the in-app “Privacy Policy” link.

Terms of Use — Witspark by Luximo Labs  ·  Account & Data Deletion — Witspark