Understudy — Privacy Policy
Effective date: September 3, 2026
Last updated: September 6, 2026
This policy explains what the Understudy iOS app collects, why, who it goes to, and how to get it back or get rid of it. It covers the App only.
Controller: Berto Labs LLC, 2108 N St, Ste N, Sacramento, CA 95816, USA.
Contact: info@bertolabs.com.
The short version
- Understudy has no analytics SDK, no advertising, no third-party trackers, and sells no data. We are saying this plainly because it is true, and if it ever stops being true this policy changes first.
- Every financial figure in the App is something you typed. It is never verified, and it is never connected to a real bank or brokerage account. Understudy never asks for bank or brokerage credentials. If anything ever appears to, it is not us.
- Your working simulation state stays on your device. A small set of durable things — your profile, your accounts, your learning progress, and summaries of finished runs — sync so they survive a reinstall or a new phone.
What we collect, and why
| What | Where it lives | Why | Notes |
|---|---|---|---|
| Anonymous user id | Supabase Auth | Gives your data somewhere to belong so it survives a reinstall | Created silently at first launch. Pseudonymous — it identifies a record, not a person |
| Apple or Google identity | Supabase Auth | Cross-device sync, if you want it | Only if you choose to link one. Apple’s Hide My Email is supported. There is no email-and-password sign-in |
| Profile photo — one you pick, or your Google profile picture | Your device | Personalizing your avatar | Optional, and never uploaded by us. A photo you choose is resized and stored on this device only. If you sign in with Google, the App fetches your Google profile picture from Google and caches it on the device. Apple does not share a photo |
| Financial profile — income, savings, expenses, risk tolerance | Your device + Supabase | Makes the simulations concrete instead of generic | Self-reported, unverified, never linked to a real account |
| Accounts you add — institution label, type, balance, contribution | Your device + Supabase | Grouping and realism in the simulator | Self-reported. The institution is a label you pick from a list, not a connection to anything |
| Learning progress and concept mastery | Your device + Supabase | Drives what the App explains and what it stops explaining | One of the few things deliberately kept across a reinstall |
| Session summaries — the outcome figures of finished runs | Your device + Supabase | Your Activity dashboard and the Outcome Dashboard | The full working state of a simulation stays on your device only |
| Purchase and subscription status | RevenueCat | Unlocking premium features and restoring purchases | Includes a RevenueCat app-user id. Apple processes the payment; we never see your card |
| Onboarding flag, personalization answers, paywall impression counts | Your device | App state and pricing experiments | Never leaves the device |
We do not collect your contacts, your location, your photo library (a profile photo you pick stays on your device), your health data, your browsing, or your identity beyond the optional sign-in above.
What we do not do
- No analytics SDK. No Firebase, no Amplitude, no Mixpanel, nothing equivalent.
- No advertising, no ad identifiers, no ad networks.
- No third-party trackers.
- No sale or sharing of personal information as those terms are defined under California law, and no behavioural advertising.
- No credential collection. Understudy has no mechanism to connect to a bank or brokerage and never asks for those credentials.
Who processes data for us
| Processor | What it receives | Why |
|---|---|---|
| Supabase | Your anonymous user id, any linked Apple/Google identity, and the synced subset above | Authentication and the database that makes sync possible |
| RevenueCat | A RevenueCat app-user id and your purchase/entitlement status | Subscription entitlements and Restore Purchases |
| Apple | Your purchase, under Apple’s own terms | App distribution and payment processing |
Each acts as a processor on our instructions. We do not send them anything beyond what the table above describes.
On-device AI
Some explanations in the App are generated by Apple’s on-device language model. That processing happens on your device. The text of your figures is not sent to us or to any third party for generation. If the on-device model is unavailable, the App falls back to static text and nothing is sent anywhere.
How long we keep it
We keep synced data for as long as your account exists. Delete your account and it goes (see below). Device-local data lives until you delete it in the App or delete the App. Backups may retain copies briefly before expiring on their normal cycle.
Your choices
- Export. Settings → Export my data produces a JSON copy of your financial profile and accounts.
- Reset. Settings can reset your simulations or your profile independently, without deleting your account.
- Delete. Settings → Delete account deletes your account and the data synced under it. The local session is only cleared after the server confirms deletion, so a failed deletion leaves you signed in and able to retry rather than half-deleted.
- Stop syncing. Simply not linking an Apple or Google identity keeps your data on one device.
- Depending on where you live you may also have rights of access, correction, portability, restriction, or objection. Write to info@bertolabs.com and we will respond within the period the applicable law requires. If you are a California resident, you may exercise your rights under the CCPA/CPRA; as stated above, we do not sell or share personal information.
Children
Understudy is not directed to children and is not intended for anyone under 13. We do not knowingly collect data from anyone under that age; if we learn we have, we delete it. This threshold matches the Terms and must stay in step with the App Store age rating.
Security
Data in transit is encrypted. Supabase’s SDK manages your session token in the system keychain; the App stores no credentials of its own, because it has none to store. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
We may update this policy. The effective date above will change and material changes will be surfaced in the App.
Contact
Berto Labs LLC 2108 N St, Ste N, Sacramento, CA 95816, USA info@bertolabs.com