Privacy Policy

Last updated: July 11, 2026

Overview

Adi is an AI-first daily planner for iOS. This policy explains what we collect, why we collect it, who we share it with, and the choices and rights you have.

Adi is operated by an independent developer based in Mexico. You can reach us about privacy at support@getadi.app.

In short: we collect what's needed to run your account, generate your AI plans, and manage your subscription. Your brain dump and onboarding answers are sent to our AI provider to build your plan, and reviewed by you before anything is saved. We don't sell your data, and you can permanently delete your account and all associated data at any time from Settings → Delete Account.

1. What we collect and why

Account and identity

Your Apple ID identifier via Sign in with Apple (we never receive your Apple password), and your name, provided during onboarding — to create and secure your account.

Onboarding and planning content

Your selected struggle, preferred day start time, energy peak time, and chosen recurring habits, plus task titles, notes, and anything you type into a brain dump or the AI chat — to generate, sequence, and adjust your daily plan.

Subscriptions and purchases

Transaction and entitlement status from Apple and RevenueCat — to manage your subscription and unlock the app.

Analytics

Product usage events via PostHog, once integrated — to understand how Adi is used and improve it.

We do not use advertising SDKs and do not collect data for cross-app or cross-site tracking.

2. Sensitive information

Some of what you share with Adi — including your selected struggle and anything you write in a brain dump — may reveal health-related or mental-health-related information. We treat this as sensitive information. We use it only to generate and adjust your daily plan, and we do not sell it, share it for advertising, or use it for any purpose beyond providing the Service to you. By using Adi and providing this information, you consent to our processing it as described in this policy.

3. AI processing

When you submit a brain dump or chat with Adi, your input — along with your onboarding context and a summary of your existing tasks — is sent to OpenAI's API to generate a structured plan. You review and approve any plan before it's saved to your account.

Per OpenAI's own policies, data sent to their API is not used to train or improve their models, and is retained for up to 30 days for abuse-monitoring purposes before being removed from their systems, unless legally required to be kept longer. Adi does not use fully automated decision-making that produces legal or similarly significant effects without your review.

4. Who we share information with

We share information only with service providers who help us operate Adi, each acting under their own privacy and security obligations. We do not sell your personal information, and we do not share it with third parties for advertising or cross-context behavioral advertising purposes.

  • Supabase — our database, authentication, and backend hosting provider. Stores your account data, tasks, notes, and onboarding answers.
  • OpenAI — receives your brain dump text, onboarding context, and a summary of your existing tasks to generate your plan (see "AI processing" above).
  • RevenueCat — manages subscription and purchase events. Does not receive your payment card details.
  • Upstash — used only for rate-limiting; does not store personal information.
  • Resend — delivers transactional emails, such as routing feedback to our support inbox.
  • Apple — provides Sign in with Apple authentication and processes all in-app purchases and subscriptions via the App Store.
  • PostHog — provides product analytics to help us understand how Adi is used (once integrated).

5. Data retention

  • Account, task, and onboarding data: retained until you delete your account.
  • Subscription and transaction records: retained as long as needed for billing, tax, and fraud-prevention purposes, even after account deletion.
  • AI processing data: retained by OpenAI for up to 30 days for abuse monitoring, per their policy (see "AI processing" above).
  • Analytics events: retained by PostHog according to our analytics configuration, once integrated.

You can permanently delete your account and all associated data at any time from within the app via Settings → Delete Account. This is irreversible. After deletion, we may retain limited records where required to comply with the law, resolve disputes, or prevent fraud and abuse.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

  • Delete everything: open the app and go to Settings → Delete Account.
  • Access or correct: most profile and onboarding data can be edited directly in the app; for anything else, email us.

To make any privacy request, email support@getadi.app. We may need to verify your identity before acting on it.

Mexico

If you are located in Mexico, you have rights under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), including access, rectification, cancellation, and opposition to the processing of your personal data ("ARCO rights"), and the right to file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

California residents

We do not sell or share (as defined under California law) your personal information. California residents have the right to know, delete, correct, and limit the use of sensitive personal information, and the right to be free from discrimination for exercising these rights.

European users

If you are located in the European Economic Area or United Kingdom, you have rights under the GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is primarily the performance of our contract with you (providing the Service) and, for sensitive information, your consent.

7. International data transfers

Adi's service providers are primarily US-based. Regardless of where you are located, your information may be transferred to and processed in the United States, using appropriate safeguards where required.

8. Children's privacy

Adi is not directed to, and is not intended for use by, anyone under the age of 13 (or under 16 in the European Economic Area and UK). We do not knowingly collect personal information from children. If we learn we have done so, we will delete it promptly.

9. Security

We use industry-standard technical and organizational measures, including encryption in transit, access controls, and authenticated access, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the "last updated" date above. Continued use of Adi after an update means you accept the revised policy.

11. Contact us

If you have questions about this Privacy Policy, contact us at support@getadi.app.