Privacy Policy

Resuming by Cheerful Games, Inc.

This Privacy Policy explains how Cheerful Games, Inc. (“we”, “us”, or “our”) collects, uses, shares, and protects information when you use Resuming (the “Service”). By using the Service, you agree to this Policy.

Who we are

Resuming is operated by Cheerful Games, Inc. For privacy questions or requests, contact us at resuming.me@gmail.com.

If you live in India, that address is our grievance contact under the Digital Personal Data Protection Act, 2023. You may write to us to access, correct, or erase your personal data, or to make a complaint. We may need to verify that the request comes from you.

Where the law requires your consent, we rely on you choosing to create an account and choosing to add a medicine, a health measurement, or another log.

Information we collect

We collect the following categories of information:

• Account information. When you sign in with Google, Sign in with Apple, or an email magic link, we receive authentication details needed to create and maintain your account — typically your email address, name (if provided by Google or Apple), profile image URL (if provided), and a stable account identifier. If Apple hides your email, we store the address Apple gives us.
• App content you create. Activities, health measurements you choose to log (such as blood pressure, heart rate, weight, and sleep), log entries, timers, micro-steps, timezone preferences, and related settings you enter in the Service.
• Medicines. If you are signed in, we store each medicine’s name, the days of the week, the times, and whether you marked a dose taken. If you add a bottle photo, we store that image with your account. A guest setup does not keep the photo. The photo and the reminders are a reminder. They are not medical advice.
• Reminders. If you are signed in, we store each reminder’s text, its day, an optional time, its kind, whether it comes back every year, whether you asked for an alert the day before, and when you marked it done. We store them to show them on Today and to alert you. A guest’s reminders stay on the device.
• Shared events. If you share a reminder, we store its text, the optional From line you type, its day, time, time zone and kind, and a short link code, tied to your account. Anyone with the link can see the text, the From line and the time, but never your name, email or phone number. When someone adds a shared event, we store that their account, or an anonymous id for their device, follows it, so we can count how many people added it and tell their copy if it is cancelled. We do not show the organizer who added it. If someone reports an event, we store the reason and their account or anonymous device id.
• Steps. On Android, if you allow it, the app reads your step counts from Health Connect on your phone: today’s count, shown on Today, and your daily totals for the last 7 days, shown next to your goal. On iPhone, if you allow it, the app reads the same counts from Apple Health. We do not write steps to Health Connect or Apple Health. A number you type, and your daily step goal, stay on this device. If you join a walking challenge, opening the app sends that day’s step total to our servers so the team score can include it. The group sees the team total, not your number. We do not send a step-by-step record. Our use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. Apple Health step counts are used only to show them in the app.
• Feedback. If you submit feedback, we store your rating, comments, and any name or email you choose to provide, plus your user id if you are signed in.
• Technical & device data. Limited operational data needed to run the Service (for example, session tokens and basic request metadata processed by our infrastructure providers). We do not run advertising or third-party marketing analytics. We collect first-party page-view events (page path, approximate referrer, browser/device class, and an anonymous visitor id) and first-party product events (for example, sign-in, activity created, log created/undone, insights viewed, and app opened — with non-identifying props such as activity type or duration, never activity names, notes, or other personal text) so site operators can understand usage of the Service. These events stay on our first-party infrastructure; we do not send them to third-party analytics vendors.
• Install source (Android). When you install Resuming from Google Play, the app reads the install referrer that Google Play gives it: the campaign tag, if any, in the link you used. If that link came from a referral group, we store the tag with a hash of your Android device ID (not the ID itself) and, once you are signed in, a link to your account, so we can count installs, and the people with an account who go on to open the app on several days, for that group. Referral groups may be paid based on those counts. We do not use this for advertising and we do not share it with anyone else. Like other usage data, the device ID in it is replaced with a random value after 13 months.
• Website visits (resuming.app). On our website we count visits and button taps with first-party events: when a page is viewed (its language, whether you are on a phone or a computer, the website you came from, and any campaign tag in the link you used), and when you tap a Google Play button or a “Try it in your browser” button. A random visitor id, stored in your browser and not linked to an account, ties these together. We do not save your IP address or the full address of the page you came from with these events, and we do not record them when your browser sends Do Not Track or Global Privacy Control. They stay on our first-party infrastructure and are not sent to third-party analytics vendors. If you visit from the European Union, the United Kingdom, Switzerland, Norway, Iceland or Liechtenstein, we ask first and count nothing until you say yes; you can change your answer at any time with the “Visit counting” link in the website footer.
• Local device storage. On your device we may store session credentials, theme preference, onboarding state, daily reminder preference, active timer state, and offline sync queues so the app works reliably between visits. See “Cookies & local storage” below. On Android and on iPhone, an optional daily reminder, medicine reminders, and alerts for your own reminders are scheduled on the device only. They are not delivered through a cloud push service. A typed step count and the daily step goal stay on the device.

How we use information

We use information to:

• Provide, operate, secure, and improve Resuming
• Authenticate you and keep you signed in
• Sync your activities and logs and compute Insights from your own data
• Respond to feedback and support requests
• Understand aggregate website and product usage through first-party analytics
• Detect, prevent, and address abuse, security, or technical issues
• Comply with legal obligations

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Your reminders are private unless you choose Share on WhatsApp. A shared event can be seen by anyone with its link. Reminder and event text is not sent to our analytics, which count only how many reminders and shared events are added, opened and done.

