Citadel privacy policy.
A local home for your personal practice.
Your personal practice content
Citadel does not collect your journal reflections, habits, goals or habit photos on a Context Mechanica server. Your practice content is stored locally on your device. There is no Citadel account to create.
Backups and exports
You choose where your backups and exported files are saved. They are not sent to a Citadel server, and we do not receive or have access to those files. If you select a cloud storage location, the copy is handled by the provider you choose.
Password-protected backups depend on you keeping the password safe. Your device's own backup or transfer settings may also apply to local app storage.
Permissions
The app uses notification access for reminders and device authentication for supported app-lock features. Optional habit photos are part of your local practice history. Final platform-specific permission details will be confirmed for the release.
Purchases
The Android app uses Google Play for Pro purchases and restoring purchase access. It communicates with the store to check entitlement and keeps an entitlement status locally. Store transactions are handled under the store's own terms and privacy practices, separately from your journal content.
Keeping and removing data
We do not hold a server copy of your practice content to delete. Local content remains in app storage until removed. Exported files, user-selected backups and device-managed backups are separate copies. Release-specific removal instructions will be published on the support page.
Support and website visits
If you choose to contact support, your message may include an email address and any details you share. Support-provider and retention details will be added before the support channel launches. Website visits are covered separately by the website privacy notice.
Changes and contact
We will update this page if Citadel's privacy practices change. Operator: Independent developer behind Context Mechanica. Effective date: to be confirmed before launch.
A working privacy contact will be added before launch.