Privacy Policy

What Celebra Stores, and Where

Every event you create, along with its name, date, category, notes and avatar, is written to a local database on your device. Your settings are stored the same way.

Celebra has no user accounts and no servers of its own. We cannot see your events, because they never leave your phone unless you deliberately export them.

Uninstalling the app deletes this data. There is no copy of your events anywhere else for us to delete on your behalf.

App Permissions

Celebra asks the system for a permission only at the moment a feature needs it, and every permission is optional: denying one disables that feature and nothing else.

Notifications is used to show the reminders you schedule. On Android, Celebra may also ask for exact alarms and for an exemption from battery optimization, both of which exist so a reminder can fire at the exact minute you chose. Contacts is read-only and used only during an import you start yourself. Photos is used only when you choose to attach a picture to an event.

None of these permissions moves data off your device, and none of them is used in the background to collect anything.

Notifications

Reminders are scheduled and delivered on your device. Building a notification does not require sending your event to anyone, and Celebra does not.

You can turn reminders off entirely in Settings, or per event.

Contacts

Celebra can import birthdays from your address book. This is optional, it only runs when you start it, and the system asks for your permission first.

During an import the app reads names and birthday fields to show you a list to choose from. Only the entries you select are saved, and they are saved locally like any other event. Nothing is uploaded.

Photos

If you attach a photo to an event, the image is copied into the app's own storage on your device. It is not uploaded, backed up to us, or shared.

Purchases

Celebra Premium is sold through Google Play and the App Store. Your payment is processed entirely by Google or Apple, under their own terms and privacy policies, exactly like any other purchase on those stores. Your card and billing details go to them, never to Celebra, and we never see them.

To validate a purchase and know whether your subscription is active, the app uses RevenueCat, a subscription management service acting as our service provider. RevenueCat receives a random identifier generated for your installation, the purchase receipt issued by the store, and the basic device information the platform reports alongside it: device model, operating system version, app version, and store country. It uses this data only to manage your subscription, and it never receives your name, your email address, your events, your photos or your contacts.

If you never buy anything, that random identifier is still created so the app can ask whether an entitlement exists, but it is not connected to any personal information and cannot identify you.

RevenueCat's own privacy policy is available at revenuecat.com/privacy.

Network Requests

Celebra requests internet access for two reasons. The first is the purchase and subscription checks described above, which go to RevenueCat and to the store that sold the subscription. The second happens only if you switched product statistics on, and sends the counters described below to Aptabase. Both are encrypted in transit.

Nothing else in the app touches the network. Avatars are generated on your device, commemorative dates ship inside the app, and your event list works entirely offline. With product statistics left off and nothing bought, Celebra makes no network request at all.

Backup and Restore

A backup is created only when you ask for one. Celebra never exports, syncs or uploads your data automatically, on a schedule, or in the background.

When you do export, your data goes into a single file that Celebra hands to your operating system's share sheet, and you decide where it goes: your own storage, a cloud drive, a message to yourself.

We do not receive a copy. Once the file leaves the app, it is governed by whichever service you send it to.

Product Statistics and Advertising

There is no advertising. Celebra contains no advertising SDK and no tracking SDK, nothing you do is used to build a profile of you, and nothing is shared with data brokers or ad networks. Crash reports are covered above and are off by default in the same way.

Product statistics are optional and off until you switch them on. Left alone, which is the default, the app collects nothing and makes no statistics request at all. The switch is in Settings, next to a plain explanation of what it does, and turning it off stops collection immediately rather than at the end of the session.

With them on, Celebra sends a small set of counters about how the app is used, never about who you are or what you put in it. The kind of thing they record: that a reminder was opened, that the upgrade screen was viewed and which feature led there, that the notification permission was denied, that a backup was exported. No account, no device identifier and no advertising identifier travels with them, so they cannot be traced back to you, joined into a profile, or used to recognise you on another app or another device.

