Privacy policy

Effective 19 October 2026. Applies to the Sculpsit Android app and this website.

The short version

Sculpsit has no accounts, no analytics, no ads and no network access. What you enter is encrypted on your phone. The developer cannot see it and has no copy.

Notice under section 18 of POPIA

• What is collected: only what you type or choose in the app (see the list below). Nothing is collected by the developer.
• Why: to run your daily act, your pause and your plan, and to show your statue.
• Where it is kept: on your phone only. It is not sent anywhere, and the app has no internet permission.
• Is it required: no. Entering a target, a plan or a note is your choice, and the app works without them.
• Your rights: to see, correct and delete what is held. In the app you do this yourself.
• Complaints: you may complain to the Information Regulator of South Africa.

Who is responsible

Lohan Francois Pieterse, a natural person (sole proprietor), South Africa. Phone 066 233 3231. Email lohan2004pieterse@gmail.com. Postal address available on request by email.

Lohan Francois Pieterse is the Information Officer under the Protection of Personal Information Act, 2013 (POPIA).

What the app stores on your phone

• Your progress: carvings, days, rank and the statue stages you have revealed.
• Your settings: sound, haptics, reminder time and your lock.
• If you use the pause tools: your private targets, your plan, your logs and your notes. A log can include how strong the urge felt before and after a pause (a number from 1 to 5), only if you choose to rate it.
• One timestamp, the time of your most recent pause, quick log or slip. It is a single number with no text. It is kept in plain app storage, outside the encrypted database, so the app can stay quiet and not offer a purchase for 24 hours after a hard moment. Delete all data removes it.
• A short list of which quotes the app showed you in the last 30 days, as quote numbers and days only, with no text you wrote. It is kept the same way, so the app does not repeat a quote. Delete all data removes it.
• The date you last opened the app, kept the same way, so it can say "Welcome back" after a few days away. Delete all data removes it.
• One count, how many times you finished a pause. It is a single number, kept the same way, so Today can show "N times you paused". Delete all data removes it.

The database is encrypted with SQLCipher. Its key is wrapped by a key held in the Android Keystore, which does not leave your device. The app asks Android not to back it up, so it does not go to Google Drive or any other backup.

The PIN locks the app. It keeps a casual person who picks up your phone out of it. The PIN does not encrypt your data, and it is not a defence against a determined attacker with specialist tools.

Private pause and plan data is special personal information

Under POPIA, what you record in your targets, plan, logs and notes can count as special personal information, because it can relate to your health. The app asks for your explicit consent before it saves any of it. Your entries stay on your phone and are never sent anywhere. You can withdraw consent at any time by deleting your data (see below).

What the app does not do

• It has no internet permission. It cannot send your data anywhere.
• It has no accounts, analytics, crash reporting or ads.
• It does not read your contacts, location, photos or files.

Backups you make

You can export a backup file protected by a passphrase you choose. The file is yours to keep safe. Deleting your data in the app does not delete backup files you saved elsewhere. If you email a backup file to the developer, it will be deleted on request.

Sharing your statue

The share card is made when you choose to share, and not before. It holds the statue image, the day number, your stage and the app name. It never holds your targets, plan, logs or notes. Where it goes after that is your choice, and the app you share it to has its own privacy terms.

Payments and reviews

The one purchase, a single payment for the full statue, is sold and processed by Google Play. The developer never receives your card details. Google may tell the app whether you own the purchase so it can open the paid items. If you rate the app, the review box is shown by Google Play. Google handles these under its own privacy policy.

Age

Sculpsit is for people aged 18 and over.

Deleting your data

• Settings, then Delete all data, erases everything the app holds.
• Choosing Forgot PIN erases everything too.
• Uninstalling the app erases it as well.

The developer holds no copy, so deleted data cannot be restored. Backup files you saved elsewhere are not deleted.

This website

The website sets no cookies and runs no analytics or third-party scripts. It collects nothing.

Your rights

You can ask what personal information we hold about you, and ask us to correct or delete it. For app data, you already control this on your phone. To ask us anything, email lohan2004pieterse@gmail.com; we answer within 30 days.

Safety note

Not medical or psychological treatment. If you're struggling, talk to a professional. In danger now, call 112. Helplines: SADAG 0800 567 567, Lifeline 0861 322 322, or findahelpline.com.

Changes

If this policy changes, the new version goes on this page with a new effective date.