Privacy Policy

Effective date: 1 August 2026 · Last updated: 6 September 2026

Origin is a personal productivity app for tasks, calendar, focus sessions, habits, workouts and alarms. It also includes an optional AI assistant, optional photo-based calorie estimation, and optional shared projects and habit duels you can take part in with other people. This policy explains exactly what we collect, why we collect it, who else can see it, and how you delete it.

1. Who we are

Origin (the "App") is provided by Mokhammad Khanif Nikzad ("we", "us", "our"), the data controller for the personal data described here. You can reach us at originappsupport@gmail.com or by post at Almaty, Kazakhstan.

This policy covers the Origin mobile app on the App Store and Google Play, and the backend services that support it. It does not cover Apple's or Google's own handling of your data, which is governed by their policies.

2. What we collect

Origin is local-first: everything you create is written to storage on your device. The data below leaves your device only if you create an account and sign in, which enables sync and backup.

2.1 Account data

• Email address, received from Google when you choose "Continue with Google", or from Apple when you choose "Continue with Apple", and stored by our authentication provider so you can sign in on another device. Origin has no password of its own — we never see, receive or store your Google or Apple password. If you use Sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address.
• Display name and username, if you set one. Usernames are unique across Origin. Your username is visible to other users if you take part in the leaderboard or add friends — see section 6, which lists exactly what they can see and how to switch it off.
• Account timestamps — when the account was created, which anchors the free trial period so it cannot be reset by reinstalling.

2.2 Content you create

Some things never leave your device at all, even when you are signed in and syncing. Focus notes — the note you can attach to a focus session — are stored only on the phone that wrote them, expire by themselves after seven days, and are never uploaded to our servers or included in a backup. Home-screen widgets read from on-device storage only. Calendar events that Origin writes for your timed tasks are written into your own device calendar and are never copied to us.

We treat health-related entries (workouts and body weight) as sensitive. They are used only to draw your own charts and reports inside the App. They are never used for advertising or profiling, and they are never sold or shared with third parties for their own purposes.

Origin does not read from or write to Apple Health or Google Fit, and does not access your contacts or your precise location.

It can use your camera, microphone and photo library, but only when you start one of the optional features that needs them, and only as described in section 5: the microphone when you hold the assistant's voice button, and the camera or photo library when you photograph a meal for a calorie estimate. Those recordings and photographs are sent to an AI provider to produce the result, which is different from everything else in this section — section 2.6 explains exactly what happens to them. Origin never browses your photo library on its own; it receives only the single image you pick.

Origin can also read your device calendar and save an image you generated to your photo library, with your permission. Neither is ever uploaded to our servers.

2.3 Purchase data

If you subscribe, the payment itself is taken by Apple or Google — we never see or store your card details. Our subscription provider (RevenueCat) gives us a receipt-derived record of whether your subscription is active, which product you bought, and when it renews or expires, linked to an anonymous purchase identifier and your account.

2.4 Technical data

• Sync metadata — record identifiers and modification timestamps, so a device knows what changed since it last connected.
• Server logs from our hosting and authentication provider, which may include an IP address, timestamp and request type. These are used for security and abuse prevention and are retained on a short rolling basis by that provider.
• Update checks — the App asks our update service whether a newer JavaScript bundle is available. That request includes the app version, platform and update channel.

Origin sends no push notifications and collects no push notification token. Every reminder, quote, habit nudge and alarm is scheduled locally on your device by the operating system, so those notifications work with no network connection and nothing about them reaches us.

We do not embed advertising SDKs, third-party analytics SDKs, cross-app tracking, the Advertising Identifier (IDFA), or fingerprinting. Origin does not track you across apps or websites owned by other companies.

2.5 Leaderboard, friends and moderation

Origin has an optional leaderboard that ranks users against each other, and an optional friends list. This is one of three places where something about you is shown to other people; the other two are shared projects and habit duels, in section 2.7. While you take part in the leaderboard, your row carries exactly these fields and nothing else:

Nothing else is ever published — not your email address, and none of the content in the table in 2.2: no tasks, projects, habit names, focus notes, workout details, body weight, alarms or preferences. The figures above are totals, not records: another user sees that you focused for 12 hours, never what you were working on.

Friends. If you send or accept a friend request, that person sees the same fields listed above. Searching for someone to add matches on username only. Declining a request is silent — the other person is not told.

Reporting and blocking. If you report a username or account, we receive the account reported, the reason you picked from the list, and any note you add, so that we can act on it. If you block an account, that is recorded against your own account so we can keep it out of your view; the person you blocked is never told.

