privacy policy
the architecture of silence
0. The architecture of silence
The Square Is asks nothing about who you are. This page is the exact list: what leaves your device, where it rests, who else touches it, and what we will never do with it. Nothing here is an adjective you cannot verify.
The product lives in two houses. They are not the same, and we will not describe them as if they were.
1. Two houses
The strongest form we can offer. Your reflections, your sessions, your reminder — all of it stays on your iPhone. There is no server of ours, no cloud copy, no UUID we can look up. We cannot read it, recover it, or sell it, because we never receive it.
The ritual is served by Vercel. Its rows live in Supabase. Traffic is encrypted in transit (HTTPS) and the database is encrypted at rest. You may write to us with your Square Key and everything attached to it is deleted. This is not local-only, and we will not pretend it is. It is still a closed room: no ads, no brokers, no training.
2. No account, ever
There is no registration, no password, no email address, no profile.
On Android and desktop, the first time The Square Is opens, your device generates a random number — a UUID — and that number is the only name we know you by. We never ask for your own.
On the native iOS app there is no identifier at all. Nothing is sent to us.
3. What we store
This list is for Android and desktop. The native iOS app stores none of it with us.
The random UUID your device generated. It ties your sessions to each other and to nothing else in the world.
So the day starts and ends where you are. No GPS, no address, no city.
The date, the length and the outcome of each manifest — completed or broken. This is what the archive and the monthly recap are made of.
The lines you write after a manifest, up to 280 characters each. Stored for one reason: so you can read them again.
Only if you ask for one: the hour you chose, or the instruction to pick a random one, and the delivery address your browser issues for notifications. Removed when you turn the reminder off.
A one-way hash of technical traits of your device — screen, processor, rendering. It exists so a paid licence survives a reinstall. It cannot be reversed, and it says nothing about you as a person.
4. Where it rests
On iOS: only on your device.
On Android and desktop: Vercel serves the app; Supabase holds the rows. Payments are handled by Lemon Squeezy: they see your billing details, we do not — we receive only the confirmation that a licence was granted. Notifications are delivered by the push service of your own browser or phone (Google, Apple), which handles the delivery. As with any web server, short-lived request logs contain IP addresses; we do not use them to identify anyone.
5. What we never do
No ad networks, no tracking pixels, no third-party marketing scripts, no profile built about you. Selling attention is the exact thing this app was made against.
We do not read your reflections, do not analyse them, do not show them to anyone, and do not feed them to any model. On iOS we cannot: they never arrive. On Android and desktop this is a promise we hold ourselves to, and section 7 says plainly where its technical limit is.
Your data is never sold, rented or shared. The only companies involved are the ones named in section 4, doing the work required to run the web app.
6. The one thing we measure
The public pages of this site use Vercel Analytics to count visits. It sets no cookies and no advertising identifiers: it tells us how many people opened a page, roughly from where, on what kind of device. Nothing inside the black square is measured — not when you start, not how long you stay, not what you write.
The native iOS app does not include this. We name it because we believe in complete transparency — and we value honesty above all.
7. Your journal, and the honest limit
On iOS, your reflections never leave the phone.
On Android and desktop they do not live only on your device: they are stored in our database, which is what lets your archive survive a reinstall through your Square Key. Today they are protected by transport encryption, encryption at rest, and access limited to the app itself. We are moving towards encrypting reflections on your device before they leave it, so that what we hold becomes unreadable even to us. Until that day arrives, this page will not pretend it already has.
8. Deletion
On iOS, deleting the app from your device deletes the ritual with it. There is nothing for us to erase, because there is nothing for us to hold.
On Android and desktop, write to thesquare.pwa@gmail.com with your UUID — the app shows it to you — and everything attached to it is deleted permanently: sessions, reflections, reminder, device signature. Nothing is kept, and nothing can be restored afterwards.
You may also ask what we hold for you. The answer will be the rows listed in section 3, or, for iOS, that we hold none.
9. Contact
Questions about this policy: thesquare.pwa@gmail.com.
Last updated: August 2026.
thesquare.is/privacy