Privacy Policy

Controller

The controller within the meaning of the GDPR is:

Bastian Neumann

Biengartenstraße 57

64653 Lorsch

Email: contact@tageswerk.app

Data collected and purposes of processing

Account data: To provide your user account, we process your email address. It is used for signing in and for associating your data with you.

Reflection and habit data: The habits you create as well as your daily reflection entries (ratings, values, dates) are stored in order to provide you with trends, streaks and summaries and to sync them across your devices.

AI summaries (optional): If you switch the summary feature on, we transmit a data-minimised extract of your habit and reflection data to a service provider, which generates a written review from it. What exactly is transmitted is set out in the section “AI-generated summaries”.

Push notifications: If you enable reminders, we store a push token for your device in order to send you smart reminders.

Technical data: When operating the application, technically necessary connection data (e.g. IP address, time of the request) is generated, which is required to deliver and secure the service.

Usage data (optional): If you consent to product analytics, we record page views on the website, screen views in the app, and individual interactions to see which parts are used. The details are in the section “Product analytics”.

Minimum age: Tageswerk is intended for people aged 16 and over. Pursuant to Art. 8 GDPR, consent to the processing of your data as part of using an account requires a minimum age of 16; younger users need the consent of a parent or legal guardian.

Legal bases for processing

The processing of your account data is carried out to perform the usage agreement pursuant to Art. 6 (1) (b) GDPR.

Your habit and reflection data – in particular ratings on sleep, nutrition, exercise and mindfulness, the stress and resilience values of the stress barometer, and your free-text entries – allow conclusions to be drawn about your physical and mental well-being. We therefore treat them as health data within the meaning of Art. 9 (1) GDPR. They are processed to perform the usage agreement pursuant to Art. 6 (1) (b) GDPR and, in addition, on the basis of your explicit consent pursuant to Art. 9 (2) (a) GDPR.

This consent is voluntary and separate from your acceptance of the terms of use. You can withdraw it at any time with effect for the future; the lawfulness of processing carried out up to that point remains unaffected. After a withdrawal we no longer record reflection data. You can delete data already stored at any time by deleting your account in the app.

The processing of the push token for reminders is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future.

The processing of technically necessary connection data for the secure and stable provision of the service is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Where your reflection data contains information about health, mood or well-being, it constitutes a special category of personal data. Its transmission to the service provider for the optional AI summaries takes place solely on the basis of your explicit consent pursuant to Art. 9 (2) (a) GDPR, which you may withdraw at any time with effect for the future.

Product analytics on the website and in the app rests on your consent under Art. 6(1)(a) GDPR together with § 25(1) TTDSG. Without that consent it does not happen.

Hosting and data processing

We host the application and its associated database with Supabase. The project is located in a data center region within the European Union.

Your data is stored encrypted in transit via TLS and at rest. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Separately from that, this website runs on a dedicated server operated by Contabo GmbH in a data center within the European Union.

When you visit the website, the web server automatically records access logs (server log files) containing the IP address, the time of the request, the requested address, the HTTP status code, the amount of data transferred, the referrer and the user agent. This processing serves the secure and stable operation of the website pursuant to Art. 6 (1) (f) GDPR. The log files are deleted automatically after no more than 14 days and are not combined with other data sources.

AI-generated summaries

Tageswerk can condense your reflections into a written review covering a longer period. This feature is switched off by default. You turn it on in the app under “Settings → Summaries → AI summary” and can turn it off again there at any time. While it is off, no reflection content leaves our own infrastructure.

While it is on, we transmit a data-minimised extract for each review to our service provider Ollama Inc., USA, which generates the text from it. What is transmitted: the names and categories of your habits, average values, trend and target value, the number of days answered and — where present — your proud moments and journal entries from that period.

What is not transmitted: your email address, your name and your user ID. The extract contains nothing that identifies you directly to the service provider.

The service provider processes the content solely to produce the summary and solely on our instructions. According to its own statements, requests and responses are processed transiently for the duration of the request only, are not stored beyond that, and are not used to train AI models. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Processing takes place in the USA and, where applicable, in further countries outside the European Union. The transfer is based on the European Commission's standard contractual clauses pursuant to Art. 46 (2) (c) GDPR. For third countries, a level of protection fully equivalent to that of the European Union cannot be guaranteed in every case; in particular, access by state authorities cannot be ruled out.

The legal basis for this processing is your explicit consent pursuant to Art. 9 (2) (a) GDPR, which you give by switching the feature on. You may withdraw it at any time with effect for the future by switching the feature off again. Summaries already generated remain stored in your account until you delete them or your account.

Product analytics

We want to know which parts of Tageswerk are used and where people give up. For that we use the analytics service PostHog on this website and in the app. It counts page views and screen views and individual events — that a reflection was completed, say, or a habit created.

No measurement takes place without your consent. On the website, PostHog is only loaded after you have agreed in the notice at the bottom of the page; in the app, measurement only starts after you have switched it on under “Settings → Product analytics”. If you decline, or decide nothing at all, the service is never started and stores nothing on your device.

What is recorded: the pages and features you use, clicks on the app-store button, language changes, sign-in attempts, and — in the signed-in area — creating, editing and archiving habits, completing a reflection along with how long it took, requested data exports, and the fact that a Tageswerk Plus feature was asked for — in each case only which feature it was. The content of your reflections — ratings, free text, proud moments — is not transmitted.

While you are signed in, we associate the events with your user ID so that related steps are recognisable as one sequence. Your email address and your name are not transmitted to PostHog.

PostHog stores a random identifier on your device for this. Your decision about the measurement itself is kept in a separate cookie on the website and in local device storage in the app; both store nothing but your answer.

The provider is PostHog Inc. Processing takes place in a data-centre region inside the European Union. A data processing agreement under Art. 28 GDPR is in place with the provider.

The legal basis is your consent under Art. 6(1)(a) GDPR together with § 25(1) TTDSG. You can withdraw it at any time with effect for the future — on the website via the “Analytics settings” link at the bottom of every page, in the app via the same switch under “Settings → Product analytics”. Withdrawing ends the measurement, and what PostHog stored on your device is removed.

Registration and authentication

Sign-in is passwordless via a one-time code (email OTP): we send a code with a limited validity period to your email address, which you use to authenticate. No password is stored.

Retention period

We store your personal data for as long as your account exists and it is required for the purposes described. If you delete your account, your data, including all habits and reflection entries, is deleted completely, unless statutory retention obligations apply.

Your rights as a data subject

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR).

You can delete your account and all associated data completely and irreversibly at any time directly within the app.

You can withdraw any consent you have given at any time with effect for the future.

Account deletion via email

You can delete your account and all associated data directly within the app at any time. If that is exceptionally not possible — for example because you no longer have access to your account or the app — you can also request deletion by emailing contact@tageswerk.app. We will then delete your data completely, unless statutory retention obligations require otherwise.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement.

Contact

For questions about data protection or to exercise your rights, you can reach us at:

contact@tageswerk.app