Regulate is a planning app for neurodivergent adults that helps you plan your days around your energy. It is made by Regulate: Nervous System Companion ("we", "us"). This policy explains what Regulate collects, where it is kept, and the choices you have. It covers the Regulate app for iPhone and the Regulate web app.
The short version
- Your plans stay on your device. Tasks, reminders, energy check-ins, reflections and what Regulate learns about your patterns are stored on your iPhone or in your browser, not on our servers.
- Your account holds very little. To sign in, we keep your email address, your name and how you signed in.
- We don't sell your data, show ads or track you across other apps and websites.
- Your calendar is read only. Regulate copies events into the app on your device and never changes your calendar.
- You can delete everything from inside the app, including your account.
What stays on your device
Most of what you put into Regulate is stored only on your device. We cannot see it, and it is not sent to our servers.
| What | Examples | Where it's kept |
|---|---|---|
| Plans | Tasks, events, rest windows, reminders, repeats, buffers | Your device |
| Energy check-ins | Your body, mind, emotional and social levels, the reasons you choose, sensory load if you track it | Your device |
| Reflections and notes | Daily reflections, "How did it go?" answers, what helps | Your device |
| What Regulate learns | Patterns and predictions built from your check-ins | Your device |
| Calendar copies | Events copied from calendars you turn on | Your device |
| Settings | Appearance, reminders, quiet hours, Today layout | Your device |
Some of this, such as energy levels and notes about how you feel, can be sensitive. Because it stays on your device, anyone who can unlock your device may be able to see it. Use your device's passcode and Face ID or Touch ID to protect it.
If more than one account signs in on the same device, each account's data is kept separately.
What we keep for your account
Your account lets you sign in and keeps each person's data separate on a shared device. We store it with Supabase, our account provider.
| What | Why |
|---|---|
| Email address | To sign you in and send sign-in codes or invites |
| Name | To show your name in the app. You can change it in Settings → Account |
| How you signed in (Apple, Google or email) | To show it in Settings and sign you in the same way |
| Sign-in records (time of sign-in, device and network details kept by Supabase) | To keep your account secure |
| Account flags (for example, whether you are a tester) | To turn beta features on or off |
Signing in with Google. Google shares your name, email address and profile picture with us. We use only your name and email.
Signing in with Apple. Apple shares your name the first time you sign in, and either your email address or a private relay address if you choose Hide My Email. Emails we send to a relay address reach you through Apple.
We don't use your account to read your plans or check-ins. Those stay on your device.
Calendars, reminders and notifications
Calendars. If you connect Apple Calendar, Regulate asks your iPhone for permission first. It then reads events from the calendars you turn on and copies them into Today on your device. Regulate never adds, changes or deletes anything in your calendar, and calendar events are not sent to us. You can turn calendars off in Settings → Calendars, or remove access in iPhone Settings.
Notifications. Reminder notifications are scheduled on your device. Their content isn't sent to us.
Information from Google
Regulate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Today, Regulate uses Google only to sign you in. We use your Google name and email address for your Regulate account and for nothing else. We don't use information from Google for advertising, don't sell it, and don't use it to train AI models. People at Regulate don't read it, except with your permission, for security, or when the law requires it.
Services we use
We share information only with the services below, and only what each needs to work.
| Service | What it does | What it receives |
|---|---|---|
| Supabase | Accounts and sign-in | Your account details listed above |
| Sign in with Google | Your sign-in request | |
| Apple | Sign in with Apple, App Store, TestFlight | Your sign-in request; Apple's own app data |
| Netlify | Hosts the web app and this website | Standard web request data, such as IP address |
| Google Fonts | Loads the app's fonts | Your IP address and device type when fonts load |
[CONFIRM: add any analytics or crash-reporting service if you use one. If you don't, keep the next sentence.]
Regulate doesn't use analytics, advertising or tracking tools.
We don't sell or rent your personal information, and we don't share it for advertising. We may disclose information if the law requires it, to protect someone's safety, or as part of a transfer of the app to a new owner, who would have to follow this policy.
Your choices and deleting your data
You can see, export and delete your data from inside the app.
| You want to | Where |
|---|---|
| Export your data | Settings → Your data → Export my data |
| Make or restore a backup | Settings → Your data |
| Delete everything Regulate stores on this device | Settings → Your data → Delete All Regulate Data |
| Delete your account | Settings → Account → Delete Account |
| Change your name | Settings → Account → Name |
| Stop calendar access | Settings → Calendars, or iPhone Settings |
| Stop notifications | Settings → Reminders, or iPhone Settings |
Deleting your account permanently removes your account from Supabase, deletes that account's data on the device, and signs you out. If you signed in with Apple, we also tell Apple to end Regulate's access. This can't be undone.
Backups and exports are files you save yourself, for example in Files or iCloud Drive. Regulate can't delete them, so delete them yourself if you no longer want them.
How long we keep things. Data on your device stays until you delete it or remove the app. Your account stays until you delete it. Sign-in records are kept by Supabase for a limited time for security.
[CONFIRM: your Supabase log retention period.]
You can also ask us to delete your account by emailing hello@nervoussystemcompanion.com.
Children
Regulate is made for adults and isn't directed to children under 13. We don't knowingly collect information from children under 13. If you think a child has created an account, email us and we will delete it.
Security
Your account is protected by Supabase, and information sent between the app and our services is encrypted in transit. Data on your device is protected by your device's own security. No system is perfectly secure, so we can't promise that information will never be accessed without permission.
Your privacy rights
Depending on where you live, including California, you may have the right to know what personal information we hold about you, to get a copy, to correct it, and to delete it. You can do most of this in the app. For anything else, email hello@nervoussystemcompanion.com. We won't treat you differently for using these rights.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.
Contact
Questions about privacy: hello@nervoussystemcompanion.com
Regulate: Nervous System Companion, Los Angeles, California, United States