Privacy Policy

Effective date: 1 August 2026 · Last updated: 21 August 2026

Origin is a personal productivity app for tasks, calendar, focus sessions, habits, workouts and alarms. This policy explains exactly what we collect, why we collect it, who else can see it, and how you delete it.

1. Who we are

Origin (the "App") is provided by Mokhammad Khanif Nikzad ("we", "us", "our"), the data controller for the personal data described here. You can reach us at originappsupport@gmail.com or by post at Almaty, Kazakhstan.

This policy covers the Origin mobile app on the App Store and Google Play, and the backend services that support it. It does not cover Apple's or Google's own handling of your data, which is governed by their policies.

2. What we collect

Origin is local-first: everything you create is written to storage on your device. The data below leaves your device only if you create an account and sign in, which enables sync and backup.

2.1 Account data

• Email address, received from Google when you choose "Continue with Google", or from Apple when you choose "Continue with Apple", and stored by our authentication provider so you can sign in on another device. Origin has no password of its own — we never see, receive or store your Google or Apple password. If you use Sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address.
• Display name and username, if you set one. Usernames are unique across Origin. Your username is visible to other users if you take part in the leaderboard or add friends — see section 6, which lists exactly what they can see and how to switch it off.
• Account timestamps — when the account was created, which anchors the free trial period so it cannot be reset by reinstalling.

2.2 Content you create

Some things never leave your device at all, even when you are signed in and syncing. Focus notes — the note you can attach to a focus session — are stored only on the phone that wrote them, expire by themselves after seven days, and are never uploaded to our servers or included in a backup. Home-screen widgets read from on-device storage only. Calendar events that Origin writes for your timed tasks are written into your own device calendar and are never copied to us.

We treat health-related entries (workouts and body weight) as sensitive. They are used only to draw your own charts and reports inside the App. They are never used for advertising or profiling, and they are never sold or shared with third parties for their own purposes.

Origin does not read from or write to Apple Health or Google Fit, and does not access your contacts, precise location or microphone. It can read your device calendar and save an image to your photo library, but only with your permission and only as described in section 5 — neither is ever uploaded to our servers.

2.3 Purchase data

If you subscribe, the payment itself is taken by Apple or Google — we never see or store your card details. Our subscription provider (RevenueCat) gives us a receipt-derived record of whether your subscription is active, which product you bought, and when it renews or expires, linked to an anonymous purchase identifier and your account.

2.4 Technical data

• Sync metadata — record identifiers and modification timestamps, so a device knows what changed since it last connected.
• Server logs from our hosting and authentication provider, which may include an IP address, timestamp and request type. These are used for security and abuse prevention and are retained on a short rolling basis by that provider.
• Update checks — the App asks our update service whether a newer JavaScript bundle is available. That request includes the app version, platform and update channel.

Origin sends no push notifications and collects no push notification token. Every reminder, quote, habit nudge and alarm is scheduled locally on your device by the operating system, so those notifications work with no network connection and nothing about them reaches us.

We do not embed advertising SDKs, third-party analytics SDKs, cross-app tracking, the Advertising Identifier (IDFA), or fingerprinting. Origin does not track you across apps or websites owned by other companies.

2.5 Leaderboard, friends and moderation

Origin has an optional leaderboard that ranks users against each other, and an optional friends list. This is the only part of Origin where anything about you is shown to other people. While you take part, your row carries exactly these fields and nothing else:

Nothing else is ever published — not your email address, and none of the content in the table in 2.2: no tasks, projects, habit names, focus notes, workout details, body weight, alarms or preferences. The figures above are totals, not records: another user sees that you focused for 12 hours, never what you were working on.

Friends. If you send or accept a friend request, that person sees the same fields listed above. Searching for someone to add matches on username only. Declining a request is silent — the other person is not told.

Reporting and blocking. If you report a username or account, we receive the account reported, the reason you picked from the list, and any note you add, so that we can act on it. If you block an account, that is recorded against your own account so we can keep it out of your view; the person you blocked is never told.

3. Why we use it

• To run the App — showing your tasks, habits, workouts, statistics and reports.
• To sync and back up your content across your devices when you are signed in.
• To authenticate you and keep your account secure.
• To manage subscriptions and give you the features you paid for, including the free trial.
• To send notifications you asked for, such as task reminders and alarms.
• To show the leaderboard and friend lists, if you take part in them.
• To act on reports you make about another user, and to keep accounts you have blocked out of your view.
• To protect the service from abuse, and to comply with law.

