Privacy Policy

Last updated: June 12, 2026

Reef (the “app”) is published by studio Ivryn (Victor Laybats). Contact: contact@reeftogether.com.

1. Data we collect

• Account: email address, username and encrypted password. Google sign-in can provide an email address and Google identifier.
• Content: habits, focus sessions, progress, creatures, pearls and social interactions such as friends, crews and challenges.
• Technical: a Firebase Cloud Messaging token for notifications and session timestamps for online status.

Reef does not collect location, phone contacts or personal photos.

2. How we use data

Only to operate the app: synchronise your ocean between devices, provide social features and send reminders you configure. We do not sell data or share it for advertising. Reef contains no ads.

3. Hosting and security

Data is stored on EU-based, self-hosted infrastructure in France using Supabase. Communications use HTTPS/TLS and passwords are bcrypt-hashed.

4. Processors

• Firebase Cloud Messaging (Google) for push delivery.
• RevenueCat / Google Play Billing for premium subscriptions; card data does not pass through our servers.

5. Your GDPR rights

You may request access, correction or complete deletion. See the account deletion page or email contact@reeftogether.com. Deletion is completed within 30 days.

6. Minimum age

Reef is intended for people aged 13 and over.