SendItMaxx is operated as an independent project. The app is accessible at senditmaxx.com. For privacy-related questions, contact us at [your support email].
We collect only what's necessary to make the app work. Here's a plain-English breakdown:
| Data | Why We Collect It | Required? |
|---|---|---|
| Username | Your identity in the app and community feed | Yes |
| Email address | To activate SendIt Pass after purchase. Never used for marketing without consent. | No — optional |
| Bio | Optional profile description visible to other users | No — optional |
| Challenge activity | Streaks, scores, completions, and history — powers the app's core features | Yes |
| Community posts & comments | Content you choose to share in the community feed | No — optional |
| Pact data | Your pact partner, pact streak, and invite codes | Only if you use Pacts |
| Anonymous session ID | A randomly generated ID that identifies your session without requiring login. Created automatically on first visit. | Yes — automatic |
| Device/browser data | Standard server logs (IP address, browser type, timestamp). Used for debugging and security only. Not stored long-term. | Yes — automatic |
We do not collect your real name, phone number, location, payment card details (Gumroad handles payments), or any sensitive personal information.
We do not use your data for advertising, sell it to third parties, or use it to build marketing profiles.
SendItMaxx uses anonymous authentication via Supabase. When you first open the app, a random session ID is automatically generated — no email or password required. This ID is stored in your browser's local storage and links your activity to your account.
If you clear your browser data or switch devices without linking an email, your session cannot be recovered. Adding an email in Settings helps us identify your account if needed.
Your data is stored using Supabase, a cloud database platform with row-level security (RLS) enabled. This means each user can only access their own data — other users cannot read your private information.
Data is stored on servers in the United States. We use industry-standard security practices including encrypted connections (HTTPS/TLS) and access controls.
No security system is perfect. If you discover a vulnerability, please contact us at [your support email].
We use a small number of third-party services to run the app:
We do not use Google Analytics, Facebook Pixel, or any advertising trackers.
Posts, comments, and challenge completions you share in the community feed are visible to all users of the app. Your username is attached to this content. Do not post anything you wouldn't want other users to see.
You can delete your own posts and comments at any time within the app. Deleted content is removed from the community feed immediately.
The app can send push notifications for streak reminders and pact nudges. Notifications are entirely optional — you must explicitly grant permission in your browser when prompted. You can disable notifications at any time in your browser settings or in the app under YOU → Settings.
We use browser local storage (not traditional cookies) to store your session, preferences, and app state locally on your device. This data never leaves your device unless it's synced to our database as part of normal app use.
We do not use third-party tracking cookies or advertising cookies of any kind.
You have the right to:
To exercise any of these rights, contact us at [your support email]. We'll respond within 30 days.
If you're in the European Economic Area (EEA), you have additional rights under GDPR. If you're in California, you have rights under CCPA. Contact us for specifics.
We keep your data for as long as your account is active. If you request deletion, we will remove your data within 30 days. Some anonymized aggregate data (total challenge completions, community stats) may be retained for analytics purposes — this data cannot be linked back to you.
SendItMaxx is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
We may update this privacy policy as the app evolves. When we make significant changes, we'll update the "Last updated" date at the top. Continued use of the app after changes means you accept the updated policy.
For any privacy questions, data requests, or concerns:
Email: Whytebread@protonmail.com
Website: senditmaxx.com
We aim to respond to all privacy-related requests within 30 days.