Privacy, taken seriously.

01 Who is responsible

Serious. is operated by Climora Labs (we, us, or our). This policy applies to the Serious. mobile app, web experience, API, community features, and related support services.

Questions, privacy requests, or complaints may be sent to climoralabs@gmail.com. Please do not include passwords, vault master passwords, or other secrets in an email.

02 Data we process

• Account data: username, display name, email address, password hash, verification status, timezone, locale, Google sign-in identifier when chosen, and trusted-device/session records.
• Workspace content: goals, projects, tasks, deadlines, calendars, focus sessions, habits, notes, journals, productivity history, finance records, reminders, and settings.
• Files and media you choose: profile images, note attachments, community images, attendance proof photos, and locally selected appearance or alarm media.
• Location and activity data you choose to create: precise coordinates, routes, timestamps, pace, attendance locations, location accuracy, device-reported mock-location status, and Time Mark details.
• Community data: posts, progress shared by you, comments, reactions, follows, tags, and the profile information you make visible to other members.
• AI data: the prompt, selected workspace context, request status, and generated suggestion when you use an AI-assisted feature.
• Technical and security data: device platform and identifier, push token, sign-in and trusted-device activity, IP address, request time, diagnostic errors, and abuse-prevention records.

03 What stays on your device

Serious. is offline-first. A local account keeps its workspace in the app database and does not synchronize it to a Serious. account. Some optional features can still contact a provider—for example, Mapbox when you request a map or place name.

Uploaded alarm music, appearance files, local drafts, secure tokens, and user-created device backups are stored locally unless a feature clearly says otherwise. Your Password Keeper master password and derived key are not sent to the API; synchronized vault entries are ciphertext.

04 Device permissions

• Notifications are used for reminders, alarms, focus completion, and account or community activity.
• Camera and photo access are used only when you choose to capture or select an image.
• Precise location is used for routes, attendance proof, Time Marks, and readable location labels. Background location is used only while an active route-tracking feature requires it.
• Files are accessed only through a picker or destination you choose, such as selecting an alarm track or exporting a backup.

You can deny or revoke permissions in device settings. The related feature may become unavailable, but unrelated parts of Serious. should continue to work.

05 Why we use data

• Provide, synchronize, restore, secure, and personalize your workspace.
• Deliver reminders, alarms, account verification, security messages, and requested support.
• Operate community features and show content to the audience you select.
• Generate requested planning or focus suggestions and prevent automated output from writing to your workspace without an explicit product action.
• Detect abuse, protect accounts, troubleshoot failures, maintain reliability, and comply with law.
• Improve the product using optional analytics only when that control is enabled. Essential security and service logs are not treated as optional analytics.

Depending on the feature and applicable law, processing is based on providing the service you requested, your consent, our legitimate interests in security and reliability, or a legal obligation.

06 When data leaves your device

When you sign in and synchronize, workspace records are sent to the configured Serious. API. When you post or interact in Community, the information you submit is shared with other members according to that feature’s visibility and audience controls.

We use service providers only as needed to operate features. These may include infrastructure and object storage, email delivery, Expo push notification delivery, Google identity verification, and Mapbox mapping or geocoding. A provider receives only the data needed for the requested function and is expected to protect it under its contract and applicable law.

We may disclose information when required by law, to address fraud or safety threats, to protect rights, or as part of a merger or transfer where the recipient must honor this policy. We do not sell or rent personal data, and Serious. contains no third-party behavioral advertising SDK.

07 AI-assisted features

AI assistance and AI personalization have separate controls. Turning off AI assistance keeps deterministic local guidance available. Turning off personalization prevents relevant workspace context from being used for personalized AI guidance.

AI suggestions can be incomplete or wrong. Review them before relying on or applying them. If a third-party AI provider is enabled in a future production configuration, this policy and the product disclosure must identify that processing before personal workspace content is sent to it.

08 Retention and deletion

Device data remains until you delete records, clear the workspace, remove the app, or erase its storage. The in-app account-deletion flow clears the app-owned workspace and media on the device where you complete it. An offline copy on another device cannot be erased remotely; clear that app’s storage or remove the app. Backups exported to a folder you control remain there until you delete them.

Cloud account data is kept while your account is active and as needed to provide the service. Deleting your account removes the active account and associated cloud workspace data, community content, sessions, push tokens, and service-hosted media. Limited records may remain temporarily in encrypted backups or where retention is required for security, fraud prevention, disputes, or law, and are isolated from normal product use until deletion under the applicable retention cycle.

Account deletion does not remove copies you exported, data you sent outside Serious., or content independently created by another person. If you cannot access Settings, use our account deletion request page or email climoralabs@gmail.com from the account address. Contact us if another member’s content unlawfully contains your personal data.

09 Security

We use access controls, authenticated API requests, rate limits, encrypted transport in production, secure device credential storage, and client-side encryption for Password Keeper values. No storage or transmission method is completely secure, so keep your device, account password, recovery information, and vault master password protected.

Climora Labs cannot recover a forgotten Password Keeper master password because it is not sent to the server.

10 Your choices and rights

• Review and change optional AI, personalization, analytics, community visibility, and device-permission settings.
• Export a local backup from Settings before deleting data or moving devices.
• Correct profile and workspace information in the app.
• Delete individual content or permanently delete your account and associated cloud data from Settings.
• Ask for access, correction, objection, erasure or blocking, portability, or information about processing by contacting us, subject to applicable exceptions.
• Complain to the Philippine National Privacy Commission or another competent privacy authority where applicable.

11 Children

Serious. is not directed to children under 13. Do not create an account if you cannot validly agree to these terms under the law where you live. A parent or guardian should supervise a minor’s use where required.

If you believe a child provided personal data without appropriate authorization, contact us so we can investigate and delete it where required.

12 International processing and changes

Service providers and infrastructure may process data outside your province or country. We use contractual, technical, and organizational safeguards appropriate to the transfer and applicable law.

We may update this policy when features, providers, or laws change. Material changes will be presented in the app or through another appropriate notice, and the effective date above will be updated.