100 Days Privacy Policy

Effective date: June 6, 2026
Last updated: June 6, 2026
Operator: Limestone Labs LLC, a Texas limited liability company ("we," "us," "our")
Service: 100 Days (the "Service"), at https://100days.cc and the 100 Days mobile app.

100 Days is a summer activity app for teens (ages 13 and up). We collect as little as possible, we never sell your data, and we never show ads. This policy explains what we collect and why, in plain language for both teens and parents.

Who this app is for

100 Days is intended for users 13 years of age and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has created an account or given us information, contact us at [email protected] and we will delete it promptly.

1. What we collect

When you sign in: we use Clerk as our sign-in provider (Google, email, or Apple). We receive an account identifier and your email address.

Your profile (most of it optional):

What you do in the app: the activities ("quests") you mark complete, with optional notes, the date, friends you tag as having joined you, and any photo you attach; the activities you "want" to do (hearts); and points you earn. Points unlock cosmetic rewards only; there are no real-money purchases.

Photos: if you add a photo to an activity, the app resizes it on your device and uploads it to our storage (Cloudflare R2) under a random, hard-to-guess file name that is not tied to your name. We do not run facial recognition or any image analysis on your photos. When you remove a completed activity, its photo is deleted from storage.

Location (for weather only): if you tap the weather feature, the app asks your device for your current location and sends those coordinates to a weather service (Open-Meteo) to tune activity suggestions to the day's conditions. Your location is used in the moment and is not stored on our servers or in your profile. You can decline the location prompt and still use the app.

Notifications: if you turn on reminders or push notifications, we store the notification subscription your browser or device provides so we can send the alerts you asked for.

2. Connecting with friends

Friend connections work through invite codes: you share your code, a friend enters it, and you become part of each other's friend group. There is no public directory and no direct messaging or chat. Once you're connected, friends in your group can see your display name, emoji, and username; the activities you've hearted; and the activities you've completed (including any notes, photos, and who you tagged). They can also see a simple "birthday this week" flag during your birthday week, never the actual date. Because anyone with your code can connect, only share it with people you actually know, and only attach photos or notes you're comfortable sharing with your friend group.

3. Service providers

We share data only with the providers that help us run the Service:

ServicePurposeData involved
ClerkSign-in and account managementYour sign-in credentials; we receive an account ID and email
Google / AppleSign-in (if you choose them)The sign-in response from the provider
Cloudflare (USA)Hosts the app, database (D1), and photo storage (R2); cookieless, aggregate web analyticsYour profile, activities, friend connections, notification subscriptions, and photos; aggregate usage stats with no personal profile
Open-MeteoWeather forecasts to tune suggestionsYour coordinates at the moment you request weather (not stored)
AnthropicAutomated safety screening of user-submitted content (e.g., custom activity text or links)The text or link submitted, to check it's appropriate
SlackReceiving feedback you send usYour message, and your email if you include it
Web Push servicesDelivering notifications you opt intoYour notification subscription

These providers process data under their own privacy policies. Our data and photos are stored in the United States.

4. What we do NOT do

5. App permissions

On mobile, the app asks for permission only when you use a feature that needs it: the camera and photo library (to attach a photo), location (for weather), and notifications (for reminders). You can grant or deny each, and change them later in your device settings. The app does not request contacts or microphone access.

6. For parents and guardians

100 Days is designed for teens and built around data minimization: optional, self-chosen profile details, no precise location stored, no advertising, no data sales, and no public profiles. We do not show ads to anyone, including minors, and we do not knowingly collect more than the app needs. As a parent or guardian, you can contact us at [email protected] to review, correct, or delete your teen's information, or to ask a question about their account.

7. Keeping, deleting, and exporting your data

We keep your account information while your account is active. You can remove individual completed activities in the app (which also deletes the attached photo). To delete your entire account and associated data, or to request a copy of your data, email [email protected] with "Privacy Request" in the subject; we will action it and aim to respond within 30 days. Some information you cache on your own device is cleared by signing out or uninstalling the app.

8. Security

Connections use HTTPS. We don't store passwords (sign-in is handled by Clerk). Photos are stored under unguessable file names that aren't tied to your identity. No system is perfectly secure, but if we discover a breach affecting your information we will notify you and any applicable regulators as required by law.

9. Changes

We may update this policy from time to time. We'll update the "Last updated" date above when we do. If we make a material change, we'll provide notice in the app where appropriate.

10. Contact

Limestone Labs LLC
Austin, Texas
[email protected]