Privacy Policy
Effective September 6, 2026
FromLvlZero is a drawing-practice tracker operated by Darcnai, the independent developer of FromLvlZero. We built it to document your practice, not to build an advertising profile.
Information we handle
- Account: email address, internal account ID, and optional display name. Supabase Auth processes your password; the developer cannot see it in plain text.
- Practice: session dates and times, duration, projects, goals, skills, mediums, milestones, and notes you choose to enter.
- Technical service data: Supabase, Resend, and Expo may process limited information needed for authentication, account email, security, and app updates, including IP address, operating system, service logs, and a randomized installation token.
- On-device only: reminder choices, app-lock preference, active timers, and practice waiting to sync.
We do not use advertising or marketing analytics trackers. We do not access your camera, photos, contacts, or precise location. We do not sell or rent personal information.
How we use it
We use information to create and protect your account, save and synchronize practice, calculate the progress shown to you, send confirmation and recovery email, deliver app updates, troubleshoot failures, and fulfill export or deletion requests.
Service providers
Supabase provides authentication, database, and server functions. Resend delivers transactional account email. Expo provides app builds and over-the-air updates. These providers process information for FromLvlZero under their own security and privacy terms. We do not share personal information with advertisers or data brokers.
Optional tips
The optional button opens an unparameterized Ko-fi page in your browser. The app sends no account information to Ko-fi and never receives card details. If you tip, Ko-fi and its connected payment provider process it under their policies, and the developer may see transaction details in their dashboards. A tip unlocks nothing.
Security
Data travels over encrypted connections. Account-scoped database rules protect user records, privileged credentials are not included in the app, and authentication sessions use device secure storage. If you enable app lock, your phone performs the device-security check; FromLvlZero receives no biometric data.
Retention, deletion, and your choices
We retain account and synced practice data while your account is active. Delete it permanently in Profile & Settings → Delete my account, or follow our account deletion instructions. A limited operational deletion record may remain for up to 30 days after completion; pending failure records remain until deletion completes. Provider security, email, and disaster-recovery records expire under provider schedules and are not used to recreate an account.
You can edit practice records and export CSV or JSON from Profile & Settings. Contact support@fromlvlzero.com for help.
Age
FromLvlZero is intended for people age 13 and older. It is not directed to children under 13. Contact us if you believe a child under 13 supplied information so we can delete it.
Changes
We will update this policy when data practices change and provide appropriate notice of material changes.