DATA SAFETY & PRIVACY

Privacy Policy

Last Updated: November 2026 • Effective Date: November 15, 2026

1. Introduction & Overview

At Burning Desire ("we," "our," or "us"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, store, synchronize, and safeguard your data when you use the Burning Desire mobile application (the "App") and our marketing website (the "Website").

Our core architecture combines local-first execution speed with secure cloud synchronization: personal reflections are protected by automated privacy sanitization layers, and your goals are securely backed up so you never lose your streak.

2. Information We Collect

A. Information You Voluntarily Provide

  • Account Credentials: When you complete onboarding, you register an account with your email address and an encrypted hash of your password to authenticate your sessions.
  • Definite Chief Aim & Goals: Your target financial/achievement goal, service offered in return, target completion date, action plan, and synthesized autosuggestion statement.
  • Habit Check-Ins & Practice Logs: Morning and evening recitation completion records, timestamps, and active streak counts.
  • Reader Progress & Reflections: eBook reading progress, chapter bookmarks, custom text highlights, and personal reflective notes.
  • Support Communications: Any feedback, bug reports, or correspondence sent to our support inbox.

B. Information Collected Automatically

  • Usage Analytics (Firebase Analytics): We track screen navigation flows (e.g., onboarding, practice screen, book reader) and non-sensitive feature interactions. Privacy Guard: Our analytics implementation automatically filters and strips user text, goal statements, and personal journal inputs before transmission to ensure your goals remain private.
  • Crash & Diagnostic Reports (Firebase Crashlytics): To fix bugs and ensure stability, we collect stack traces of application errors, device state at the time of a crash (e.g., free memory, battery percentage, orientation), and device specifications.
  • Device & Network Identifiers: Standard telemetry processed by Google infrastructure includes device model, manufacturer, Android OS version, Google Advertising ID (AD_ID), and IP address (used by Google to determine coarse regional diagnostics, such as country/city, and handled according to Google's standard privacy policies).
  • Push Notification Tokens (FCM): Unique device tokens generated by Firebase Cloud Messaging to deliver service announcements and local reminder alarms.

3. Local Execution Speed & Secure Cloud Synchronization

Burning Desire is designed to deliver immediate responsiveness while guaranteeing data preservation:

Zero-Latency Local Storage

All daily recital check-ins, affirmations, and reader bookmarks write instantly to an encrypted local database on your device with 0ms latency. You can complete your morning and evening recitals even when completely offline.

Encrypted Cloud Backup

When you create your account upon completing onboarding, your Definite Chief Aim statement and practice streaks are encrypted and synchronized with our secure cloud servers, ensuring you never lose your progress across device changes.

4. Third-Party Service Providers

We partner with trusted third-party providers who adhere to strict data security standards:

  • Google Firebase (Google LLC): Powers application analytics, crash diagnostics, and push messaging. Firebase complies with major data privacy frameworks, including GDPR and ISO/IEC 27001.
  • Secure Cloud Infrastructure: Houses our encrypted backend API and cloud database to securely store user authentication records and synchronized app backups.
  • Google Play Services: Manages app distribution, automatic updates, and licensing verification on Android hardware.

5. User Data Deletion Instructions (Google Play Compliance)

We respect your right to completely erase your personal data at any time. You can delete your records through the following methods:

A. Deleting Local Device Data Instantly

• In-App Sign Out: Tapping "Sign Out" in the app drawer triggers our automated data wiper, which atomically wipes all local SQLite database tables immediately.
• Device Settings: On Android, navigate to Settings > Apps > Burning Desire > Storage > Clear Data, or uninstall the application. This permanently purges 100% of locally stored data from your device.

B. Deleting Cloud Account & Remote Data

To permanently delete your registered cloud account, email address, synchronized statements, and backup records from our secure servers, send an email request to:

connect.endurative@gmail.com

Please send the request from your registered email address with the subject line "Data Deletion Request". Your account and all associated cloud data will be permanently wiped from our active databases and backup logs within 30 days.

6. Children's Online Privacy Protection (COPPA)

Burning Desire is designed for adults and professionals studying self-improvement and personal achievement philosophy. The Service is not directed to individuals under the age of 13 (or under 16 in the European Economic Area).

We do not knowingly collect personal information from children. If we discover that a child under 13 has provided personal data to our cloud servers, we will immediately delete that information. Parents or guardians who believe their child has submitted personal data may contact us at connect.endurative@gmail.com.

7. Your Privacy Rights (GDPR & CCPA)

Depending on your geographical jurisdiction, you have specific legal rights regarding your personal information:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may update or correct your profile and statement records directly within the App.
  • Right to Erasure: You have the right to request permanent deletion of your data as outlined in Section 5.
  • Right to Restrict / Object: You may request complete erasure of your cloud account and stored synchronization records as outlined in Section 5.
  • Zero Sale of Personal Data: We do not sell, rent, monetize, or lease your personal information or journal entries to any data brokers or advertisers.

8. Website Cookie Transparency

Our marketing website (thinkandgrowrichpractice.com) is built as a static, privacy-focused resource. We do not place advertising cookies, profiling cookies, or tracking pixels on your web browser. Any future web performance telemetry will be completely anonymized and aggregate.

9. Contact & Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your data, please contact our team at:

connect.endurative@gmail.com