Carry This (carrythis.app) is a free psychological workbook and daily habit tracking app. This policy explains exactly what data we collect, why we collect it, where it goes, and what control you have over it. We wrote this in plain language because you deserve to actually understand it.
Here is every piece of data we store, with nothing omitted:
Email address
Provided when you create your account. Used to log you in and send reminder emails if you enable them.
Password
Hashed by Supabase Auth before storage. We never see or store your actual password.
Workbook answers
Your text responses across the seven workbook steps. This is deeply personal content — it stays private (see section 4).
Daily check-in data
Your daily responses (yes, partial, or no), optional written reflections, and the dates they were recorded.
User settings
Your preferred reminder time and timezone. Used to send reminders at the right time.
Push notification subscription
If you opt in to push notifications, we store a VAPID-based subscription endpoint. This is handled directly between your browser and our server — no third-party push services are involved.
That is everything. We do not collect your name, phone number, location, IP address logs, device fingerprints, or any other personal information beyond what is listed above.
Every piece of data maps to a specific function. There is no data collected “just in case” or for future use.
| Data | Purpose |
|---|---|
| Account login, password reset, email reminders | |
| Password hash | Authentication |
| Workbook answers | Save your progress, generate your PDF export |
| Check-in data | Track your daily streaks and consistency |
| Settings | Send reminders at the time and timezone you chose |
| Push subscription | Deliver push notifications you opted into |
Your data lives on infrastructure provided by the following services, all of which are based in the United States:
You, and only you.
Your workbook answers, check-in responses, and reflections are protected by Supabase Row Level Security (RLS) policies. This means the database itself enforces that only your authenticated account can read or modify your data. There is no admin panel that lets us browse user content. We built it this way on purpose.
We do not sell, share, rent, or give your data to any third party. Not for advertising, not for analytics, not for research, not for any reason. There are no exceptions.
We use one cookie: the Supabase authentication session cookie. It keeps you logged in. That is its only function.
We do not use tracking cookies, advertising cookies, analytics cookies, or any third-party cookies. There is no cookie banner because there is nothing to consent to beyond basic session management.
We use four external services to run Carry This. Each has its own privacy policy:
We do not use Google Analytics, Mixpanel, Facebook Pixel, or any analytics or advertising service. There is no tracking code on this site.
Your data is kept for as long as your account exists. If you delete your account, all associated data — workbook answers, check-in history, settings, and push subscriptions — is permanently deleted. We do not keep backups of deleted accounts.
If you reset your workbook through the settings page, your workbook answers are permanently deleted at that time. Check-in data is retained separately unless you delete your account entirely.
Regardless of where you live, we extend the same rights to all users:
Access your data
Everything you have entered is visible in the app at any time. Your workbook, your check-ins, your settings — it is all accessible to you directly.
Export your data
You can export your complete workbook as a PDF from your dashboard. This file is generated in your browser and is not sent to our servers.
Delete your data
You can reset your workbook from the settings page, or request full account deletion by contacting us at hello@carrythis.app. Deletion requests are processed within 30 days.
Opt out of communications
You can disable email reminders and push notifications at any time from the settings page. We will never email you for marketing purposes.
For California residents (CCPA): You have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell personal information. To make a request, email hello@carrythis.app.
For EU/EEA residents (GDPR): Our legal basis for processing your data is your consent (you created an account) and legitimate interest (delivering the service you signed up for). You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also withdraw consent or lodge a complaint with your local data protection authority. To exercise any right, email hello@carrythis.app.
Carry This is not designed for anyone under the age of 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us at hello@carrythis.app and we will delete it immediately.
If we change this policy, we will update the date at the top of this page. For significant changes — like adding a new third-party service or changing how we handle data — we will notify you by email. We will not reduce your rights or expand our data collection without clear notice.
If you have questions about this policy or your data, reach us directly:
Carry This is operated from the United States.