Privacy Policy

SprigDay — Last updated: August 17, 2026

Who we are

SprigDay is developed and operated by Oleh Vasylyshyn, a sole proprietor (individual entrepreneur) established in Poland, NIP 9592087441, REGON 543109200 (the "developer", "we"), and the data controller for the processing described in this policy. Contact: support@olekraft.com.

Data stored on your device

Habits, check-ins, progress, statistics, reminder settings, and app preferences are stored in a local database on your device. We do not have access to this data, do not receive a copy of it, and cannot see, recover, or delete it for you.

Your device's operating system may include some local data in device backups and device-to-device transfers (Apple iCloud/device backup, Android Auto Backup). Coverage depends on platform settings and operating-system backup rules; no backup or successful restore is guaranteed. Those backups are managed by Apple or Google under your device settings and their own privacy policies, not by us.

Website data

When you visit the SprigDay website, Cloudflare, our hosting, content-delivery, and security provider, processes technical request data such as your IP address, requested URL, timestamp, browser or user-agent information, and network and security metadata. This is necessary to deliver, cache, and protect the website. We do not use website analytics, advertising trackers, or non-essential cookies.

The website stores your selected theme and language locally in your browser so it can remember those choices. These functional preferences are not used for tracking and remain until you clear the site's stored data in your browser.

Purpose: delivering and securing the website and remembering settings you select. Legal basis (GDPR): legitimate interest, Art. 6(1)(f). Retention: browser preferences remain until you clear them; technical request data is retained only as needed for delivery and security under the applicable Cloudflare service settings.

Purchases

Payments for the optional Garden Plus subscription are processed entirely by Apple (App Store) or Google (Google Play). We never receive your name, billing address, or payment card details.

To retrieve the Garden Plus offering and subscription status, validate purchases, and keep paid access working (including after reinstalling the app), we use RevenueCat as our service provider. The RevenueCat SDK initializes when the app starts, including for users who have not made a purchase. It processes a randomly generated pseudonymous App User ID, first- and last-seen timestamps, and basic technical information such as platform, OS version, app version, and locale. If you purchase or restore Garden Plus, it also processes the applicable purchase receipt or token, transaction history, and subscription status. The identifier is not linked to your name or email, because SprigDay has no accounts. It is shown as the Purchase ID in the app under About & Support → Support Information, so you can quote it when you contact us about a purchase or subscription.

RevenueCat also produces limited subscription metrics from these purchase and entitlement records, such as active subscriptions, renewals, refunds, plan period, and aggregate revenue trends. SprigDay does not send habits, check-ins, screen activity, or general usage events to RevenueCat. We do not use these metrics for advertising, profiling, or automated decisions.

Purpose: determining whether free or paid access applies, presenting and managing Garden Plus, validating purchases, restoring paid features, and understanding the operation and sustainability of the subscription. Legal basis (GDPR): performing the free/paid service contract and taking steps you request before a subscription purchase, Art. 6(1)(b). The pseudonymous status check is necessary to determine the access level that applies to your installation. For the limited subscription metrics only, our legal basis is our legitimate interest in understanding subscription operation and sustainability, Art. 6(1)(f). Retention: purchase and entitlement records are kept as long as needed to maintain your access and to comply with legal obligations.

Crash reports, diagnostics, and release health

When the app starts, our service provider Sentry, hosted in the European Union (Germany), automatically begins a limited technical session and ends it when the app closes. A session may include a random session identifier; the installation identifier described below; its start, update, and end times and duration; the app release and environment; the number of errors; and its outcome or status. We use this only to calculate crash-free sessions and installations, compare release reliability, understand how broadly a problem affects the installed base, and prioritise fixes. Automatic sessions do not record screens viewed, taps, features used, habit activity, or engagement.

When the app produces an error or crash, it also sends a diagnostic report. A report may include technical error details and a stack trace; app, runtime, operating-system, and device technical context; app language; timestamp; event and trace identifiers; loaded module versions; and recent technical breadcrumbs such as app lifecycle, navigation, touch, or network events preceding the error.

Each report also carries a randomly generated installation identifier, shown as the Diagnostic ID in the app under About & Support → Support Information. It is created on first run and stored inside the app's sandbox. It lets us distinguish repeated errors on one installation from a defect affecting many installations, and lets you identify your diagnostic records if you request access to or deletion of them. The value is not linked to your name, email address, purchase, or RevenueCat identifier during ordinary app use. If you voluntarily include it in a support or data-rights request, it becomes linked to that correspondence only so we can locate the relevant records. Reinstalling the app normally replaces it with a new value, although an operating-system device backup may carry it forward.

Reports do not include your habits, check-ins, other content you create, screenshots, screen contents, text entered or displayed in controls, or page titles. As with any network request, your IP address is processed transiently for delivery; Sentry may use network information to derive approximate location context.

