Privacy Policy

1. Who we are

The data controller is Oleh Vasylyshyn, a sole proprietor (individual entrepreneur) established in Poland, NIP 9592087441, REGON 543109200 (“Sprigday”, “we”, “us”). Contact: support@olekraft.com.

2. Scope and summary

This policy applies to the Sprigday mobile app, its beta versions, this website, and support correspondence. Habit names, schedules, plant choices, check-ins, streaks, history, and locally calculated insights are stored on your device. We do not operate a Sprigday account or server that receives a copy of that garden data.

Limited technical or purchase information may be processed by Cloudflare, Apple or Google, RevenueCat, Sentry, and our email provider for the purposes described below. We do not sell personal data, show ads, or use behavioral product analytics.

3. Habit data stored on your device

Your habit and garden data remains inside the app sandbox on your device. It is used to schedule habits, record check-ins, calculate progress and insights, and display your garden. The app does not upload this content to Sprigday, RevenueCat, or Sentry.

Sprigday v1 deliberately excludes its database and local state from operating-system cloud backup and device transfer. We provide no account, sync, export, backup, or recovery service. Deleting the app, resetting or losing the device, or certain device failures may permanently delete the garden. Restoring a subscription does not restore habit data.

Legal basis where GDPR applies: performance of the service you request, Article 6(1)(b). Local data remains until you delete it in the app or remove the app.

4. Website request data

This static website is delivered through Cloudflare. To deliver and protect it, Cloudflare may process IP addresses, request URLs, timestamps, traffic-routing information, browser or device technical information, and security signals. Sprigday does not add analytics, advertising pixels, forms, or cookies to this website.

Purpose: delivery, security, abuse prevention, and operational reliability. Legal basis: our legitimate interests, Article 6(1)(f). Cloudflare retains data according to the service configuration and its applicable policies.

5. Subscriptions and purchases

Apple App Store or Google Play processes payments as the independent provider of your store account and purchase. We do not receive your full payment-card details. RevenueCat is planned as our subscription service provider and may process a pseudonymous app user identifier, store, product and entitlement status, transaction dates, and related technical purchase information needed to offer, verify, restore, and manage Garden Plus.

RevenueCat must not receive habit names, schedules, plants, check-in history, streaks, insights, a Sprigday account identity, or Sentry identifiers. Legal basis: performance of the free or paid service and steps you request before purchase, Article 6(1)(b). Purchase records may be retained as needed to maintain entitlement and meet accounting, fraud-prevention, and legal obligations.

6. Diagnostics

Beta and public builds are planned to use Sentry for operational diagnostics. An error or crash report may include a stack trace, error category, app release and build, environment, platform, operating-system version, database schema version, and an opaque operation or error reference. IP addresses are necessarily processed in network delivery.

Reports must not include habit names, schedules, plant choices, completion history, streaks, notification content, store receipts, prices selected by an individual, local file paths, screenshots, screen recordings, view hierarchy, form values, email, advertising IDs, or a stable user identity. Session replay, profiling, performance tracing, screenshots, and product-behavior analytics are disabled.

Purpose: identify crashes and operational failures, maintain security and reliability, and prioritize fixes. Legal basis: legitimate interests, Article 6(1)(f). Production diagnostic data is intended to be retained for approximately 90 days. Delivery of diagnostics is not required for the offline core loop.

7. Notifications and network access

Optional habit reminders are scheduled locally after you enable them. Reminder content is not sent to Sprigday. Network access is used for website and legal links, purchase and entitlement operations, and diagnostics. Core habit tracking works offline; purchase, restore, subscription management, support email, and web links require connectivity.

8. Support correspondence

If you email support@olekraft.com, we receive your email address, message, and any attachments or technical details you choose to send. We use them to answer, investigate, protect the service, and handle legal requests. Do not send habit names, schedules, or check-in history.

Legal basis: legitimate interests in providing support, Article 6(1)(f), or performance of the service, Article 6(1)(b), depending on the request. Correspondence is deleted no later than 24 months after the last message unless an unresolved dispute or legal obligation requires longer retention.

9. Sharing and processors

We disclose data only as needed to the providers described above, to our email provider, to professional advisers under confidentiality, or when required by law. RevenueCat, Sentry, Cloudflare, and the email provider process relevant data under their agreements. Apple and Google separately control store-account, payment, refund, and platform data under their own policies.

We do not sell personal data, share it for cross-context behavioral advertising, or make automated decisions that produce legal or similarly significant effects.

10. International transfers

Some providers may process data outside Poland or the European Economic Area, including in the United States. Where required, transfers are protected through an adequacy decision, the EU–US Data Privacy Framework for participating organizations, Standard Contractual Clauses, or another lawful safeguard. Contact us for information relevant to a particular transfer.

11. Your rights

Where GDPR applies, you may request access, rectification, erasure, restriction, objection, or portability where applicable, and may withdraw consent where processing relies on consent. Habit data that never leaves your device can be accessed, corrected, or deleted only through the app; we cannot retrieve it remotely.

Contact support@olekraft.com to exercise a right. You may lodge a complaint with Poland’s supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), or with the authority in your place of residence.

12. Children

Sprigday is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal data from children under 13. Contact us if you believe a child has sent us personal data.

13. Security

We use data minimization, app sandboxing, provider access controls, diagnostic allowlists, and transport security appropriate to the data processed. No system is completely secure, and local-only storage cannot protect against loss of the device or app data.

14. Changes and contact

We may update this policy when the app, providers, or law changes. The current version is published at sprigday.olekraft.com/privacy; material changes will be identified by a new date and, where appropriate, an in-app notice.