Exa Privacy Policy

The short version

Exa is local-first. In the current public source, the productivity records you create stay in Exa's app-private storage on your device unless you deliberately export a copy.

Exa has no account or login, no ads, no analytics, no third-party trackers, no remote API or cloud service, and no Android Internet permission. The current public source does not send user data to Advancing Quality Lives LLC or a developer-selected service, and it does not share user data with third parties on its own.

Who provides Exa

Exa is provided by Advancing Quality Lives LLC. The permanent public Android application ID is org.advancingqualitylives.exa.

Exa is a general productivity and external-memory tool. The current public source does not handle health data.

Information Exa handles on your device

Depending on the features you use, local Exa records can include:

atoms and nested steps, lists and checklists, modes, organization choices, and completion history;
manually entered Civi people and relationship-support notes;
manual Anchors, Cycle queues and timers, alarms and reminders;
Bridges between Exa records and Inbox captures;
Freedom Zone and My Clearing activities; and
Quiet state, preferences, onboarding choices, schedule and occurrence identifiers, one bounded recovery record, and version metadata needed to operate the app.

These records are stored in app-private storage on the device. Android backup is disabled for the current public source. Exa does not operate a server-side copy of these records.

The public app does not automatically read another Exa installation or pull records from other apps, accounts, contacts, calendars, calls, messages, notifications, or computers. Import occurs only when you select an Exa backup file.

Collection, sharing, ads, and tracking

Collection: the current public source does not send user data to Advancing Quality Lives LLC or a developer-selected service. User-directed exports are described below.
Sharing: the current public source does not share user data with third parties.
Ads and analytics: there are no ads, advertising SDKs, analytics SDKs, or third-party trackers in the current public source.
Accounts: Exa has no account, login, membership, or server-side profile.
Network access: the current public Android manifest does not request Internet access.

These pages are static and do not set cookies, run scripts, submit forms, or load tracking resources.

Your export, import, and deletion controls

Export: Export happens only when you choose it. Exa asks Android's document interface to save a portable copy to a location or document provider you select. The exported file contains your Exa records and becomes a user-managed copy. A provider you choose may store or sync that copy under its own terms; Exa does not send it to Advancing Quality Lives LLC or a developer-selected service.
Import: Import happens only when you select an Exa file through Android's document interface. Exa validates and previews the file. If you confirm, the import replaces the current Exa record set; it is not a background sync or an automatic merge.
Recovery copy: If Exa finds unreadable local state, it preserves that state instead of silently replacing it and can let you save a troubleshooting copy. That copy is user-managed like an ordinary export and can contain the Exa information stored on your device.
Delete All: The in-app Delete All flow cancels Exa alarms and timers, erases Exa's app-private records, and returns the app to first-run setup. There is no server account or server-side record to delete.
Uninstall: Uninstalling Exa removes its app-private records under Android's normal app-removal behavior.
Exported copies: Delete All and uninstall do not delete files you previously exported. Those copies remain wherever you chose to save them until you delete them through that location or document provider.

Android permissions and why they are used

The current public manifest declares exactly the following seven permissions. They support alarms and reminders that a user chooses to create; they are not used for marketing or tracking.

android.permission.POST_NOTIFICATIONS: Shows user-created alarm and reminder notifications on supported Android versions.
android.permission.RECEIVE_BOOT_COMPLETED: Restores user-created alarm scheduling after a reboot and responds to relevant package, date, clock, and time-zone changes.
android.permission.SCHEDULE_EXACT_ALARM: Allows a user to schedule a precisely timed alarm. Android treats this as revocable special access.
android.permission.FOREGROUND_SERVICE: Runs the visible alarm-ringing service when a scheduled alarm fires.
android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED: Supports the exact-alarm-triggered foreground alarm experience on applicable Android versions.
android.permission.VIBRATE: Provides haptic output for a user-requested alarm.
android.permission.WAKE_LOCK: Keeps alarm execution awake long enough to present and control an active alarm.

Notification access and exact-alarm access are requested only when a user chooses to set up an alarm. A user can deny or later revoke these permissions in Android settings, although the related alarm behavior may then be unavailable.

The current public manifest requests no location, camera, microphone, Bluetooth, advertising-ID, package-inventory, broad storage, or Internet permission.

Keeping local information safe

Your device's lock, Android's app isolation, and your handling of exported files are important protections. Exported files can contain the Exa information you entered, so store and share them with the same care you would use for other personal notes.

How long information remains

Exa keeps its local records on your device until you change or delete them, use Delete All, clear Exa's app storage through Android, or uninstall the app. Advancing Quality Lives LLC does not retain a server copy because the current public source does not send these records to the company.

Files you export are separate user-managed copies. They remain at the location you selected until you delete them there.

Audience

Exa is a general productivity tool and is not intentionally directed to children. It does not provide a social feed, public user-to-user exchange, purchases, or supplied mature content in the current public source.

Changes to this policy

This is a living policy. Advancing Quality Lives LLC will review it when Exa's behavior, permissions, included services, support practices, or data flows change. Material changes will be reflected in the policy text and its effective date, and the Google Play Data safety declaration will be updated when required.

Effective date: August 15, 2026.

Contact

For privacy questions about Exa, email privacy@advancingqualitylives.org. Replies may come from Exa App Support.

Emailing Advancing Quality Lives LLC is optional and happens outside Exa's on-device app data flow. The company and its email provider receive the sender address, message, and any attachments you voluntarily send so the company can review and respond to the request.

Do not attach an Exa export, screenshot, record title, or record content unless you deliberately choose to share it and it is reasonably necessary for the question. Exa exports can contain the productivity information you entered.

Advancing Quality Lives LLC may retain support or privacy correspondence for as long as reasonably needed to respond, document the resolution, protect the service or legal rights, and meet applicable obligations.