Purpose: maintaining stability and security, measuring limited release health, understanding the overall severity of defects, and prioritising fixes. We do not use Sentry for feature-popularity analytics, habit analytics, advertising, profiling, or automated decisions. Legal basis (GDPR): legitimate interest, Art. 6(1)(f). Retention: session and diagnostic data are retained for a limited period (approximately 90 days) and then deleted.

Support email

If you contact us, we receive your email address and the message you choose to send. If you use the in-app support option, the app prefills a diagnostic block containing the app version and build, platform, OS version, device model, device type and idiom, app language, and an error reference when one is available. Your email app shows this information before sending, so you can review, edit, or remove it.

Support correspondence sent to support@olekraft.com is handled through our email service provider acting on our instructions under a data processing agreement. We use it only to respond to your request. Legal basis (GDPR): legitimate interest, Art. 6(1)(f). Retention: support correspondence is deleted no later than 24 months after the last message, unless a legal claim requires longer retention.

App permissions

• Notifications (optional): habit reminders are scheduled locally on your device; no data is sent anywhere.
• Network access: used only for purchase validation and crash reporting as described above. All core habit-tracking features work offline.

What information is required

None of the information described in this policy is required by law. RevenueCat's pseudonymous identifier and basic technical information are processed automatically when the app starts and are necessary to retrieve and manage Garden Plus; if that processing is unavailable, subscription offers, status, purchases, and restoration may not work. Purchase information is processed only if you purchase or restore Garden Plus.

An error report is sent automatically when the app produces an error or crash. Core habit features do not depend on a report being delivered, but without diagnostics we may be unable to identify and fix the defect. Contacting support and including the optional diagnostic block are voluntary; if you do not provide a return address or enough information about the problem, we may be unable to respond or investigate it. Technical request data is necessary to load and protect the website. Saving the theme or language you select is optional, and you can remove those preferences using your browser controls.

Data sharing

We do not sell personal data, do not share it for advertising, and do not use general-purpose behavioral analytics, habit-activity analytics, or advertising SDKs. Personal data is disclosed only to the service providers named above and to people working on our behalf under confidentiality obligations. RevenueCat, Sentry, and Cloudflare act on our instructions under data processing agreements; our support email service provider handles correspondence on our instructions. Data may also be disclosed to Apple or Google as independent controllers of your purchase, or where disclosure is required by law. We do not "sell" or "share" personal information as those terms are defined in the California Consumer Privacy Act. We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

International transfers

Sentry event data is stored in the European Union (Germany). Sentry may process or allow access to personal data from the United States or other non-EEA locations; applicable transfers are protected by the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses under its data processing agreement. RevenueCat is based in the United States; transfers to it are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses incorporated in its data processing agreement. Cloudflare may process website request data in the United States and other locations; its Data Processing Addendum provides the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses as transfer mechanisms. Support correspondence may be processed outside the European Economic Area under the email provider's data processing agreement and, where required, Standard Contractual Clauses. You may contact us to request information about the safeguards applicable to a transfer.

Sources of personal data

We receive app and website technical data directly from your device, app, or browser. Apple or Google supplies purchase and entitlement information through RevenueCat when applicable. Sentry may derive approximate location context from network information. Support information comes from the email and optional diagnostic details you choose to send.

Data retention and deletion

Local data remains on your device until you delete it in the app or uninstall the app (copies may persist in your Apple or Google device backups under their retention rules). Session and diagnostic data are deleted after approximately 90 days. Purchase records are kept as long as needed to maintain your entitlement and to comply with legal obligations. Support correspondence is deleted no later than 24 months after the last message, unless a legal claim requires longer retention. To request deletion of remotely processed data, email us; note that we cannot delete data held independently by Apple or Google.

Your rights

Where the GDPR or similar laws apply, you have the right to access, rectify, erase, restrict, object to the processing of, and receive a copy of your personal data, as well as the right to data portability where applicable. You also have the right to lodge a complaint with a data protection supervisory authority — the developer's lead authority is Poland's UODO (Urząd Ochrony Danych Osobowych), and you may also complain to the authority in the EU member state of your residence. To exercise these rights, contact us at the email above. To identify diagnostic records associated with your installation, include the Diagnostic ID available in the app under About & Support → Support Information. Because your habit data is stored only on your device, you can access, correct, or delete it directly in the app at any time.

If you are in the United Kingdom or Switzerland, you have equivalent rights under the UK GDPR or the Swiss Federal Act on Data Protection, and may lodge a complaint with the UK Information Commissioner's Office (ICO) or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Children

SprigDay is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app or legal requirements change. The current version is always available at sprigday.olekraft.com/privacy; material changes will be indicated by the date above and, where appropriate, notice in the app. We keep every earlier version of this policy on file and will provide the version in force on a given date on request.

Contact