Privacy Policy

The short version

Gedup has no server, no account and no sign-in. Your alarms, your streak and your mornings live on your phone and are not uploaded anywhere.

The camera looks at your movement on the device itself. Nothing is recorded — no photo, no video, not even briefly — and no single frame ever leaves your phone.

Two services do receive something: anonymous usage data, so we can tell which screens confuse people, and your subscription status, so the app knows whether you have paid. On Android, the recognition libraries from Google that look at your movement and your photos also send usage statistics to Google, without any image. All of this is described below.

Who is responsible

The controller for the data described here is Quentin Höhne - Seilerstraße 14, 71144 Steinenbronn.

You can reach us at quentinhoehne.dev@gmail.com.

What stays on your phone

Your alarms: times, weekdays, the missions you picked, and your settings.

Your mornings: when the alarm rang, when you finished, how many reps you did, and whether you used the emergency exit. Your streak and your statistics are calculated from this, on the device.

Camera frames while a mission runs. Each frame is examined for where your body is and then thrown away immediately. There is no file, no buffer and no upload.

The full history stays here; what does leave is listed under "What we send elsewhere". If you uninstall the app, the rest is gone, and we cannot recover it for you.

What we send elsewhere

Usage data to PostHog (servers in the European Union). Which screens you open, which buttons you press, whether a morning was completed, how long you spent on a setup step, and technical error reports. Your device is identified by a random string that is created on first launch. There is no name, no email address and no account, because the app has none.

Part of a completed morning is which exercises you did and how many reps they added up to. We read from it which exercises people actually want in the morning. The individual morning with its times stays on your phone; what goes out is the summary.

From the setup, also your answer to how you heard about Gedup, for example "TikTok" or "From friends or family". It shows us where it is worth telling people about Gedup.

In the find-an-object mission, also what the recogniser saw in the picture — general categories such as "Coffee cup" or "Table", and how sure it was. That tells us which objects the mission judges too strictly. The picture itself stays on the device.

From the IP address your phone reaches its servers with, PostHog derives an approximate location: country, region and city. We use it to see which countries the app is used in. It never gets more precise than a city, and the app never asks your device where it is — it does not even hold the permission to.

Subscription status to RevenueCat (servers in the United States, under the EU Standard Contractual Clauses). Whether a subscription is active, which plan, when it ends. RevenueCat also receives the random identifier above, so that a cancellation can be matched to the usage data of the same device.

Payment is handled entirely by the store you buy through: Google Play on Android, the App Store on iPhone. We never see a card number, a billing address or a name. What we get back is "active" or "not active".

On Android only: statistics from Google's recognition libraries to Google. The app recognises your movement with MediaPipe and objects in the find-an-object mission with ML Kit. Both are made by Google, run on your phone and send Google statistics about how well they work: device model, system version and app version, a random identifier per installation, how long a recognition took, and error codes. No image, no video and no body pose leave your phone this way. Google uses the statistics to maintain and improve these libraries and is itself responsible for that, see policies.google.com/privacy. On iPhone nothing of this kind is sent: recognition there runs on Apple's own framework, and MediaPipe runs in a version without these statistics.

That is the complete list. There is no advertising, no cross-app tracking, no profiling and no sale of data to anyone.

Why we are allowed to

Usage data, error reports and the location derived from them: our legitimate interest in an app that works and in finding out where it does not (Art. 6(1)(f) GDPR). You can object at any time, and you do not have to write to us to do it: there is a switch under Profile → Legal called "Send usage data". Turn it off and the app stops sending usage data immediately. The statistics of Google's recognition libraries on Android are built into those libraries, the switch does not reach them.

Statistics of Google's recognition libraries on Android: our legitimate interest in recognising movement and objects reliably on the device, with libraries that have these statistics built in (Art. 6(1)(f) GDPR).

Subscription status: necessary to perform the contract you entered into when you subscribed (Art. 6(1)(b) GDPR). Without it the app cannot tell whether you have paid.

We do not make automated decisions with legal effect about you, and we do not profile you.

How long it is kept

On your phone: until you uninstall the app. There is no way to remove a single morning, and that is deliberate — a streak you can edit is not a record of anything.

Usage data at PostHog: twelve months, then deleted automatically.

Subscription records at RevenueCat: for as long as the subscription runs, and afterwards for as long as tax and accounting rules require.

Statistics of Google's recognition libraries: according to Google's own rules, see policies.google.com/privacy.

Permissions, and what each is for

Camera — counts your repetitions. Only while a mission is running, only on the device. Refusing it is a real option: the app then offers missions that need no camera.

Notifications — lets the alarm screen appear over your lock screen, and delivers reminders such as bedtime. The alarm sound rings without this permission; only the screen stays away.

Alarms and battery exception — so the alarm goes off at the time you set, and so the system does not shut it down while your screen is off at night.

Motion sensors — for the shake mission, if you use it.

The website

When you visit the Gedup website, it counts the visit with PostHog (servers in the European Union): which page you open, which page you came from, what kind of device and browser you use, and whether you tap the button to the App Store. From the IP address PostHog derives an approximate location: country, region and city.

The website sets no cookies and stores nothing on your device. Every visit therefore counts on its own and is not connected to earlier ones. If your browser sends "Do Not Track", it counts nothing at all.

Our basis for this is our legitimate interest in knowing whether the website reaches anyone (Art. 6(1)(f) GDPR). The data is deleted after twelve months, like the app's usage data.

The pages are delivered by Cloudflare (USA, under the EU-U.S. Data Privacy Framework). To do that, Cloudflare necessarily processes your IP address.

Your rights

You can ask what we hold about you, have it corrected or deleted, have its use restricted, receive it in a portable form, and object to processing based on legitimate interest.

To do any of that, write to quentinhoehne.dev@gmail.com and include the device identifier shown in the app under Profile → Legal. We are not being awkward: without it we genuinely cannot find your device, because we hold nothing else that points to you.

You can also complain to a data protection authority. In Germany that is the authority of the federal state where you live.

The quickest of these needs no letter at all: the switch "Send usage data" under Profile → Legal stops the usage data at the source, from the moment you tap it. Your subscription status still goes to RevenueCat, because the app needs it to know whether you have paid.

Children

Gedup is not made for children under 16, and we do not knowingly collect anything from them.

If you believe a child has used the app and you want the data removed, write to quentinhoehne.dev@gmail.com and we will delete it.

When this changes

If we change what the app does with data, this text changes with it, and the date at the bottom moves.

For anything that affects you materially, we will say so in the app rather than quietly swapping the page.