We do not use your data to build advertising profiles or to train machine-learning models.

4. Legal bases (EEA / UK)

• Performance of a contract — providing the App, your account, sync and your subscription.
• Consent — notifications, and the storage of health-related entries such as workouts and body weight; you may withdraw consent at any time by turning the feature off or deleting the data.
• Legitimate interests — keeping the service secure, preventing abuse and fixing faults.
• Legal obligation — retaining what tax, accounting or consumer law requires.

5. Permissions on your device

You can revoke any of these in your operating system settings; the related feature simply stops working.

6. Who else can see your data

By default: nobody. Your records are readable only by your own account. The exceptions are:

• Other users of Origin, but only ever your leaderboard row — username, character, rank and four score figures. Section 2.5 lists those fields in full, states what is never published, and explains the Private account switch that removes your row entirely. The same fields, and no others, are what a friend sees.
• Us, when you report someone — the account reported, your chosen reason and any note, so we can act on it. See 2.5.
• Images you export. Reports and workout recaps are rendered on your device and handed to your operating system's share sheet. Where the picture goes next is entirely your choice; we never receive it.
• Service providers acting on our instructions (section 7).
• Law and safety — if we are legally required to disclose data, or must do so to protect our rights or someone's safety.
• A business transfer — if Origin is ever acquired, data may transfer to the acquirer under this policy; we would tell you first.

We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are used in US state privacy laws.

7. Service providers

Each provider is bound by a data processing agreement, may use your data only to provide their service to us, and may not sell it.

8. How long we keep it

• Account and content — until you delete them, or until you delete your account.
• On-device data — until you delete it in the App, clear the app's data, or uninstall Origin.
• Focus notes — deleted automatically by the App seven days after they are written, and never uploaded in the first place.
• Leaderboard rows — removed as soon as you switch on Private account, and with your account when you delete it.
• Reports about other users — kept while we investigate and for a limited period afterwards, so that repeat behaviour can be recognised.
• Server logs — kept briefly by our providers for security and diagnostics on a rolling basis.
• Purchase records — kept as long as required for tax, accounting and refund handling.

9. Deleting your data

You can delete everything yourself, without contacting us:

1. Open Origin and go to Settings.
2. Tap Delete account.
3. Confirm the warning, then confirm once more.

This permanently deletes your account and the records stored against it on our servers, and wipes Origin's data from that device. It cannot be undone, and it does not cancel a subscription: cancel that in your Apple or Google account settings before deleting, or you will keep being billed.

If you cannot access the App, email originappsupport@gmail.com from the address on the account and we will delete it within 30 days.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and receive a copy in a portable format;
• correct data that is wrong or incomplete;
• delete your data (see section 9);
• restrict or object to certain processing;
• withdraw consent at any time, without affecting processing already carried out;
• complain to your local data protection authority.

California residents may additionally request disclosure of the categories of personal information collected and the purposes for collection, and may not be discriminated against for exercising these rights. To exercise any right, email originappsupport@gmail.com. We respond within 30 days and may need to verify that the request comes from the account holder.

11. Security

Traffic between the App and our servers is encrypted with TLS. Origin has no password of its own to store — sign-in is handled entirely by Google, so there is no Origin password that could ever leak. Database row-level security policies restrict every record to the account that owns it, and session credentials are held in your device's secure storage. No system is perfectly secure, so please protect the Google account you sign in with — enable two-step verification and keep your device locked.

12. Children

Origin is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.

13. International transfers

We are established in the Republic of Kazakhstan, and our service providers may process data in countries other than your own, including the United States and the European Union. Where personal data is transferred out of the EEA or the United Kingdom, the transfer is made under the European Commission's Standard Contractual Clauses or an applicable adequacy decision. Where it is transferred to Kazakhstan, it is processed in accordance with this policy and the safeguards described in section 11.

14. Changes to this policy

We will update this page when the App changes, and will move the "Last updated" date at the top. For material changes we will also notify you in the App or by email before they take effect. Continuing to use Origin after a change means you accept the updated policy.

15. Contact

Questions, requests or complaints: originappsupport@gmail.com.