Privacy Policy

1. In short

Genug sends no personal data to the provider. There is no server and there are no user accounts. Everything you record in the app stays on your device and, if you have iCloud switched on, in your own private iCloud database. The provider has no access to it and no way of obtaining any.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

3. Data the app processes

What you record in Genug is stored locally on your device. If iCloud is switched on in your device settings, the operating system also syncs that data through Apple CloudKit into the private database of your iCloud account, and from there to your other Apple devices.

That private database belongs to your iCloud account, not to the provider. The provider receives no key, no copy and no access, neither technically nor organisationally.

• No registration, no email address, no profile.
• No transmission of content to servers of the provider.
• No disclosure to third parties, no sale of data.
• No analytics, tracking or advertising SDKs in the app.
• No app tracking in the sense of Apple's ATT framework.

So that the app can tell on a new device that you have already set it up, it also keeps a single marker in the key-value storage of your iCloud account. It holds no content.

Three features touch the system layer and are named here for completeness.

Apple Health is optional and can be switched off in the app’s settings. With your permission, Genug reads only what your habits need: activity rings, steps, distance, flights climbed, wheelchair pushes, workouts, sleep and mindfulness. When a habit’s goal is reached, Genug checks it. The values it reads are only shown. Genug stores no measured value, sends none to iCloud and transmits none to the provider. All that is stored is the goal you set for a habit and the fact that it was checked on a day. Both sit with your other entries, on your device and in your private iCloud. Genug writes nothing to Apple Health. You grant or withdraw access in iOS Settings under Health.

Reminders are optional and off by default. There is one daily reminder and one reminder per habit, each with its own time. If you switch one on, Genug asks once for the system’s notification permission and schedules the reminder locally on your device. The times stay on this device and are not synced through iCloud; no data is transmitted and no push service is used.

The export writes your entries into a text file and hands it to the system’s share sheet. Where it goes is your decision at that moment. It is the only thing that ever leaves Genug.

4. Apple’s role

Apple is independently responsible for operating iCloud and the App Store. If you use iCloud, Apple’s privacy policy and the agreement between you and Apple apply to it. The provider of this app is not party to that and receives no data about you through it.

Apple gives developers aggregated, non-personal statistics in the App Store (download counts, for instance). Those figures allow no conclusion about individuals, and the provider does not collect them independently. Whether your device sends diagnostic and crash reports to Apple is your choice in your device settings.

5. Legal basis

Where the app processes personal data at all, it does so exclusively on your device and in your iCloud account, in order to provide the function you asked for (Art. 6(1)(b) GDPR). No processing by the provider takes place.

6. Retention and deletion

You decide how long anything is kept. Today can be changed in the app: a second tap takes a habit back, past days are deliberately not editable. You delete everything by removing the app from your device and deleting its data in your device’s iCloud settings. Because the provider holds no copy, nothing then remains that it could delete.

7. This website

This website is a purely static site. It sets no cookies and embeds no third-party maps or scripts. The fonts it uses are served from this server, not fetched from a third party. There is no contact form; contact is by email.

The site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the site is called up, Vercel processes technically necessary connection data, among them the IP address, the time, the address requested and the headers sent, in server log files. The legal basis is the legitimate interest in secure and trouble-free operation (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place with Vercel.

To see how often the site is visited and which pages are read, it uses Vercel Web Analytics. It sets no cookies and stores nothing on your device. For each page view it records the time, the page, the page you came from, your approximate location (country, region, city), browser, operating system and device type. To group the page views of one visit, Vercel builds a hash from the request, which is discarded after 24 hours. We only see aggregated figures and cannot tell any individual person from them. The legal basis is the legitimate interest in understanding how far the site reaches (Art. 6(1)(f) GDPR).

To see how fast the pages load, the site also uses Vercel Speed Insights. It too sets no cookies and stores nothing on your device. For each page view it records anonymous page-speed measurements (Web Vitals) together with the page, network speed, browser, operating system, device type, country and time. The values are not tied to any person or IP address. The legal basis is the legitimate interest in a fast website (Art. 6(1)(f) GDPR).

Vercel is a company based in the United States, so personal data may be transferred to a third country in the process. The transfer is based on the provider’s certification under the EU-US Data Privacy Framework and, in addition, on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

8. Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) against the controller. Since the provider holds no data about you, a request for access will as a rule come back empty.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Contact

Questions about data protection:

privacy@genug.app

10. Changes

If the app or the legal situation changes, this policy is adjusted. The version published here is the one that applies.