Terms of Service

2. Privacy Policy

Our Privacy Commitment

We are committed to protecting your privacy. Our privacy practices are designed to comply with the Swiss Federal Act on Data Protection (revDSG) and the European Union's General Data Protection Regulation (GDPR). We apply these robust standards to all user data, regardless of your place of residence.
‍
We do not sell, trade, or otherwise commercialize your personal data. This commitment extends beyond the requirements of laws like the California Consumer Privacy Act (CCPA). Your data is not shared with third parties for advertising purposes.

2.1 Data Controller

Sven Korset (See Section 1: "Legal Notice" for full contact details).

2.2 Legal Basis for Processing (GDPR & revDSG)

• We process your data based on the following legal foundations:
• Contractual Necessity (Art. 6(1)(b) GDPR): For providing and maintaining the core functionality of our Services (e.g., app provisioning, syncing via iCloud).
• Your Consent (Art. 6(1)(a) GDPR): For voluntary actions, such as submitting support logs for error diagnosis.
• Legitimate Interests (Art. 6(1)(f) GDPR): For purposes including technical security, anonymized analytics, and abuse prevention, where our interests are balanced against your data protection rights.
• For users in Switzerland, all data processing is conducted in accordance with the principles of the revised Federal Data Protection Act (revDSG), including lawfulness, proportionality, and purpose limitation.

2.3 Data We Process and Why

2.3.1 Website & Infrastructure

• 2.3.1.1 Hosting (Infomaniak Network AG, Switzerland)
• When you visit our website, our hoster processes pseudonymized connection data (e.g., IP address, anonymized after 7 days) for technical operation and security. Data is retained for a maximum of 12 months.
  
  Privacy Policy: https://www.infomaniak.com/en/legal/privacy-policy

• 2.3.1.2 Contact Inquiries
• If you contact us via email or a form, we process your name, email address, and message content solely to handle your request. This data is typically deleted immediately and no later than 30 days after the conversation concludes.
  

2.3.2 Data Processing via Apple Services

The use of Apple's services and In-App Purchases is subject to their terms. We have no access to your payment information.

• 2.3.2.1 Apple's overarching policies
• Privacy Policy: https://www.apple.com/legal/privacy/
• Apple Media Services Terms: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

• 2.3.2.2 iCloud Sync
• Purpose: Syncing your app data (e.g., Cali todos, WoHiT workouts) across your devices.
• Processing: Data is synced using Apple's end-to-end encrypted iCloud service. We cannot access this data.
• Deletion: You manage and delete this data directly in your iCloud settings. Data remains in iCloud after app deletion and must be manually removed there.
• How to Prevent Processing: You can disable iCloud sync for the specific app in iOS Settings > [Your Name] > iCloud. Data is exclusively subject to Apple's privacy terms.
• Support: For iCloud-related support, please contact Apple directly.

• 2.3.2.3 Text-to-Speech (Apple AVSpeechSynthesizer)
• Purpose: Generating voice guidance (e.g., to speak out exercises in WoHiT).
• Processing: Uses Apple's AVSpeechSynthesizer. Processing occurs locally on your device; no data is sent to servers.
• How to Prevent Processing: Can be disabled in the respective app's settings.

• 2.3.2.4 Calendar (EventKit)
• Purpose: For displaying, creating, and managing calendar events.
• Processing: Data is read and written directly to your iOS calendars via Apple's EventKit framework. Data is managed exclusively by your iOS operating system and is not processed by our servers.
• Note for Cali: Access to your calendars is essential for the core functionality of the Cali app. Without it, the App cannot display or manage your events.
• How to Prevent Processing: You can manage or revoke the app's access to Calendars at any time in iOS Settings > Privacy & Security > Calendars.

• 2.3.2.5 Contacts (Contacts Framework)
• Purpose: To accurately display birthday information associated with your contacts.
• Processing: Contact names and birthdays are read from your iOS address book via Apple's Contacts framework. This data is read-only, used solely for display purposes within the App, and is not stored, processed, or transmitted by our servers.
• Note for Cali: Access to your contacts is optional and not required for the core functionality of the Apps. The App remains fully usable without contact access, though birthday information will not be displayed always correctly.
• How to Prevent Processing: You can manage or revoke the app's access to Contacts at any time in iOS Settings > Privacy & Security > Contacts.

• 2.3.3 App Diagnostics & Analytics
• This section covers data related to the technical performance and usage of all our apps. The data described below is provided to us by Apple through their developer services (App Store Connect and Crash Reporting). All data is aggregated or anonymized and cannot be linked to a specific user.
• Crash Reports: We collect anonymized technical data (app version, iOS version, device type, stack trace) to identify and fix errors. This data is retained for 90 days. You can disable the sharing of crash reports with developers in your iOS settings.
• App Store Connect Analytics: We receive aggregated, anonymized usage statistics (install numbers, session duration) from Apple. This data is retained for 2 years. You can disable the sharing of analytics data with developers in your iOS settings.
• Voluntary Support Logs: If you voluntarily send us logs for troubleshooting, they may contain technical data or copies of user-created content. We delete these logs no later than 30 days after resolution.

2.4 App-Specific Data Usage

• Cali: Uses Apple EventKit (Calendar events), Contacts (Birthday events) and iCloud (Todos) for sync and storage.
• WoHiT: Uses Apple iCloud (Workouts) and on-device Text-to-Speech (Voice Guidance).
• Lottie Tester: This app does not process, store, or transmit any personal data.

2.5 Your Data Protection Rights

• You have the right to access, rectify, erase, and port your data, as well as to object to or restrict its processing (Arts. 15-21 GDPR). To exercise these rights, please contact us using the details provided in Section 2.1.