Privacy Policy

Effective date: September 24, 2026

The short version

• You can use every core feature of CalmAlone without an account. Your pets, training sessions and notes are stored on your device.
• Data only leaves your device if you turn on household sync, to send anonymous usage statistics (you can switch them off in Me → Privacy & data), and to send crash reports.
• We do not sell your data, show ads, or track you across other apps and websites. We do not use the advertising identifier (IDFA).

Who is responsible

The controller of your personal data is Eric Z ("we"). Contact: candy66861@gmail.com.

1. Data that stays on your device

Pet profiles (name, species, dates, photo), assessments, training plans, sessions, ratings, markers, real-life absences, events, notes, the emergency contact on the sitter card and your settings are stored only on your device (and in your device backups, such as iCloud Backup, if you use them). We cannot see this data. When you pick a pet photo, iOS only gives the app the photo you choose; CalmAlone has no access to your photo library.

2. Household sync (optional)

If you create or join a household, CalmAlone creates an anonymous account on our server. There is no email address or password. We store:

• a random account ID and a hashed sign-in token, and a random installation ID used for abuse protection
• the display name and color you choose for the household, and your role (owner or member)
• the records your household syncs: pet profile (name, species, birth month, date joined, a small photo thumbnail), assessment answers, training sessions and ratings, real-life absences, events and any notes you type
• invite codes (valid for 72 hours)

Purpose: to sync your data between household members and devices. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)). The full-size pet photo and the emergency contact are never uploaded.

Retention: until you leave the household or delete your server data. Deleted records are kept as a deletion marker without content for up to 180 days so other devices can remove them too. Expired invite codes are deleted after 7 days.

3. Purchases

Payments are handled by Apple; we never receive your payment details. When a household is created, the app sends us the signed App Store transaction for CalmAlone Pro so we can confirm the purchase. We store the transaction ID, product ID, purchase date, environment and refund status, linked to your anonymous account. Legal basis: performance of contract. Retention: as long as the account exists.

4. Usage statistics (you can turn this off)

To understand which features help and where people get stuck, the app sends anonymous usage events (for example "training session completed", "export created") with a random device ID created by the app, the app version, iOS version, device model, language and time zone. Events are not linked to your household account. We never send pet names, notes, display names or any other text you type.

Legal basis: our legitimate interest in improving the app (GDPR Art. 6(1)(f)). You can object at any time: in the app, open Me → Privacy & data and turn off "Share anonymous usage statistics". From then on the app stops sending usage events; this fully takes effect the next time the app starts.

Retention: individual events 90 days, daily totals (counts only) 400 days.

5. Crash reports

When the app crashes, it sends a crash report to Firebase Crashlytics, a service of Google LLC. A report contains the technical crash details (stack trace), device model, iOS version, app version, free disk space and memory, the time of the crash and a random Crashlytics installation ID. It contains no pet names, notes, display names or other text you type, and is not linked to your household account. Purpose: finding and fixing bugs. Legal basis: our legitimate interest in a stable app (GDPR Art. 6(1)(f)). Retention: 90 days.

6. Server logs and IP addresses

Our server runs on Cloudflare. To deliver requests and protect the service, Cloudflare processes your IP address. We use it to count requests for rate limiting (these counters are deleted after 2 days); we do not store it with your account or records.

7. Service providers

When data is transferred outside your country (for example from the EU/EEA to the United States), it is protected by the EU Standard Contractual Clauses and the provider's data processing terms.

8. What we do not collect

Location, contacts, photo library, microphone, camera, health data, advertising identifier, browsing history. No ads, no data sales, no tracking.

9. Your rights

• Access and portability: export all your data at any time (Me → Export & backup → JSON or CSV).
• Deletion: Me → Privacy & data → Delete my data on the server deletes your account and removes you from all households; if you own a household with no other members, the household and its records are deleted too. Deleting the app deletes the data stored on your device.
• Correction: edit any record in the app.
• Objection: turn off usage statistics in Me → Privacy & data.
• You can also contact us at candy66861@gmail.com to exercise these rights, and you may complain to your local data protection authority.

Depending on where you live, laws such as the GDPR (EU/EEA and UK), the Personal Information Protection Act of Korea, the Act on the Protection of Personal Information of Japan, the Personal Information Protection Law of China and US state privacy laws give you these rights. We reply within 30 days.

10. Children

CalmAlone is not directed at children under 13 (under 16 in the EU) and we do not knowingly collect their personal data.

11. Security

All connections use HTTPS. Sign-in tokens are stored only as a hash, and every request is checked against household membership.

12. Changes

If we change this policy, we will update the effective date above and, for significant changes, tell you in the app.