This privacy policy explains how the Oasis Android app ("Oasis", "we", "our", "us") collects, uses, stores, and shares your personal information when you use the app. By using Oasis you agree to the practices described here.
Oasis is operated by Boolean Autocrats. If you have any questions about this policy or your data, contact us at ping@neetesh.me.
If you choose to sign in, we receive the following from Google Sign-In: your name, email address, and profile picture URL. We use this to identify your cloud account and display a personalised greeting in the app. Signing in is optional — you can use the app fully offline without an account; cloud sync is only available to signed-in Pro subscribers.
The name, short bio, and optional profile photo you enter on the profile editor. Your profile photo is stored directly inside your cloud account as a base64-encoded image — we do not upload it to a public URL.
The habits you create, the colours and icons you assign, the dates you mark as complete, the streak and completion statistics we compute from those dates, and any optional theme / background you apply to a habit card.
We use Google Firebase Analytics to record events such as screen views, habit creation / check-in / deletion, onboarding progress, sign-in, theme toggles, and purchase taps. These events include non-identifying metadata (e.g. habit id and name, streak length). We use this to understand which features work and which don't.
Firebase Analytics also collects your device's Android Advertising ID (AAID), a resettable identifier provided by Google Play Services. We use it only for analytics — to deduplicate users and measure feature adoption — and never for advertising, ad personalisation, or building marketing profiles. We do not share it with advertising networks. You can reset the AAID or opt out of personalised ads at any time from your device's Settings → Privacy → Ads.
We use Google Firebase Crashlytics to receive anonymised crash reports including device model, operating system version, and stack traces when the app crashes. This helps us fix bugs quickly.
If you grant notification permissions, Firebase Cloud Messaging issues a device-specific token so we can deliver habit reminders and milestone nudges. We do not share this token externally.
If you purchase an Oasis Pro subscription through Google Play, we store the fact that your account is entitled to Pro features. Payment details (card, billing address, name on card) are handled entirely by Google Play — we never see them.
When a Pro subscription activates, our server asks our reforestation partner Tree-Nation to plant trees in your name. The partner returns a tree species, country, and optional certificate URL, which we store under your account so the app can display "Your Grove". We share only a short-lived idempotency key with the partner — no personal information beyond an optional beneficiary name that you can opt out of at any time by contacting us.
We share limited information only with the following service providers:
We do not sell, rent, or trade your personal data to advertisers or other third parties.
Data is stored in Google Firebase data centres. Firebase may store data in multiple regions for reliability. See the Firebase data locations documentation for details.
You have the right to:
If you are in the EU/EEA or UK, you also have rights under GDPR including the right to lodge a complaint with a supervisory authority. If you are in California, you have rights under the CCPA including the right to know and to delete. To exercise any of these, email ping@neetesh.me.
Oasis is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
Data in transit between the app and Firebase is encrypted using TLS. Data at rest in Firebase is encrypted using Google's infrastructure defaults. Access to your data requires authentication as you — enforced by Firebase Security Rules. That said, no system is 100% secure; please use a strong password on your Google account.
Oasis does not show ads and does not include third-party advertising or tracking SDKs beyond the Google Firebase services listed above. The Android Advertising ID collected by Firebase Analytics is used only for analytics — never for ad targeting, retargeting, or sale to advertising networks. We do not use cookies (Oasis is a native mobile app, not a website).
We may update this policy from time to time as the app evolves. When we do, we will update the "Last updated" date at the top. Material changes will be surfaced inside the app. Continued use of the app after a change constitutes acceptance of the revised policy.
Questions, complaints, or data requests: ping@neetesh.me.