🔒 Privacy Policy

1. Who we are

Bipolar Bear is an independent app developed to help people living with bipolar disorder track their mood, sleep, energy and wellbeing. The app is available on iOS, Android and the web at bipolarbear.app.

For privacy enquiries, contact: hello@bipolarbear.app

2. What data we collect

Journal data (stored on your device and optionally synced)

• Mood, energy level, sleep hours
• Medication taken/not taken
• Daily goals, notes
• Optional additional data you choose to track: anxiety, stress, irritability, exercise, time outside, alcohol, smoking, and/or drug use
• Step count and sleep data (read from Apple Health on iOS — only if you grant permission)

Account data (only if you create an account)

• Email address and password (used only to identify your account for cloud sync)

Personal details (optional, stored locally and synced if logged in)

• Name, diagnosis, medications, and any notes you choose to enter in the Personal Details section

Anonymous usage

• When you tap "I needed this today" we record an anonymous count using Firebase. No personal data is stored for this action.

3. How your data is stored

By default, all journal data is stored locally on your device using your browser's local storage. It never leaves your device unless you choose to create an account and enable cloud sync.

If you create an account, your data is synced to Google Firebase Firestore, a secure cloud database. Data is stored under your unique user ID and is not accessible to other users.

Firebase is a Google service. You can review Google's data practices at firebase.google.com/support/privacy.

4. Health data (Apple Health / HealthKit)

On iOS, Bipolar Bear can optionally read your step count and sleep data from Apple Health to auto-fill your journal entries. This requires your explicit permission.

• We only read health data — we never write to Apple Health
• Health data is used solely to populate your journal and is not sent anywhere else
• You can revoke this permission at any time in iOS Settings → Privacy → Health

5. Notifications

If you enable daily reminders, notification preferences are stored locally on your device. We do not use a third-party push notification service — reminders are scheduled entirely on-device.

6. Who we share your data with

We do not sell, rent or share your personal data with third parties for marketing or advertising purposes. The only third-party service that may receive your data is:

• Google Firebase — for cloud sync and authentication, if you create an account

We do not use analytics services, advertising networks or any other third-party tracking.

7. Deleting your account and data

You can permanently delete your Bipolar Bear account and all associated data at any time.

In-app deletion (recommended, immediate)

1. Open Bipolar Bear on iOS, Android or the web
2. Open the Journal page → tap the account icon → Settings
3. Scroll to the bottom of Settings and tap 🗑️ Delete Account (if signed in) or 🗑️ Delete All Data & Reset Settings (if signed out / guest)
4. Confirm both warning dialogs

Deletion by email

If you cannot access the app, email hello@bipolarbear.app from the address associated with your account, with the subject line "Delete my account". We will permanently delete your data within 30 days and confirm by reply.

What is deleted

• Your Firebase Auth account (email and password hash)
• All encrypted journal entries (mood, energy, sleep, medication, notes, custom fields)
• Personal details (name, diagnosis, medications, contact info)
• User settings, preferences and any linked anonymous-board profile
• All locally cached data on the device where you trigger deletion

What is kept

• Aggregated, non-identifying counters (e.g. total app-wide "I needed this today" taps) — these contain no personal data and cannot be linked back to you
• Email correspondence with us, retained for support and legal purposes for up to 12 months

You also have the right to access and portability — export all your data as JSON at any time via the in-app "Backup data" option.

8. Data retention

Local data remains on your device until you delete it or uninstall the app. Cloud data is retained until you delete your account. We do not set automatic expiry on your journal entries.

9. Children

Bipolar Bear is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Sensitive data

Mental health and health information is considered sensitive personal data under GDPR. We take this seriously. Your journal data is encrypted in transit (HTTPS) and at rest within Firebase. We access your data only when necessary to provide technical support, and only with your consent.

11. Changes to this policy

We may update this policy from time to time. We will update the "last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy questions or data requests: hello@bipolarbear.app