Trifoil Trailblazer

Last updated: September 25, 2026

Privacy Policy

1. Introduction

At Trifoil Trailblazer, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our applications ("Apps"): Water Tracker, Plainfast, Sober Tracker, Smoke Tracker, Anxiety Pulse, Supplement Tracker, Baseline, Ctrl+Neck, Flow Breath, WinGym, Steep Tea Timer, Cadenza, Math Zen, Physics Zen, Neverloop, Headache Tracker, and Anzan Zen.

2. Information We Collect

Our apps are designed with privacy as a priority. We collect minimal data:

  • Water Tracker: Water consumption records, daily goals, and streak information, stored locally on your device. If you turn on weather-based goals, your approximate location is sent to Open-Meteo to fetch the local temperature; we do not store it. With your permission, drinks are saved to Apple Health or Health Connect. Optional TelemetryDeck analytics stays off until you opt in.
  • Sober Tracker: Sobriety start date and milestone information. All data is stored locally on your device.
  • WinGym: Exercise records, workout plans, and progress tracking information. All data is stored locally on your device with optional export/import functionality.
  • Math Zen: Your practice progress, statistics, and settings, stored locally on your device. Math Zen also offers optional account sign-in; if you choose to sign in, your email address, display name, and practice progress are synced to our backend so your data is available across your devices.
  • Physics Zen: Your practice progress, statistics, and settings are stored on your device. Physics Zen works without an account. If you choose to sign in for cross-device sync, Supabase processes your account identifier, email address and display name when provided by your sign-in provider, and stores your practice progress, including problem attempts and learning statistics. Optional analytics is a separate choice and is not required for sign-in or sync.
  • Cadenza: Your learning progress, streaks, and settings, stored locally on your device. Cadenza's Listen feature uses your microphone to decode Morse tones into text; this audio is processed entirely on your device and is never recorded, stored, or transmitted.
  • Headache Tracker: Headache and migraine records: time, intensity, symptoms, triggers, medications taken, and optionally period start dates if you turn on cycle tracking. All of this is stored locally on your device and is never transmitted. PDF and CSV reports you create are generated on your device and shared only where you choose to send them.
  • Neverloop: Your settings, saved presets and the last piece played, stored on your Mac. The music is composed on your device; no audio, listening history or breathing sessions leave it. Neverloop Pro purchases are verified through RevenueCat, as described below.
  • Anzan Zen: A mental arithmetic game. Your settings and best results are stored locally on your device and are never transmitted. Voice answers are optional: when you turn them on, Apple's speech recognition turns what you say into text, on your device when the language model is installed and otherwise through Apple's speech service, under Apple's privacy policy. The app does not record or store audio, and the recognized text is used only to check your answer. The one-time Pro purchase is made through Apple and processed by RevenueCat, which receives an anonymous app user ID and purchase information to verify the purchase, never your name or email. Anzan Zen has no accounts, no ads, no tracking, and no analytics.
  • Plainfast: Your fasts, fasting plans and presets, streaks, and any weight, mood and glucose entries you log, stored locally on your device. Reminders and home screen widgets are created on your device. JSON backups and CSV exports are made on your device and shared only where you choose. Optional PostHog analytics, including crash reports, stays off until you opt in. Premium purchases are verified through RevenueCat, as described below.
  • Smoke Tracker: Your quit date, smoke-free progress, cravings, reasons, journal entries (including any photos you attach) and settings, stored locally on your device. With your permission, Smoke Tracker reads heart rate, and on iPhone also respiratory rate and blood oxygen, from Apple Health or Health Connect to show your recovery; these readings are processed on your device and never transmitted. JSON backups and CSV journal exports are created on your device and shared only where you choose. Optional PostHog and Firebase Analytics, including crash reports, stay off until you opt in.
  • Anxiety Pulse: Your check-ins, journal entries, and any voice notes or photos you attach, stored locally on your device. The microphone and camera are used only when you record a voice note or take a photo, and these files are never uploaded. With your permission, Anxiety Pulse reads sleep, heart-rate variability, activity and mindful minutes from Apple Health or Health Connect and can save check-ins as mood entries; this health data is processed on your device and never transmitted. PDF and CSV reports are generated on your device and shared only where you choose. Optional PostHog analytics and crash reports stay off until you opt in and never include journal text, voice notes or photos.
  • Supplement Tracker: Your supplements, schedules, intake logs, journal entries and photos, and settings, stored locally on your device. Optional cloud sync copies this data to your own private iCloud storage on iPhone, or to a private app folder in your own Google Drive on Android after Google sign-in; we cannot access either. With your permission, the app reads and writes Apple Health or Health Connect data such as sleep, heart rate, activity, nutrients and mood, on your device only. If you share your stack, the supplement list you share is uploaded to our website to create the link, and anyone with the link can view it. CSV and PDF reports are generated on your device. Optional PostHog analytics and crash reports stay off until you opt in.
  • Baseline: Your daily inputs, scores, protocols, streaks and settings, stored locally on your device. Baseline works without an account and does not sync. Optional PostHog analytics, including error reports, stays off until you opt in.
  • Ctrl+Neck: Your pain and sleep logs, exercise history, program progress, settings, and any posture photos you take with the camera, stored locally on your device. With your permission, Ctrl+Neck reads your step count from Apple Health and saves completed exercises as workouts to Apple Health or Health Connect; this data stays on your device. Voice guidance uses your device's built-in text-to-speech. Optional Firebase Analytics stays off until you agree. Firebase Crashlytics sends crash reports (the error, device model, operating system and app version) so we can fix bugs.
  • Flow Breath: Your breathing sessions, streaks, achievements and settings, stored locally on your device. With your permission, Flow Breath saves sessions to Apple Health as mindful minutes or to Health Connect as exercise sessions, and reads your heart rate to show it alongside a session; this data stays on your device. Optional TelemetryDeck analytics stays off until you opt in and uses no persistent user identifier.
  • Steep Tea Timer: Your teas, collections, brew history, notes and photos, and settings, stored on your device and shared with your Apple Watch or Wear OS watch. On iPhone, optional iCloud sync keeps this data, including brew photos, in your own private iCloud account, and with your permission Steep reads caffeine entries from Apple Health and logs the caffeine from each brew to it. Backup files you export are created on your device. Steep sends anonymous usage events, such as a timer starting and the tea category, to TelemetryDeck; they carry no name, email or tea notes.

