Effective date: November 2, 2026
Lapis Exercise Timer (“Lapis”, “the app”) is an Android app made by The Dragonfly Catalyst™ (“we”). This policy explains what the app stores, where, what it sends to our servers, and how you can remove it.
What stays on your phone
- Your timers, sessions, workout history and settings.
- Voice recordings the app has downloaded, so cues keep working offline.
- If you choose the Kokoro test voices, a voice model downloaded once from GitHub (https://github.com), which sees your phone’s internet address.
- If you scan a QR code to add a timer, the camera is used on your phone only; no image is saved or sent.
- If you turn on “Save workouts to Health”, finished workouts (type, start and end time) are written to Health Connect on your phone. Lapis only writes workouts; it does not read any health data.
What is stored on Dragonfly’s servers
Our servers run on Supabase. Using Lapis without signing in sends nothing about you. If you sign in with a Dragonfly account, only the following is stored:
- Your Dragonfly account: email address, username, password (stored only as a secure hash by our sign-in provider) and an optional profile picture. The same account works in all Dragonfly apps.
- A synced copy of your timers, sessions, workout history and settings, so they appear on your other devices.
- Your Lapis Premium status: trial dates, plan, renewal date and the Google Play purchase token. Payments are handled by Google Play; we never receive your card details. Google’s privacy policy: https://policies.google.com/privacy
Spoken cues
To speak a cue in a studio voice, the app sends the cue’s text (for example “Rest” or “Halfway, switch arms!”) and the chosen voice to our server, which has it spoken by Microsoft Azure AI Speech the first time and keeps the recording so it can be reused. These requests and recordings are not linked to your account. Don’t put personal information in custom cues. Microsoft’s privacy statement: https://privacy.microsoft.com/privacystatement
Analytics and advertising
Lapis has no ads, analytics or tracking, and sends no crash reports. We do not sell or share your data.
Keeping and deleting your data
- Delete your account in the app: Settings → Profile picture, email and password → Delete account. This removes your account, profile picture, synced timers, sessions, history and settings, and your Premium record from our servers. Instructions without the app: https://thedragonflycatalyst.org/apps/lapis/delete-account
- Signing out keeps your timers on the phone and stops syncing. Uninstalling the app removes everything it stored on the phone.
- Cancelling Premium is done in Google Play. Google keeps its own purchase records under its privacy policy.
- To ask for a copy of your data or for anything else to be deleted, email [email protected]
Children
Lapis is not directed to children under 13, and we do not knowingly collect their information.
Security
Connections to our servers are encrypted (HTTPS), and each Dragonfly account can only see its own data.
Changes
We will update this policy when the app’s use of data changes, and change the effective date above.
Contact
The Dragonfly Catalyst™
Email: [email protected]
See also the Lapis account deletion page.