Privacy Policy

Information We Collect

We collect the following categories of information across our website and app to provide and improve our services:

A. Website (healingwithexcellence.com)

B. HealTracker App

C. Kiminisim App

D. GoalFuel App

E. Birthday Tracker App

F. Daily Istiqamah App

How We Use Your Information

Your information is used to deliver and enhance our website and app experiences:

Website

• Deliver purchased courses, certifications, and wellness evaluations
• Process transactions for courses, bundles, and digital products
• Send newsletters, updates, and promotional materials (with your consent)
• Improve website content, layout, and user experience
• Respond to inquiries and provide customer support

HealTracker App

• Create and manage your user account
• Provide personalized workout programs and meal plans
• Track your health and fitness progress over time
• Process payments for premium subscriptions and book purchases
• Send important service notifications (e.g., subscription updates)
• Diagnose technical issues and improve app stability
• Analyze aggregate usage patterns to enhance features

Kiminisim App

• Display today's Kiminisim, Kim's lesson, the "Apply It Today" prompt and the mindset shift on your device
• Schedule your daily reminder locally on the phone at the time you choose
• Persist your saved Kiminisims, reflections and reminder preferences inside the app sandbox
• Open a specific Kiminisim when you tap a dailykim://kiminism/<id> deep link or notification

GoalFuel App

• Compute today's, this week's, this month's and this year's sales totals from the sales you log
• Derive your daily, weekly, monthly and annual targets from the goal cadence you pick
• Display a daily motivational quote and a contextual coaching line based on how you're tracking
• Detect when you cross a goal or unlock an achievement and play the corresponding on-device celebration
• Schedule your daily reminder locally on the phone at the time you choose
• Persist your goal, sales, reflections, streak and achievement state inside the app sandbox
• Export a JSON or CSV backup of your data when you explicitly tap "Export backup" or "Export sales (CSV)" in Settings

Birthday Tracker App

• Display the next upcoming birthday with a live "days until" countdown and a turning-age chip computed on your device
• Sort your birthday list by days remaining and let you search by name, notes or category
• Open your contact list (only when you tap Import from contacts) so you can pick which contact birthdays to add
• Schedule a 9 AM local reminder for each birthday using Android's AlarmManager (only after you turn on Birthday Reminders in Settings)
• Persist your birthdays, settings, language and theme inside the app sandbox
• Export your birthdays as a JSON file via the share sheet when you explicitly tap Export my data in Settings
• Delete every birthday on your device immediately when you tap Delete all my data in Settings

Daily Istiqamah App

• Display the daily ayah, translation, trusted tafsir and guided prompts on your device
• Save your journal reflections, favorites, history and streak state inside the app sandbox
• Schedule your daily reminder locally on the phone at the time you choose
• Restore a specific saved reflection when you open it from your history inside the app
• Load and measure advertisements if monetization is enabled in a production release using Google Mobile Ads

All Platforms

• Comply with legal obligations and enforce our terms of service
• Prevent fraud and protect the security of our services
• Communicate important updates about our services

Data Storage & Security

We take the security of your data seriously and employ industry-standard measures to protect it:

Website

• Hosting: Our website is hosted on Squarespace, which provides SSL/TLS encryption and enterprise-grade security
• Payments: Website transactions are processed through Squarespace Commerce with PCI-compliant payment handling
• Forms & Data: All form submissions (contact, enrollment) are encrypted in transit and stored securely on Squarespace servers

HealTracker App

• Cloud Infrastructure: App data is stored securely on Google Cloud Platform (Firebase) with encryption at rest and in transit
• Authentication: We use Firebase Authentication with secure token-based sessions
• App Integrity: Firebase App Check is used to verify that requests originate from our authentic app
• Access Controls: Firestore Security Rules enforce strict per-user data access — you can only access your own data
• Encryption: All data transmitted between the app and our servers uses TLS/SSL encryption

Kiminisim App

• On-device only: All app data (saved Kiminisims, reflections, reminder time) is stored inside the app's private sandbox using the operating system's secure key/value store (Android SharedPreferences / iOS NSUserDefaults)
• No servers: Kiminisim does not transmit data to any backend. There is no cloud sync, no account database, and no remote storage
• No third-party SDKs: No analytics, advertising, or crash-reporting libraries are bundled. The app's network stack is unused at runtime
• Sandboxed by the OS: Other apps on your device cannot read Kiminisim's data; uninstalling the app removes all of it permanently