3. How We Use Your Information

We use your information solely to provide and improve our Apps' functionality:

  • To enable core app features like tracking and progress visualization
  • To store your preferences and settings
  • To provide personalized experiences based on your usage patterns

4. Data Storage and Security

Storage depends on the app and the features you enable. The app-specific entries above describe data kept on your device. Math Zen and Physics Zen offer optional account sign-in and cross-device sync through Supabase. Supplement Tracker and Steep Tea Timer offer optional sync to your own iCloud account, and Supplement Tracker on Android to your own Google Drive. Synced data is stored remotely when you use those features. Health data read from or written to Apple Health or Health Connect is processed on your device and is not sent to us. Purchase processing, crash reports and analytics are separate from local storage and sync.

  • Records kept on your device, or synced to your own iCloud or Google Drive, are not accessible to us
  • Local storage does not protect copies you choose to sync, export, or share
  • You choose whether to use optional sign-in, sync, health access and analytics where the app offers the choice. Steep Tea Timer's anonymous usage statistics and Ctrl+Neck's crash reports are currently always on

5. Third-Party Services

Our Apps do not include third-party advertising networks. For apps with paid features, we use RevenueCat to process in-app purchases and subscriptions.

RevenueCat (revenuecat.com): Processes purchase history and an app user identifier to verify subscriptions and enable paid features. In Physics Zen, signing in can link purchases to your account identifier. We do not send your name, email address, or practice records to RevenueCat, and we do not receive your full payment details. RevenueCat acts as a data processor on our behalf under a Data Processing Agreement (DPA). For EU/EEA users, transfers to RevenueCat are covered by Standard Contractual Clauses (SCCs). Learn more at revenuecat.com/privacy.

Supabase (supabase.com): Provides authentication and cloud storage for optional sign-in and sync in Math Zen and Physics Zen. It processes account identifiers, email addresses, display names when available, and synced practice data. Supabase acts as a data processor on our behalf under a Data Processing Agreement (DPA). We use this data to provide account and sync features, not for advertising or sale. To request deletion of your account and all synced data, contact contacts@trifoiltrailblazer.com.

Analytics providers vary by app. Anxiety Pulse, Supplement Tracker, Smoke Tracker, Baseline and Plainfast use PostHog; Flow Breath, Water Tracker and Steep Tea Timer use TelemetryDeck; Smoke Tracker and Ctrl+Neck use Firebase Analytics. Except in Steep Tea Timer, analytics is off until you opt in and can be changed in the app's settings. Steep Tea Timer sends anonymous usage events to TelemetryDeck without a name, email or notes. PostHog and TelemetryDeck do not use advertising identifiers or store IP-based location. Once you opt in, Firebase Analytics may process your device's advertising identifier on Android and an approximate location derived from your IP address. Crash and error reports are sent through PostHog in Anxiety Pulse, Supplement Tracker, Smoke Tracker, Baseline and Plainfast (only with analytics consent) and through Firebase Crashlytics in Ctrl+Neck.

Physics Zen uses PostHog only after you explicitly opt in. Analytics is off by default, and the PostHog client is not initialized before consent. It sends product interaction events, such as practice activity and paywall interactions, with app/device information and a persistent identifier. If you sign in, events can be linked to your account identifier, so this data is pseudonymous rather than fully anonymous. Session replay is disabled, and IP-based geolocation is suppressed. You can disable analytics in Settings; doing so stops further analytics collection but does not delete previously collected events. Contact us to request deletion of that data.

Other services: Apple iCloud and Google Drive store sync copies in your own account; Open-Meteo receives approximate coordinates for Water Tracker's weather-based goals; stack links shared from Supplement Tracker are stored by our website host, Netlify.

6. Data Retention

Local app data remains on your device until you remove it using the options below. These actions do not by themselves delete cloud copies or records held by service providers:

  • Delete the app
  • Clear app data through your device settings
  • Use in-app options to reset or delete your data

For Math Zen and Physics Zen, signing out or uninstalling the app does not delete your account or synced data. Contact contacts@trifoiltrailblazer.com to request deletion of your account and all synced data. Data synced by Supplement Tracker or Steep Tea Timer stays in your iCloud or Google Drive until you delete it there. Stack links shared from Supplement Tracker stay online until you ask us to remove them. Local reset controls and withdrawing analytics consent do not by themselves erase previously transmitted data. Purchase records are managed separately by Apple, Google, and RevenueCat; deleting app data does not cancel a subscription.

7. Your Rights

You have the right to:

  • Export your data (available in WinGym, Headache Tracker, Anxiety Pulse, Supplement Tracker, Smoke Tracker, Steep Tea Timer and Plainfast)
  • Delete your data at any time
  • Use core app features without an account; optional cloud sync requires sign-in in Math Zen and Physics Zen, an iCloud account in Supplement Tracker and Steep Tea Timer, or Google sign-in for Supplement Tracker's Google Drive sync

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
contacts@trifoiltrailblazer.com