What is never included: names, event titles, dates, notes, photos, avatars, colours, contacts, or anything else you typed or imported. Every value that can be sent is a fixed label from a short list written into the app, a whole number, or a true or false flag, and the app's test suite fails the build if anything else ever reaches the sending code.

The counters are received by Aptabase, an analytics provider built for this specific purpose, acting as our processor. The app sends them no device identifier, no advertising identifier and no cookie. So that they can count how many phones something happened on without knowing whose, their servers derive an anonymous number from your IP address, the standard technical details any network request carries, and a secret that is replaced every day. Your IP address is used for that calculation and is not stored. Because the secret changes daily, the same phone cannot be recognised from one day to the next, which is precisely why these statistics can never accumulate into a history of you, and also why they can tell us that a screen was opened but never that you opened it.

We use Aptabase's European region, so this data is processed and stored in the EU, and it is kept for at most five years. Their privacy policy is at aptabase.com/legal/privacy.

Data Safety

Everything Celebra stores locally is protected by your device's app sandbox, which prevents other apps from reading it. Because there is no server-side copy of your events, there is nothing for us to leak, sell or lose.

Your events stay on your device until you delete them or uninstall the app. RevenueCat keeps the purchase record described above for as long as it is needed to manage your subscription, and we can ask it to delete that record at your request.

This is also what the store listings declare: Google Play's Data safety section and Apple's privacy label for Celebra list purchase history and an app-scoped identifier, used for app functionality, plus app interaction data used for analytics for the people who choose to turn product statistics on. Nothing is shared with anyone for advertising or tracking, and none of it is linked to your identity.

Requesting Data Deletion

Celebra keeps your events, names, dates, photos and settings only on your device. Uninstalling the app permanently deletes all of it, immediately, with no copy left anywhere. If you never bought a subscription, there is nothing else to delete.

If you purchased Celebra Premium, one record exists off your device: the purchase history and app-scoped identifier held by RevenueCat, described above. To have it deleted, email [email protected] with the subject "Data deletion" and, if possible, your Google Play or App Store order number so we can locate the record. We will delete it within 30 days and confirm by reply.

What is kept: the payment record held by Google Play or the App Store itself, which the stores retain under their own policies for legal and accounting reasons; we cannot delete that on their behalf.

This Website

This site sets no tracking cookies and runs no analytics.

The early access form is the only place it collects anything. What you enter there, meaning your first name, email address, country, which phone you carry, whether you want to test before launch, and how you track birthdays today, is stored in a database we control, operated for us by Neon as our hosting provider.

It is used for two things and nothing else: telling you when Celebra launches, and deciding which platform and which country to launch in first. It is never sold, never shared with advertisers, and never linked to anything in the app, which does not know this list exists. Write to us and we will send you a copy of your entry or delete it.

Children

Celebra is not directed at children under 13 and does not knowingly collect personal information from them. The app has no accounts, no chat and no ads, and the only data that ever leaves the device is the anonymous purchase data described above and, if they have been switched on, the anonymous product statistics, and purchases go through the store's own parental controls.

If you believe a child has given us personal information, contact us and we will delete it.

Your Rights

Depending on where you live, laws such as the GDPR in the European Economic Area and the United Kingdom, the LGPD in Brazil, and the CCPA in California give you rights over your personal data: to access it, correct it, export it, and delete it. Celebra extends these rights to everyone, wherever you live.

For your events, all four are already in your hands: the app shows them, edits them, exports them and deletes them, with no request to us needed.

For the data held by RevenueCat, and for the early access details described above, write to us and we will action it. We do not sell personal data, so there is nothing to opt out of.

Product statistics work differently, and it is worth being plain about why. Because the counters arrive with no identifier of any kind, there is no way to find yours among them, which means there is nothing individual for us to show you or delete. That is the same property that makes them impossible to use against you. Turning the switch off in Settings stops any further collection.

Changes

If this policy changes in a way that affects you, the date at the top of this page changes with it, and material changes will be announced in the app.

Contact

Questions about any of this can go to: