← Back to Drift

Privacy Policy

Effective date: April 2, 2026

Operated by Scratch Frameworks Pte Ltd

Drift is built around one idea: helping you stay close to what matters. That means we take your privacy seriously. This policy explains clearly and honestly what we collect, how we use it, and what control you have over it.

We will never sell your data. We will never use it to show you ads. What you share in Drift stays in Drift.

1. What we collect

Account information

When you create an account, we collect your name, email address, and a securely hashed password. We never store your plain-text password. If you sign in with Google, we receive your name and email address from Google.

Your check-in data

The friendships, habits, and goals you track in Drift, along with check-in timestamps, notes, mood ratings, and any photos or voice memos you attach. This is the heart of what makes Drift useful, and it is private to you.

Device information

If you opt in to push notifications, we store your device push notification token and timezone. This is used only to deliver nudges at the right time for you.

Usage data

We collect basic, anonymised information about how you interact with the app, such as which screens you visit and which features you use. This helps us improve the experience. We do not track your activity outside of Drift.

2. How we use your information

We use your information to:

3. AI-powered features

Drift uses artificial intelligence to generate personalised nudges, coaching messages, weekly insights, and behavioural experiments. These features are available as part of the premium subscription and are clearly labelled within the app.

AI features are powered by Anthropic's Claude, accessed via AWS Bedrock. When you use AI-powered features, relevant check-in data — such as your items, notes, and patterns — is sent to Claude for processing. This is subject to Anthropic's data processing terms.

We do not use your personal data to train general-purpose AI models. Your data is used only to generate responses for you.

4. Payments and subscriptions

Drift offers an optional premium subscription for AI-powered features. Subscription and payment management is handled through RevenueCat, which interfaces with the Apple App Store and Google Play Store. We do not collect or store your payment card information directly.

RevenueCat may collect certain subscription-related data to manage your subscription status. For details, see RevenueCat's Privacy Policy.

Subscription management, including cancellation, is handled through your device's app store settings. Refund policies are governed by Apple's and Google's respective terms of service.

5. Data storage and security

Your data is stored securely using Supabase, which provides enterprise-grade encryption at rest and in transit. Authentication is handled through Supabase Auth with industry-standard JWT tokens.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access or loss. No system is completely immune to risk — we encourage you to use a strong, unique password for your account.

6. Data sharing

We do not sell your personal data. We do not share your data with third parties for advertising purposes. Your check-in data, notes, and patterns are private to you.

We share limited data only with the following service providers, who help us operate the app and are bound by data processing agreements:

We may also share data if required by law, court order, or valid legal process.

7. Your rights

You have the right to:

8. Device permissions

Drift may request the following permissions, all of which are optional:

You can change any of these permissions at any time through your device settings.

9. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

10. Children's privacy

Drift is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

11. International data transfers

Your data may be processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Your continued use of Drift after changes are posted means you accept the updated policy.

13. Contact us

If you have questions about this Privacy Policy or your data, please reach out:

Scratch Frameworks Pte Ltd
support@driftflow.org