Slump is operated by Slump App LLC. You can reach the founders at jack@slumpapp.com or aidan@slumpapp.com for any privacy question, data request, or security report.

We try to collect as little as we need to make Slump work.

• Account info - your email address and a hashed password (or an OAuth identifier if you sign in with Google or Apple). We use a third-party authentication service (Lovable Cloud / Supabase Auth) to handle this.
• App state you create - your onboarding answers, assigned archetype, daily routine schedule, task logs, XP, journal entries, reminder preferences, and (if you opt in) anonymous forum posts and replies.
• Device / push tokens - only if you turn on reminders, so we can send the notification you asked for.
• Basic technical info - standard request data your browser sends (IP address, user agent, timestamps) used to operate and secure the service.

Some of what you write - onboarding answers, journal entries, forum posts - can be personal or sensitive. Please don't enter information you wouldn't want stored.

• We don't sell your personal information.
• We don't use third-party advertising trackers in the app.
• We don't read the content of your journal entries to train AI models.

• To create and maintain your account.
• To save and sync your routine, XP, and journal across devices.
• To deliver reminders you've opted in to.
• To run the anonymous forum and moderate abuse or spam.
• To operate, debug, and improve the service.
• To meet legal obligations or respond to lawful requests.

The forum is pseudonymous: posts and replies appear under a randomly-generated handle, not your name or email. Other users can't see who you are. Slump can associate a handle with the underlying account for safety, moderation, and legal reasons.

We rely on a small set of vendors to run Slump. They process data only on our behalf, under their own security and privacy terms:

• Lovable Cloud / Supabase - authentication, database, and hosting for your app state.
• Web Push / Apple Push Notification Service - only when you opt in to reminders.
• OAuth providers (Google, Apple) - only if you choose to sign in with them.

The Help Near You feature can use your device location to find mental-health providers near you. Location is only used when you tap "Find help near me" and grant permission in your browser or device - it is never collected in the background.

• Your coordinates are sent once per search to our server only to run the provider search query. We do not store them, log them to your account, or share them with the listed providers.
• You can skip location entirely and enter a ZIP code instead. ZIP codes you enter are used only to look up an approximate area for that search and are not saved to your profile.
• You can revoke location permission at any time in your browser or device settings; Slump will fall back to the ZIP input.
• The provider directory is informational only. Slump does not vet, endorse, or refer providers - please verify any provider's license and credentials independently.

Connections to Slump use HTTPS. Account data is stored in a managed database with row-level access controls so that, by default, you can only read and write your own data. No system can be guaranteed perfectly secure; please use a strong, unique password and tell us right away if you suspect a problem.

We keep your account data for as long as your account is active. You can request deletion of your account and associated data at any time by emailing jack@slumpapp.com. Some records (e.g. anonymized logs, backups, legal records) may persist for a limited period after deletion.

• Turn reminders on or off in the You tab.
• Edit or delete journal entries any time.
• Grant or revoke location permission per search; use ZIP entry as an alternative.
• Request a copy of your data, correction, or deletion by emailing us.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. Contact us and we'll honor valid requests.

Slump is not directed to children under 16 and is not intended for their use. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe a child under 16 has provided us information, contact us at jack@slumpapp.com and we'll delete the account and associated data.

Slump is operated from the United States. By using the service you understand your information may be processed in the U.S. and other countries where our service providers operate.

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. If the change is significant, we'll ask you to re-acknowledge it in the app.

Questions, data requests, or security reports:
Slump App LLC
jack@slumpapp.com
aidan@slumpapp.com