Privacy Policy
How we handle your personal information and the choices you have over it.
Last updated:
1. Scope of this policy
Phynix is a habit companion by Zatricx. In this policy, “Phynix,” “we,” “us,” and “our” refer to the team providing the Phynix service. This policy explains how we handle personal information when you visit phynix.app, join our waitlist, or use the app. It covers information you provide, information generated through your use of the service, and information processed by our service providers.
2. Waitlist information
When you join the waitlist, we store your email address, signup time, where on the landing page you joined, and your product-update choice in our server-side database. This is separate from an app account. Joining asks us to email you when access is available; occasional product news is optional and unchecked by default. We record the consent wording version and the time of any update opt-in. Only authorized administrators can view or export the list. Joining does not verify ownership of your email address. Please use your own. To ask about your entry or have it removed, email contact@zatricx.com.
3. How we use your information
We use personal information to operate the website, manage waitlist invitations, authenticate accounts, synchronize app data, deliver features you use, and respond to service issues. We also process usage and diagnostic information to understand how Phynix is used, improve reliability, investigate errors, and prevent abuse. Optional product updates are separate from the information needed to provide the service.
4. Email communications and your choices
We use your waitlist email to contact you when access is available. Occasional Phynix news, product updates and new blog posts require the separate, optional checkbox. You can join without selecting it. The current signup saves your place without creating an app account, requiring a payment card, or enrolling you in a paid subscription. Declining product updates does not affect your place on the waitlist.
5. App content and local storage
When you use the app, habits, routines, check-ins, moods, reflections, and progression are stored in your browser’s local database. Signed-in use also syncs supported records and uploads to our servers. Local-first means you can keep using supported features offline; it does not mean your information never leaves your device. Private-beta access still requires an invitation.
6. Account information
Clerk handles account sign-in and session information. We use account identifiers, your email, and profile details you provide to operate your account, connect your devices, and deliver enabled features. Waitlist entries are stored separately from account records.
7. Cookies, analytics, and diagnostics
The website uses browser storage for preferences and local app data, and sign-in uses session technologies such as cookies. When configured, PostHog receives usage events and page views, and Sentry receives error diagnostics. With your permission, Google Analytics uses cookies to measure visits to public pages and the websites that refer visitors. Referring-page paths and search terms are excluded. It does not receive your habit records, personal journal content, email address, or account identifier from us. You can decline or change this choice through Analytics preferences in the footer. We keep advertising features and automatic form tracking disabled. Our hosting and security services process request metadata, including IP addresses, to deliver the website and limit abuse. Account users can find the analytics preference in Settings → Data & Privacy. That preference does not disable essential account or security processing.
8. Service providers and disclosures
We use Vercel for hosting and Supabase for database and file storage. Other services support particular features: Clerk for authentication, PostHog and Google Analytics for analytics, Sentry for diagnostics, Resend for email delivery, Upstash for request limiting, and RevenueCat for purchase and entitlement information. Enabling push notifications also involves your browser’s notification delivery service. Providers receive information needed to deliver the relevant feature. Information may be processed outside the country where you live. We do not sell your waitlist information. We may disclose information when required by applicable law or a valid legal process.
9. AI suggestions and voice input
AI features can send the relevant habit text and context to Anthropic to generate a response. Voice input sends the audio you record to OpenAI for transcription. These features involve processing by external providers. Avoid including information you do not want processed this way.
10. Public content
Information you choose to post on the public feedback board, including posts and comments, can be viewed by other people. Do not include your email address, journal content, health information, or other private details in a public post. Public feedback and private app records serve different purposes and have different visibility.
11. Retention and deletion
Waitlist records remain until an administrator removes them; there is no automatic expiry. App records remain on your device and, when synced, on our servers until removed through the applicable data or account controls. Server deletion and clearing a device’s browser storage are separate actions. Previously exported waitlist files and any copies held by an email provider need to be handled separately.
12. Your choices and privacy rights
App users can find export and deletion controls in Settings → Data & Privacy; read the confirmation to understand what each action removes. Deleting an app account does not automatically remove a separate waitlist entry. You can control browser storage through your browser settings and notification permissions through your browser or device settings. Clearing local storage can remove records that have not synchronized. Depending on the law that applies to you, you may have rights to access, correct, export, or delete personal information; withdraw consent; or object to or restrict certain processing. We may need to verify your identity before acting on a request. You may also raise a concern with the privacy regulator in your jurisdiction. Requests and questions go to contact@zatricx.com. Our Help Center explains the app’s data and account controls; the public feedback board should not be used for private information or identity verification.
13. Security
We use account authentication, access controls, app-scoped data access, and request limits to protect the service. Access to waitlist management is restricted to authorized administrators. No method of storage or transmission can guarantee absolute security. Keep your sign-in credentials and the devices you use with Phynix protected.
14. Changes to this policy
We may update this policy as our services or information practices change. The current version is available on this page, with the revision date shown above. Where applicable law requires additional notice or consent for a change, we will provide that notice or seek that consent.