Health information

Blood pressure, heart rate, weight, sleep, medicine names, dose times, dose marks, and bottle photos are health information. We store them when you are signed in and you add them, so the Service can show your log and your reminders. We do not sell this information. We do not use it for advertising. Deleting the item, or deleting your account, removes it from our active systems. Deleted data can remain in our backups for up to 7 days. Step counts from Apple Health and from Health Connect stay on your phone. We do not store them on our servers.

This Service is a personal log. It is not a clinic, a medical record under the US HIPAA rules, or a medical device. A bottle photo and a reminder are a reminder. They are not medical advice.

If you are a consumer in Washington State, this section is our notice for consumer health data under the Washington My Health My Data Act. We collect that data because you asked the Service to keep that log or reminder. We do not sell it. You may ask us to delete it by deleting the item or the account, or by emailing us.

How we share information

We share information only as needed to operate the Service or as required by law:

• Service providers. Google, Apple, and email magic links (sign-in; the same email can belong to one account when it is already linked), Supabase (authentication, database, and related backend services), Resend (optional day 2, 3, and 7 check-in emails, only if you ask for a reminder, and a morning email listing that day’s reminders, only if you turn it on in Settings), and hosting/CDN providers that process data on our behalf to run the Service.
• Legal & safety. If we reasonably believe disclosure is required to comply with law, enforce our Terms, or protect the rights, safety, or security of users or the public.
• Business transfers. If we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy or equivalent protections.

Third parties named above have their own privacy practices. We encourage you to review Google’s, Apple’s, and Supabase’s policies for details on their processing.

Cookies & local storage

Resuming does not use advertising cookies or third-party marketing trackers. We (and our infrastructure providers) use browser storage and similar technologies so the Service functions, and to count visits to our website, including:

• Authentication / session storage so you stay signed in
• Local preferences such as theme, language, onboarding completion, daily reminder time, a typed step count, the daily step goal, and in-progress timer state
• A service worker / progressive web app cache that stores app assets for faster loading and offline resilience
• On resuming.app only: a random visitor id in your browser’s local storage (not a cookie), used to count visits and button taps. The website works without it, and in the regions above it is only saved after you agree

Apart from the website visitor id, these technologies are necessary for core functionality. You can clear site data in your browser or sign out to remove session credentials and the visitor id; doing so may sign you out or reset local preferences. If we later introduce other analytics or non-essential cookies, we will update this Policy and, where required by law, request your consent before using them.

Retention

We retain account and app content for as long as your account remains active and as needed to provide the Service. Feedback may be retained longer as needed to improve the product and handle support. We may retain limited records where required for legal, security, or operational purposes. When you delete content in the app, we remove it from active systems. Deleted data can remain in our backups for up to 7 days. Deleting a medicine removes its bottle photo. Deleting your account removes those photos with the rest of your account data.

Usage data is kept for a limited time. Anonymous usage events, website visit counts and page views are deleted automatically after 13 months. When you delete your account, we also delete your usage events, including those your device sent before you signed in. Referral install records hold a hashed device ID and a referral group, and, once you are signed in, a link to your account, which is used only to count retained people for that group. When you delete your account, that link is removed. After 13 months the device ID in the record is replaced with a random value.

Security

App data is stored in Supabase-hosted infrastructure with access controls, including row-level security intended to scope user data to the signed-in account. No method of transmission or storage is completely secure; we work to protect your information but cannot guarantee absolute security.

Your choices & rights

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you
• Export a copy of your information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

You can edit or delete many records directly in the app, and you can sign out at any time. In Settings → Account you can Export my data (download a copy of your activities, logs, metrics, and reminders — medicine names, times, and bottle photos are not included) or Delete my account (permanent removal after typing DELETE). Email us for a copy of those medicine records. See also how to delete your account. For help when you cannot use the app, or for other privacy requests, email resuming.me@gmail.com. We may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with a data protection authority in your region.

Children’s privacy

Resuming is for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information, contact us and we will delete it.

International processing

We and our service providers process information in the United States and in Canada, where the account database is hosted. Google and Apple process sign-in. Our email provider sends messages you ask for. Those locations may have different data-protection laws than your home country. For people in India, we transfer personal data outside India so we can provide the account. India allows that transfer except to countries the Government of India restricts.

Waitlist emails

If you ask us to tell you when the iPhone app launches, or when your school district is added, we store your email address, the page you signed up on, your language, and, for school districts, your ZIP code. We use this only to send that one email. We don’t add you to any other list, and we never sell or share your email. We delete waitlist emails within 30 days after sending the notification. To be removed sooner, email resuming.me@gmail.com.

Changes to this Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date below. If we materially change what health information we collect or how we use it, we will notify you in the Service before that change applies. For other updates, continued use after the update means you acknowledge the revised Policy.

Contact

Privacy requests, and complaints from people in India: resuming.me@gmail.com

Last updated: October 29, 2026

© 2026 Cheerful Games, Inc.