2.6 AI features — the assistant, voice notes and meal photos

Origin includes three optional features that send something you provide to an AI provider so it can produce a result. None of them runs unless you start it, and the rest of the App works normally if you never do.

What we keep. Your recording and your meal photograph are passed straight through to the provider and are not written to our database or to any file storage. What survives is the result: the transcribed text goes into the message box for you to edit or discard, and a meal estimate you choose to log is saved as numbers (calories, protein, and your corrections) attached to your account. The picture is not saved with them.

Counters. Because these features cost us money per use, we keep a running count of how many meal photos, seconds of audio and assistant messages your account has used in the current period. That counter holds numbers only — never the content.

Training. Nothing you send through these features is used by us to train AI models, and we use these providers under terms that do not permit them to train their models on it either. Providers may retain the request briefly for abuse monitoring under their own policies, which are linked in section 7.

Please do not send sensitive information. An AI answer is a suggestion, not advice. Calorie and protein figures are estimates from a photograph and can be materially wrong — they are not medical or nutritional advice, and you should not rely on them for any medical purpose. Do not use the assistant for medical, legal or financial decisions, and avoid dictating information about other people who have not agreed to it.

2.7 Focus rooms, shared projects and habit duels

Focus rooms. If you turn on focus sharing, then while a focus session is running your accepted friends — nobody else — can see that you are focusing, your username, your profile photo, and how long the current session has been going. It disappears three minutes after your last update, and turning the setting off stops it immediately. What you are focusing on is never shared: focus notes stay on your device (2.2).

Both are optional, both are off until you create or join one, and both can be left at any time from inside the App.

Shared projects. When you create one, Origin generates a short join code. Anyone you give that code to can join the project, up to eight members. You should treat the code like a password to that project: we cannot tell who a code has been forwarded to, so only share it with people you intend to let in. If a code gets out, the project owner can generate a new one from the project's settings, which immediately stops the old one working, and can remove members.

Every member of a shared project can see everything in it — task titles, notes, dates, priorities, subtasks, comments, who a task is assigned to, and which member created or changed something. Members can also see each other's usernames and profile photos. Nothing else from your account crosses into a shared project: your other tasks, habits, workouts, body weight and focus sessions stay private. Leaving a project stops your access to it; work you already contributed remains with the project for the members who are still in it.

Habit duels. A duel is a fixed-length contest on a single habit between you and people you are already friends with. Members of a duel can see each other's usernames, profile photos, and the daily amount each person logged for that one habit over the duel's date range. They cannot see any of your other habits, or anything else in your account. Leaving a duel stops further progress being shared.

Content other people can see is content you are publishing to them. Please do not put anything in a shared project, a duel, a username or a profile photo that you would not want those members to have. Reporting and blocking work the same way here as on the leaderboard — see the end of section 2.5.

3. Why we use it

• To run the App — showing your tasks, habits, workouts, statistics and reports.
• To sync and back up your content across your devices when you are signed in.
• To authenticate you and keep your account secure.
• To manage subscriptions and give you the features you paid for, including the free trial.
• To send notifications you asked for, such as task reminders and alarms.
• To show the leaderboard and friend lists, if you take part in them.
• To run the AI features you start — answering an assistant message, turning a voice note into text, and estimating the calories in a meal photo (section 2.6).
• To meter the AI features, by counting how many you have used against the allowance included in your plan.
• To run shared projects and habit duels you create or join, which means showing your contributions to the other members (section 2.7).
• To act on reports you make about another user, and to keep accounts you have blocked out of your view.
• To protect the service from abuse, and to comply with law.

We do not use your data to build advertising profiles, and we do not use it to train machine-learning models — ours or anyone else's. See 2.6 for what happens to material sent through the AI features.

4. Legal bases (EEA / UK)

• Performance of a contract — providing the App, your account, sync and your subscription.
• Consent — notifications; the storage of health-related entries such as workouts, body weight and logged meals; and each use of the camera, microphone and AI features. You may withdraw consent at any time by turning the feature off, revoking the permission in your device settings, or deleting the data.
• Legitimate interests — keeping the service secure, preventing abuse and fixing faults.
• Legal obligation — retaining what tax, accounting or consumer law requires.

5. Permissions on your device

You can revoke any of these in your operating system settings; the related feature simply stops working.

