BDB / Bad Day Button

Privacy Policy

Bad Day Button is accountless and local-first. It is designed for noticing patterns in your days, not for medical care, diagnosis, therapy, treatment, emergency support, or crisis support.

Effective date: July 15, 2026

Information stored on your device

The app stores the following information locally on your device so its core features can work:

• Check-in date and time.
• Your selected good-day or bad-day intensity.
• Optional note text you choose to write.
• Local history, streak, and pattern information.
• Onboarding, privacy, and reminder preferences.
• A random anonymous install ID used for local event identity and deletion boundaries. It is not sent in an anonymous sharing request.

Optional notes stay on your device. They are not included in anonymous aggregate signals.

Daily check-in reminders

If you enable a daily reminder, Bad Day Button schedules it on your device at the time you choose. Its Bad day and Good day actions create a local check-in without requiring an explanation. Delivery timing is managed by your device and may not be exact to the second. On iPhone, the app icon also offers Bad day and Good day Home Screen actions. Selecting one records a local no-note check-in after iOS opens BDB to handle the action.

Daily reminders do not use Firebase Cloud Messaging, a device push token, remote push notifications, or server-side notification scheduling.

Accountless use and Firebase

Bad Day Button does not ask for a name, email address, password, username, profile, social login, contacts, or messages. It may silently create or reuse a Firebase Anonymous Authentication session. Firebase assigns that session a pseudonymous technical identifier. It is not shown in the app and is not a visible Bad Day Button account.

Bad Day Button may request a Firebase App Check app-integrity token to help protect its service boundaries against misuse. App Check does not upload notes, create a visible account, or turn on anonymous sharing by itself.

Optional anonymous aggregate sharing

Anonymous sharing is off by default. When you turn it on on iOS, Bad Day Button may send a limited anonymous signal to help form broad Collective Mood views.

That signal may include selected check-in type and bad-day intensity, the check-in timestamp and derived calendar date, moon-phase and calendar metadata derived from the date, app version, platform, and schema version. A separate, default-off setting can include only the country code from your device's language-and-region setting for future shared check-ins. The app does not send its local anonymous install ID.

Anonymous sharing does not include note text, name, email address, contacts, messages, exact GPS coordinates, street address, Apple ID, advertising ID, photos, media, passwords, profiles, or health data.

Collective Mood is designed to show broad aggregate patterns, not people. It does not promise that a particular region or comparison will be available. Aggregate totals appear only after privacy thresholds are met. Anonymous remote sharing is not available on Android or web.

Raw signals, aggregates, and retention

When anonymous sharing is active, the service stores only approved anonymous raw signals and privacy-protected service records. Raw signals, rate windows, aggregate state, aggregate-membership records, and display summaries use the same 90-day expiration value. Optional notes never enter this service boundary.

Aggregate displays are designed to appear only when they meet privacy thresholds. They do not identify people.

Patterns+ purchases

Patterns+ is an Apple-managed auto-renewable subscription for deeper local pattern views when it is offered. Apple processes payment, renewal, cancellation, refunds, purchase restoration, and payment methods through the App Store and Apple subscription settings.

Bad Day Button does not receive payment-card information. When Patterns+ is offered, it may send a StoreKit transaction proof only to validate the Apple subscription. It does not send optional notes, check-in history, names, contacts, email addresses, or payment-card information with that proof. Deleting local app information does not cancel an Apple subscription.

Deleting your information

You can use Settings > Delete My Info to delete local check-in history, optional notes, local preferences, the anonymous install ID, and the local daily reminder. It also turns anonymous sharing off.

Because Bad Day Button does not use conventional accounts, deletion is tied to the device or install rather than a login profile. If you have turned on anonymous sharing and it has created remote data, Delete My Info requests deletion of raw anonymous signals, private membership records, and the associated Firebase Anonymous Authentication identity before local information is cleared. If that step cannot finish, the app keeps local information and shows a retry state instead of claiming deletion is complete.

Sale, advertising, and tracking

Bad Day Button does not sell personal information. It does not use third-party advertising trackers, advertising networks, behavioral advertising, analytics, or crash-reporting SDKs.

Security

Bad Day Button is designed to keep ordinary check-ins local-first, but no device, network, or storage system can be guaranteed absolutely secure. Keep that in mind when deciding what to write in an optional note.

Support and safety

Bad Day Button is not medical advice, therapy, diagnosis, treatment, emergency support, or crisis support. If someone may hurt themselves or someone else, call local emergency services. In the United States, call or text 988 for the Suicide & Crisis Lifeline.

Contact and legal owner

For privacy questions, email support@cegeenterprises.com.

This policy is provided by CEGE ENTERPRISES LLC.