Legal

Privacy Policy

belimitless is a publication, not a data business. This policy explains the limited information collected by belimitless.com and the belimitless mobile app, why it is collected, and how to have it removed.

Effective July 26, 2026

Who this covers

This policy applies to the website at belimitless.com and to the belimitless mobile app for iOS and Android. Both are operated by belimitless. Together they are referred to below as the services.

There are no user accounts on either service. You can read everything without registering, signing in, or providing an email address.

What the website collects

  • Analytics. Google Analytics 4 and Microsoft Clarity record aggregate usage such as pages viewed, approximate region, device type, referring site, and session duration. Clarity also records anonymized interaction data such as scrolling and clicks. This is used to understand which essays are read and to fix layout problems.
  • Contact form submissions. If you use the contact form, the name, email address, and message you enter are emailed directly. They are not added to a marketing list.
  • Spam protection. Contact form submissions are verified with Google reCAPTCHA, which evaluates request signals to distinguish people from automated abuse.
  • Server logs. The hosting provider records standard request logs, including IP address and user agent, for security and reliability.

What the mobile app collects

The app is designed to collect as little as possible. If you enable notifications, the following is stored on the server:

  • A push notification token. An opaque identifier issued by Apple or Google that allows a notification to reach your device. It is not tied to your name, email, phone number, or Apple or Google account.
  • Your time zone and preferred delivery hour. Used only so the daily inspiration notification arrives at the hour you chose in your own local time.
  • Which notification types you enabled, your platform (iOS or Android), and the app version, so notifications are not sent to people who turned them off.

The app also sends a small set of anonymous product events — such as app opens, essay opens and completion, quote views and shares, saves, and notification interactions — through the belimitless API to Google Analytics. These events use a random, resettable installation identifier, not an account, advertising identifier, name, or email. You can turn anonymous analytics off at any time in Settings, which also clears events waiting on the device.

Crash and reliability reports may be sent to Sentry. They can include the app version, device model, operating-system version, current app route, stack trace, and technical context needed to diagnose a failure. They do not include saved essay contents, notification tokens, names, email addresses, or advertising identifiers.

Saved essays, reading preferences, and text size stay on your device. They are not uploaded and they are not synced across devices. Deleting the app deletes them.

The app does not request location, contacts, camera, microphone, photos, or your advertising identifier. It does not track you across other apps or websites.

How information is used

Information is used only to:

  • Deliver the essays, quotes, and notifications you asked for.
  • Understand in aggregate which writing resonates.
  • Keep the services secure and working.
  • Respond to you if you write in.

Your information is never sold, rented, or traded. It is not used to build advertising profiles, and it is not shared with data brokers.

Service providers

A small number of vendors process data on behalf of belimitless in order to run the services:

  • Vercel for website and API hosting.
  • Sanity for storing and delivering the published essays and quotes.
  • Expo for push notification delivery, which in turn uses Apple Push Notification service and Firebase Cloud Messaging.
  • Upstash for storing notification tokens and preferences.
  • Google for Analytics, reCAPTCHA, and web fonts, and Microsoft for Clarity.
  • Sentry for crash reporting and service reliability.
  • An email provider for delivering contact form messages.

Each provider receives only what it needs to perform its function and is bound by its own terms and privacy commitments.

Retention

  • Notification tokens are kept while the app is installed and at least one notification type is enabled. Turning off both new essays and daily inspiration deletes the token and its preferences from the server, not merely the delivery lists. Tokens that Apple or Google report as no longer valid are deleted automatically.
  • Contact messages are kept as ordinary correspondence.
  • Analytics data is retained per the provider's default retention window.

Your choices and deleting your data

  • In the app, open Settings and turn off any notification type at any time. Settings also includes a Delete my data action that removes your notification token and preferences from the server and then clears everything stored locally. Local data is cleared only after the server confirms the removal, so if the request cannot reach the server the app tells you nothing was deleted and keeps what it needs to try again.
  • Anonymous analytics can be turned off in app Settings. Turning it off clears queued events and stops new product events from being recorded.
  • At the operating system level, you can revoke notification permission for the app in iOS or Android settings.
  • Uninstalling the app removes all on-device data. Remaining tokens stop working and are pruned.
  • On the web, you can block cookies in your browser or use a browser-level opt out. The essays remain fully readable.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, and to not be discriminated against for exercising them. To make a request, write in through the contact page.

Children's privacy

The services are intended for a general adult audience and are not directed to children under 13. Information is not knowingly collected from children under 13. If you believe a child has provided information, write in and it will be deleted.

International readers

The services are operated from the United States. If you access them from elsewhere, your information may be processed in the United States and in other countries where the service providers listed above operate.

Security

Traffic is encrypted in transit. Access to the systems that hold notification tokens is restricted. No method of transmission or storage is perfectly secure, so absolute security cannot be guaranteed, but the surface is kept deliberately small: there are no passwords, no payment details, and no personal profiles to lose.

Changes to this policy

This policy may be updated as the services change. The effective date at the top will be revised, and material changes affecting the mobile app will be surfaced in the app itself.

Contact

Questions about this policy, or a request regarding your information, can be sent through the contact page.