GoalFuel App

• On-device only: All app data (goal, sales, reflections, streak, achievements, reminder preference) is stored inside the app's private sandbox using an encrypted-at-rest local database (Hive on top of Android internal storage / iOS app container)
• No servers: GoalFuel does not transmit data to any backend. There is no cloud sync, no account database, and no remote storage
• No third-party SDKs: No analytics, advertising, or crash-reporting libraries are bundled. Fonts (Poppins, Inter) are shipped as local assets — even Google Fonts is configured with allowRuntimeFetching = false so it cannot reach the network
• Sandboxed by the OS: Other apps on your device cannot read GoalFuel's data; uninstalling the app removes all of it permanently
• User-initiated export: When you tap "Export backup" or "Export sales (CSV)" in Settings, the file is handed to the OS share sheet. Whichever app you choose to receive it then governs the file under its own privacy policy

Birthday Tracker App

• On-device only: All birthdays, notes, settings, theme and language preferences are stored inside the app's private sandbox using the OS's secure key/value store (Android SharedPreferences / iOS NSUserDefaults), encrypted at rest by the operating system
• No servers: Birthday Tracker does not transmit data to any backend. There is no cloud sync, no account database and no remote storage. The app's network stack is unused at runtime
• No third-party SDKs: No analytics, advertising, or remote crash-reporting libraries are bundled. The Plus Jakarta Sans font is shipped as a local asset and never fetched at runtime
• Sandboxed by the OS: Other apps on your device cannot read Birthday Tracker's data; uninstalling the app removes all of it permanently (or restores it later via Android Auto Backup if that is enabled on your device)
• Android Auto Backup: The app opts in to Android's standard 25 MB Auto Backup, which copies your birthdays to your own Google Drive under your account, encrypted by Google. Healing with Excellence never sees this backup. You can disable Auto Backup at any time in Android Settings → Google → Backup
• User-initiated export: When you tap Export my data in Settings, the JSON file is handed to the OS share sheet. Whichever app you choose to receive it then governs the file under its own privacy policy
• Release signing: Production builds are signed with our private keystore so users can be sure updates come from Healing with Excellence and not from a third party

Daily Istiqamah App

• On-device journal storage: Reflections, favorites, streaks and reminder preferences are stored inside the app's private sandbox using the OS key/value storage available to the app container
• No app account backend: Daily Istiqamah does not require a login, does not create an account database and does not sync your journal to our servers
• Bundled content: Supported ayah, translation and tafsir content is packaged into the app for offline use in this release
• Advertising SDK present: The app includes the Google Mobile Ads SDK for monetization readiness. If ads are enabled, ad requests are made to Google and are governed by Google's security and privacy controls
• Sandboxed by the OS: Other apps on your device cannot read Daily Istiqamah's private journal data without compromising the device itself; uninstalling the app removes locally stored app data

Third-Party Services

We use the following trusted third-party services to operate our website and app. Each has its own privacy policy governing data use:

Payment Processing

All payments across our platforms are processed securely through Stripe and Squarespace Commerce.

Website Purchases

• Courses & Certifications: Wellness evaluations, certification programs (FRC, FRA, Kinstretch, etc.)
• Course Bundles: Discounted packages combining multiple programs
• Digital Products: Wellness resources and educational materials

App Purchases

• Premium Subscription: Monthly subscription at $29.99/month for access to premium features
• Book Purchases: One-time purchases of wellness and health-related books

Stripe and Squarespace may collect and process payment information in accordance with their own privacy policies (Stripe · Squarespace). We only receive confirmation of successful transactions and basic transaction metadata (amount, date, status).

Analytics & Crash Reporting

To maintain quality and improve your experience across both platforms, we use:

Website

• Squarespace Analytics: Built-in analytics tracking page views, traffic sources, and visitor geography at a country level. This data is aggregated and anonymous.
• Cookies: Our website uses essential cookies for site functionality and analytics cookies to understand visitor behavior. You can manage cookie preferences through your browser settings.