6. Who else can see your data

By default: nobody. Your records are readable only by your own account. The exceptions are:

• Other users of Origin, in three places and only if you take part:
  • your leaderboard row — username, profile photo, character, rank and the score figures listed in 2.5. Private account removes it entirely;
  • everything inside a shared project you created or joined, visible to its members (2.7);
  • your daily figures for the one habit in a habit duel you joined, visible to its members (2.7);
  • that you are focusing right now, plus your username and photo, visible to your accepted friends while focus sharing is on (2.7).
  Your profile photo can additionally be loaded by any signed-in Origin user who has your account identifier — see 2.5.
• Us, when you report someone — the account reported, your chosen reason and any note, so we can act on it. See 2.5.
• Images you export. Reports and workout recaps are rendered on your device and handed to your operating system's share sheet. Where the picture goes next is entirely your choice; we never receive it.
• AI providers, but only the specific message, recording or photo you sent through an AI feature, and only to produce your result. They do not receive your account content generally, and they may not train on what they receive. See 2.6 and section 7.
• Service providers acting on our instructions (section 7).
• Law and safety — if we are legally required to disclose data, or must do so to protect our rights or someone's safety.
• A business transfer — if Origin is ever acquired, data may transfer to the acquirer under this policy; we would tell you first.

We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are used in US state privacy laws.

7. Service providers

Each provider is bound by a data processing agreement, may use your data only to provide their service to us, and may not sell it.

8. How long we keep it

• Account and content — until you delete them, or until you delete your account.
• On-device data — until you delete it in the App, clear the app's data, or uninstall Origin.
• Focus notes — deleted automatically by the App seven days after they are written, and never uploaded in the first place.
• Leaderboard rows — removed as soon as you switch on Private account, and with your account when you delete it.
• Reports about other users — kept while we investigate and for a limited period afterwards, so that repeat behaviour can be recognised.
• Voice recordings and meal photographs — never stored by us at all. They are passed to the AI provider, used to produce your result, and gone. The provider may hold the request briefly for abuse monitoring under its own policy (section 7).
• Meal entries — the calorie and protein numbers you chose to log are kept with your account until you delete them or your account.
• AI usage counters — numbers only, kept per period so your allowance can be enforced; removed with your account.
• Shared projects and habit duels — kept while they exist. Leaving one removes your access; content you contributed stays with the remaining members. A project with no members left is removed.
• Profile photo — until you replace or remove it, or delete your account. Deleting your account removes the file from our storage as well as your database records.
• Other people's photos on your device — the App keeps a copy of the profile photos it has shown you, in the operating system's cache, so a leaderboard does not re-download the same faces every time you open it. They are replaced when somebody changes their picture, dropped when the cache is full, removed when you sign out of the account, and cleared entirely if you clear the App's storage or uninstall it.
• Server logs — kept briefly by our providers for security and diagnostics on a rolling basis.
• Purchase records — kept as long as required for tax, accounting and refund handling.

9. Deleting your data

You can delete everything yourself, without contacting us:

1. Open Origin and go to Settings.
2. Tap Delete account.
3. Confirm the warning, then confirm once more.

This permanently deletes your account and the records stored against it on our servers, and wipes Origin's data from that device. It cannot be undone, and it does not cancel a subscription: cancel that in your Apple or Google account settings before deleting, or you will keep being billed.

If you cannot access the App, email originappsupport@gmail.com from the address on the account and we will delete it within 30 days.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and receive a copy in a portable format;
• correct data that is wrong or incomplete;
• delete your data (see section 9);
• restrict or object to certain processing;
• withdraw consent at any time, without affecting processing already carried out;
• complain to your local data protection authority.

California residents may additionally request disclosure of the categories of personal information collected and the purposes for collection, and may not be discriminated against for exercising these rights. To exercise any right, email originappsupport@gmail.com. We respond within 30 days and may need to verify that the request comes from the account holder.

11. Security

Traffic between the App and our servers is encrypted with TLS. Origin has no password of its own to store — sign-in is handled entirely by Google, so there is no Origin password that could ever leak. Database row-level security policies restrict every record to the account that owns it, and session credentials are held in your device's secure storage. No system is perfectly secure, so please protect the Google account you sign in with — enable two-step verification and keep your device locked.

12. Children

Origin is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.

13. International transfers

We are established in the Republic of Kazakhstan, and our service providers may process data in countries other than your own, including the United States and the European Union. Where personal data is transferred out of the EEA or the United Kingdom, the transfer is made under the European Commission's Standard Contractual Clauses or an applicable adequacy decision. Where it is transferred to Kazakhstan, it is processed in accordance with this policy and the safeguards described in section 11.

14. Changes to this policy

We will update this page when the App changes, and will move the "Last updated" date at the top. For material changes we will also notify you in the App or by email before they take effect. Continuing to use Origin after a change means you accept the updated policy.

15. Contact

Questions, requests or complaints: originappsupport@gmail.com.