The short version
PurePath is designed so your recovery information stays under your control. The app has no PurePath account system, advertising, analytics, or third-party tracking. Recovery entries and blocking settings are stored on your device and are not sent to Vectis Innovation Labs.
Android Accessibility disclosure: if you enable the Content Shield, PurePath uses Android's Accessibility service to identify the app currently in use and, in supported browsers, read the address bar. It uses that information only to compare the app or domain with the block rules you chose. Address-bar content is processed on your device and is not logged, stored, or transmitted.
Information stored on your device
Depending on the features you use, PurePath may store:
- Your recovery start date, streak history, milestone progress, and local shield-interception count and time
- Your self-reflection answers, check-ins, slip debriefs, triggers, recovery plan, and if-then rules
- App preferences, reminder settings, support region, and biometric-lock preference
- Apps and domains you select for blocking, plus whether the built-in adult-domain filter is enabled
- Accountability-partner details you choose to enter and a protected representation of the partner code
On Android, this information is stored in the app's private Room database and SharedPreferences. On iOS, it is stored using Apple's on-device storage. It is protected by the security controls of your device and operating system. Vectis Innovation Labs does not operate a server that receives this recovery data.
Content Shield
Android
The Android Content Shield is optional. If you enable it, PurePath asks you to turn on its Accessibility service in Android settings. The service observes window changes needed to identify a foreground app and, for compatible browsers, reads the current address-bar value. It may also use the label of an app tapped in the launcher to prevent a blocked app from bypassing the shield during sign-in or another hand-off.
This information is compared locally with the app packages, custom domains, and adult-domain list you selected. PurePath does not save address-bar values or a browsing history, and does not send this information off your device. It stores only the blocking configuration and a local count and time of shield interceptions. You can turn the Accessibility permission off at any time in Android settings, but blocking will stop when it is off.
Android also lets PurePath list launchable apps so you can choose which apps to block. PurePath does not request broad access to every installed package.
iOS
On iOS, the Content Shield uses Apple's Family Controls and Screen Time frameworks. Apple represents selected apps and websites with opaque tokens that PurePath and Vectis Innovation Labs cannot decode or transmit.
Accountability partner codes
If you enable the optional accountability-partner lock, the unlock code is converted into a one-way SHA-256 hash before it is stored on your device. The original code is not saved, the hash is not sent to us, and we cannot recover or reset the code for you.
Biometric lock
If you enable biometric locking, authentication is performed by Android or iOS. PurePath receives only the result needed to unlock the app. It does not receive or store your fingerprint, face image, or other biometric template.
Notifications
If you enable reminders, PurePath schedules notifications on your device for features such as daily check-ins and trial reminders. On supported Android versions, the app asks for notification permission. Reminder content and schedules are not sent to Vectis Innovation Labs.
Backups and device transfer
Android
Automatic cloud backup and Android device-to-device transfer are disabled for PurePath. You can instead create an optional password-encrypted backup file from Settings and save it to a location you choose. PurePath does not upload that file. Anyone with the file and password may be able to restore its contents, so keep both secure. We do not store or recover the password.
iOS
Your iOS device settings may allow Apple-managed encrypted device backups to include app data. Those backups are controlled by you and Apple and are subject to Apple's terms and privacy practices.
Purchases
Subscriptions, trials, and lifetime purchases are processed by Google Play on Android and the App Store on iOS. PurePath receives the product and purchase-status information needed to provide access. It does not receive your full card or bank details. Store processing is governed by Google's or Apple's privacy policy and the settings of your store account.
Internet access and third parties
PurePath uses internet access for store billing and for opening legal, support, and recovery-resource links you choose. The app does not use that access to upload recovery entries, blocking activity, or browsing information. When you open an external website, call a service, or send a message, that third party handles the information you choose to provide under its own privacy policy.
Support email
If you email support@vectisinnovationlabs.com, we receive the email address, message, and attachments you choose to send. That information is used to respond to your request and is handled by the email providers involved. Do not include recovery entries, passwords, partner codes, payment-card details, or other sensitive information in a support message.
What we do not do
- No PurePath accounts or sign-ins
- No advertising or advertising identifiers
- No analytics, behavioral profiling, or third-party tracking
- No sale of personal information
- No transmission of your recovery journal, block list, or current browser address to Vectis Innovation Labs
Deleting your data
Use PurePath → Settings → Delete everything to erase the app data held on that device, including progress, plans, settings, and Content Shield configuration. Deleting the app also removes its local app data.
Files or platform backups outside the app must be deleted separately. On Android, deleting the app does not delete an encrypted backup file you previously exported. On iOS, Apple-managed device backups remain under your device and account backup settings.
Children
PurePath is intended for adults aged 17 and over. It is not directed to children, and the app does not knowingly collect children's personal information.
Changes to this policy
If PurePath's data practices change, this policy and the relevant store disclosures will be updated before the change is released. The effective date at the top of this page shows the latest revision.
Contact
Questions about this policy: support@vectisinnovationlabs.com