HealTracker App

• Firebase Analytics: Collects anonymous, aggregated usage data such as screen views, feature usage frequency, and session duration. This data cannot be used to identify you personally.
• Firebase Crashlytics: Automatically collects crash reports including device model, OS version, and stack traces when the app encounters an error. This helps us identify and fix bugs quickly.

Kiminisim App

• No analytics SDK of any kind — Firebase Analytics, Google Analytics, Amplitude, Mixpanel, Segment, etc. are all absent
• No crash reporter — no Crashlytics, no Sentry, no Bugsnag. Crashes that happen on your device stay on your device
• No tracking domains — the iOS PrivacyInfo.xcprivacy manifest declares NSPrivacyTracking = false and an empty NSPrivacyTrackingDomains array
• No ad networks — there are no ads in Kiminisim, ever

GoalFuel App

• No analytics SDK of any kind — Firebase Analytics, Google Analytics, Amplitude, Mixpanel, Segment, etc. are all absent
• No crash reporter — no Crashlytics, no Sentry, no Bugsnag. Crashes that happen on your device stay on your device. A local error screen is shown so the app can recover gracefully without sending diagnostics anywhere
• No tracking domains — GoalFuel makes no outbound HTTP requests at runtime. The only network call possible from the app is when you explicitly tap "Privacy policy" or "Export backup," which hands off to your browser or share sheet
• No ad networks — there are no ads in GoalFuel, ever

Birthday Tracker App

• No analytics SDK of any kind — Firebase Analytics, Google Analytics, Amplitude, Mixpanel, Segment, etc. are all absent
• No remote crash reporter — no Crashlytics, no Sentry, no Bugsnag. If the app encounters an error, a short entry is appended to a local log file inside the app sandbox; nothing is uploaded automatically. You can choose to attach that file to a support email yourself
• No tracking domains — Birthday Tracker makes no outbound HTTP requests at runtime. The only network calls possible from the app are when you explicitly tap Privacy Policy or Export my data, which hand off to your browser or share sheet
• No ad networks — there are no ads in Birthday Tracker, ever

Daily Istiqamah App

• No first-party analytics SDK of any kind — Firebase Analytics, Amplitude, Mixpanel, Segment and similar analytics tools are absent in this release
• No remote crash reporter — no Crashlytics, no Sentry and no Bugsnag are bundled by Healing with Excellence for this app in this release
• Advertising SDK present — Google Mobile Ads is included for monetization readiness and may collect ad-request, device and performance information when ads are enabled
• Private reflections stay local — your journal text, streaks and favorites are not sent to advertisers by us

Your Rights & Choices

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct any inaccurate information in your profile
• Deletion: Request the deletion of your account and all associated data
• Data Portability: Request your data in a machine-readable format
• Withdraw Consent: Revoke app permissions (e.g., camera, photo library) at any time through your device settings
• Unsubscribe: Opt out of marketing emails at any time via the unsubscribe link in each email
• Cookie Management: Control website cookies through your browser settings
• Opt-Out of Analytics: Contact us to opt out of analytics data collection

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

• Account Data (App): Retained until you request account deletion
• Health & Fitness Data (App): Retained while your account is active; deleted upon account deletion
• Email & Newsletter Data (Website): Retained until you unsubscribe or request deletion
• Course Access Records (Website): Retained while your course enrollment is active
• Transaction Records (Both): Retained for up to 7 years for legal and financial compliance
• Crash Reports & Analytics (App): Retained for up to 90 days in an identifiable form
• Website Analytics (Website): Aggregated, anonymous data retained indefinitely

When you request account deletion, we will permanently remove your personal data from our systems within 30 days, except where retention is required by law.

Children's Privacy

Our website, the HealTracker app, the Kiminisim app, the GoalFuel app, the Birthday Tracker app, and the Daily Istiqamah app are not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children on any of these platforms. Kiminisim, GoalFuel and Birthday Tracker do not collect personal information from anyone at all, regardless of age, and Daily Istiqamah does not require accounts or collect private journal entries on our own servers.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@healingwithexcellence.com, and we will promptly delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes:

• We will update the "Effective Date" at the top of this page
• We will notify you via in-app notification or email for significant changes
• Continued use of the app after changes constitutes acceptance of the updated policy

We encourage you to review this page periodically for the latest information on our privacy practices.