This Privacy Policy describes how Cairn ("we," "our," or "the App") handles information.

1. Camera Access

Cairn requests camera access for real-time pose detection during exercise. The camera feed is processed on-device by the MediaPipe Pose Landmarker model to count repetitions.

• The camera feed is never recorded.
• The camera feed is never stored by Cairn.
• Camera frames are not transmitted to Cairn, RevenueCat, Meta, or Google Play.
• No photos or videos from the camera are saved by Cairn.

2. Accessibility Service

Cairn uses the Android Accessibility Service for two user-enabled protection features:

• Pause Detection: when a supported browser is in the foreground, Cairn reads URL-bar text and compares the domain on-device against the bundled blocklist and any domains you add.
• Commitment Mode: only when you enable this optional mode, Cairn checks text labels on Cairn’s own Android App Info screen to detect an uninstall attempt and open a pause.
• Cairn does not inspect browser page content, messages, notifications, emails, or passwords.
• URL and App Info text is processed on-device and is not stored by Cairn after the check.
• Cairn does not send URLs, browsing history, App Info text, or screen contents to Cairn, RevenueCat, Meta, or Google Play.
• Only aggregate counts such as completed exercises or intercepted urges are stored locally.

3. Information Stored Only on Your Device

Cairn stores the following in localStorage or Android SharedPreferences:

• Exercise logs: date and completed-exercise count.
• Streak and milestone data.
• Interception counts: counts only, without URLs or browsing context.
• Settings: exercise, intensity, protected sites, and commitment reason.
• Onboarding, tester-access, review-prompt, and feature state.

This local product data is not synced to Cairn servers or included in Android backups. Uninstalling Cairn deletes it from the device.

4. Subscription and Purchase Data

Cairn uses Google Play Billing and RevenueCat to offer and manage subscriptions. RevenueCat receives purchase history and subscription status associated with an automatically generated App User ID. This may include product identifiers, purchase or trial status, renewal status, price, currency, and related transaction information supplied by Google Play.

This information is used to provide paid access, restore purchases, operate subscriptions, measure subscription performance, prevent fraud, and support customers. It is encrypted in transit. Cairn does not receive your full payment-card details.

5. Advertising Measurement

Cairn includes the Meta/Facebook SDK to measure advertising performance. Meta may receive Android advertising or device identifiers and app events such as app install, app launch, trial start, purchase, and subscription events. These events are used for advertising attribution, measurement, and optimization.

RevenueCat's configured Meta integration may also send subscription lifecycle events to Meta for the same purposes. Cairn does not include visited URLs, camera frames, exercise logs, streaks, or commitment reasons in these events.

6. Internet Access and Third Parties

Cairn uses internet access for subscription management, advertising measurement, and, when the bundled pose model cannot be loaded, downloading the MediaPipe model from Google's delivery infrastructure.

• Google Play: app distribution, billing, subscription transactions, and store services. See Google's Privacy Policy.
• Gmail: receives iOS waitlist signup notifications submitted through cairnhabit.com. See Google's Privacy Policy.
• RevenueCat: subscription status, purchase history, entitlement management, restoration, and subscription analytics. See RevenueCat's Privacy Policy.
• Meta: advertising identifiers and app/subscription events for ad attribution, measurement, and optimization. See Meta's Privacy Policy.
• MediaPipe Tasks Vision: on-device pose detection. Camera frames are processed locally.
• Capacitor: framework bridge between the web interface and Android features.

7. Website iOS Waitlist

If you enter an email address in the optional iOS waitlist form on cairnhabit.com, we use it only to send the iOS launch notice. The form sends a signup notification to our Gmail inbox. We do not sell the address or use it for unrelated marketing. To remove your address before launch, contact privacy@cairnhabit.com.

8. What We Do Not Collect or Send

• We do not require a Cairn account or collect your name, email address, or phone number in the App.
• We do not collect precise location.
• We do not read your messages, emails, notifications, passwords, or page content.
• We do not send browsing history, visited URLs, camera content, exercise history, streaks, or commitment reasons to our subscription or advertising providers.
• We do not sell browsing or camera data.

9. Retention and Deletion

Uninstalling Cairn deletes the product data stored locally on that device. It does not automatically delete transaction records retained by Google Play, RevenueCat, or advertising-event records retained by Meta.

To request deletion of a RevenueCat customer record controlled by Cairn, contact privacy@cairnhabit.com. Google Play transaction data and Meta advertising data are also governed by their respective privacy policies and account controls.

iOS waitlist emails are retained until the iOS launch notification has been sent, or deleted earlier on request.

10. Children's Privacy

Cairn is intended for adults and is not directed at children under 18. We do not knowingly solicit names, email addresses, or other direct contact information from children.

11. Security and International Processing

Data sent to the third-party providers listed above is encrypted in transit. Those providers may process information in countries other than your own under their published terms and privacy policies. No internet transmission or storage system is guaranteed to be completely secure.

12. Changes to This Policy

We will update this page when Cairn's data practices or service providers change. The date at the top identifies the latest revision.

13. Contact

For privacy questions or eligible deletion requests, contact: privacy@cairnhabit.com