Privacy Policy

2.1 What is stored on your device

The app stores the following in a local database on your device:

• your habits and their names
• the times and reminders you set
• your optional “why”
• the days you marked as done (streak and history)
• settings such as appearance and language

This data is not transmitted to me. I have no access to it. There is no account, no sign-in and no synchronisation via a server.

If you use your iPhone’s iCloud backup, this data is included in your device’s backup — encrypted, with Apple, not with me. Apple’s privacy policy applies to that.

You can delete the data yourself at any time: in the app under Settings → Privacy → Delete all data, or by removing the app from your device. In both cases the data is gone and cannot be recovered.

2.2 Reminders

The daily reminders are local notifications. They are scheduled and triggered on your device. There is no push server, no device token and no transmission of your reminder times to me or to third parties.

2.3 Anonymous usage analytics

The app counts which features are used and whether something goes wrong, so I can understand where the app gets stuck and what it could do better.

• What is sent: events such as “onboarding step viewed”, “minute started”, “minute completed”, “paywall opened”, “purchase failed”, plus counters, yes/no values, durations in seconds as well as technical details such as app version, operating system version and device type.
• What is not sent: the names of your habits, your “why” and anything else you type in yourself. No advertising ID, no tracking across other apps or websites, no email address.
• Processor: PostHog. The data is processed on servers in the European Union (eu.i.posthog.com, data centre in Frankfurt am Main). The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. A data processing agreement pursuant to Art. 28 GDPR is in place with PostHog. Where data is exceptionally transferred to the USA, this is done on the basis of the European Commission’s Standard Contractual Clauses.
• Identifier: The events are assigned to a randomly generated device identifier, so that steps belonging together are recognisable as one sequence. This identifier is not linked to your name, your email address or an advertising ID, and a new one is issued when you delete the app.
• Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is to find bugs and to improve the app on the basis of actual use, without setting up accounts or personal profiles for that purpose.
• Retention period: The events are stored at PostHog for a maximum of 12 months and are deleted automatically afterwards.
• Objection: You can object to this processing at any time — an informal email to [email protected] is enough. See section 5 for details.

2.4 Buying One Minute Pro

The purchase itself runs through Apple. Apple is your contracting party for the purchase; Apple gives me no information about who bought, only aggregated sales figures. Apple’s privacy policy applies to payment processing.

To recognise inside the app whether Pro is unlocked, and to let you restore purchases on a new device, the purchase status is managed via RevenueCat. The provider is RevenueCat, Inc., 1 Letterman Drive, Building C, Suite C3-800, San Francisco, CA 94129, USA. This involves processing a randomly generated, anonymous user identifier, Apple’s purchase receipt and technical details such as app and operating system version. The app does not transmit a name, an email address or payment data.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract for the Pro features). A data processing agreement pursuant to Art. 28 GDPR is in place with RevenueCat; the transfer to the USA is based on the European Commission’s Standard Contractual Clauses.

2.5 Rating prompt

The app may ask you for an App Store rating via Apple’s built-in dialog. The dialog comes from Apple, is displayed by Apple, and I do not learn whether or how you answered it.

3.1 Server log files

When you open this website, the hosting provider automatically processes data that your browser transmits: IP address, date and time of the request, page requested, amount of data transferred, referrer as well as browser and operating system identifiers. This is technically necessary in order to deliver the page and to keep it secure.

I do not receive these log files and keep no records of my own about your visit. The data stays with Cloudflare, which processes it on my behalf and deletes it in line with its own retention policy as soon as it is no longer needed for those purposes.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the technically sound and secure operation of the website.

The hosting provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA — for the European Economic Area, Cloudflare Germany GmbH, c/o Design Offices München Atlas, Rosenheimer Straße 143C, 8th floor, 81671 München, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.

Cloudflare operates a globally distributed network, so a request may be served by a server outside the European Union, including in the USA. Cloudflare bases these transfers on the European Commission’s Standard Contractual Clauses.

3.2 Cookies and analytics

This website sets no cookies that are not technically necessary, and embeds no analytics or advertising services, no external fonts and no social networks. Cloudflare may set a technically necessary security cookie in order to fend off automated attacks; it serves that purpose alone and not the analysis of your behaviour.