Privacy policy

1. Controller

The controller responsible for data processing in the dailypiece app is:

Jonas Fehling
Herrenwiesenstraße 2/1
69126 Heidelberg
Germany
Email: jonas@yamaji.studio

For all questions regarding data protection and exercising your rights, an email to this address is sufficient.

dailypiece is currently in a test phase (Beta via Apple TestFlight); features and this policy may still change prior to final release.

2. In short

• No proprietary servers: dailypiece has no server of its own. Your data stays on your iPhone and in your own personal iCloud account with Apple. We as the developers cannot access it.
• No tracking & no ads: There is no tracking, no advertising, no third-party analytics or crash-reporting services, and no third-party software code in the app.
• No data sales: Your data is never sold and never shared with third parties. Other users only see what you deliberately share via the friends feature (Section 5).
• Full control: All system permissions (Apple Health, Screen Time, Notifications) are requested only with your explicit permission. You can revoke them at any time in iOS Settings.

3. Health data (Apple Health)

With your permission, dailypiece reads the following data from Apple Health to display your daily progress:

The app reads daily totals for the past 8 days. Steps are also queried in the background (at most hourly) so friends can view an updated status. The app also requests write permissions for steps and active energy, but does not currently write data there.

Health data is subject to special protection under data privacy laws (Art. 9 GDPR). We process this data only on the basis of your explicit consent, granted in the app prior to access as well as via the native Apple Health permission dialogue (Art. 9(2)(a) GDPR). You can revoke this permission at any time in the Health app under Profile → Apps → dailypiece. Apple Health data is never used for advertising and is never sold.

4. Stored data (iPhone and your iCloud)

To keep your data in sync across your devices and ensure it survives a reinstall, the app saves it locally on your iPhone and syncs it via Apple iCloud (CloudKit) into the private database of your personal iCloud account:

• Entries: Every record with timestamp and quantity (e.g., water, workouts, supplements taken, meals, sleep schedule, and daily totals from Apple Health).
• Your Trackables: Active trackables, personal targets, and increment sizes.
• Supplements: Names entered by you, intake frequency, and times of day. Please note that supplement names may allow inferences regarding your health.
• Points & Challenge achievements: Hours in which points were earned, and challenge levels completed.
• Profile: Your chosen display name and profile image.

The provider of iCloud services is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple’s Privacy Policy and your personal iCloud settings apply. We as developers cannot view or access this data. If iCloud is disabled, your data remains stored strictly offline on your device.

Transfers to the USA: Apple may process iCloud data and push notifications through Apple Inc. in the USA. According to Apple, this international transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

5. Friends (optional)

The friends feature is entirely optional. For each friendship, the app creates a dedicated shared record in the inviter's iCloud account and shares it via Apple iCloud Sharing using an invite link. Only the two participants have access. You can connect with up to 10 friends.

Status updates occur upon changes and approximately every 30 minutes in the background. Terminating a friendship permanently deletes the shared iCloud zone.

Invite link: Share invite links only directly with the intended recipient. Before a third party is rejected by the app, they could theoretically view shared values briefly.

Legal basis: The legal basis is your explicit consent, granted when establishing a friendship and activating shared categories (Art. 6(1)(a) GDPR; for health data Art. 9(2)(a) GDPR). You can withdraw this consent at any time by toggling off individual categories or ending the friendship.

6. Other features

• Screen Time: With your approval, the app uses Apple's Screen Time APIs. Apple only reports when designated threshold events are triggered. The app estimates daily usage minutes and enforces the limits you define. The app never sees names of selected apps in plain text. Usage minutes stay on the device, unless shared with friends (Section 5).
• Profile Contact Selection: You may pick your own contact via the iOS single-contact picker. The app receives only this single contact's name and picture, without accessing the rest of your address book.
• About You: Age group, activity level, height, and weight are used exclusively on-device for goal recommendations. These details never leave your device, are not synced to iCloud, and are never shared with friends.
• Notifications: With your permission, notifications appear (e.g., incoming friend challenges). Silent background synchronisation relies on Apple Push Notification service (APNs) and iOS background refresh.
• Purchases: In-app subscriptions and purchases are handled exclusively by Apple. The app only receives confirmation of active status, never payment details. No fees are charged during the beta.
• Local Settings: Unit preferences, colorblind mode, glass volume, and sleep schedules remain strictly on the local device.
• External Links: Links within the app (such as support documentation) open external websites subject to their respective privacy terms.

7. Legal bases, retention, and your rights

• Legal bases: Health data and values shared with friends are processed based on your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). All other features are processed as necessary for performance of the app service you request (Art. 6(1)(b) GDPR).
• Voluntary Provision: All permissions and data inputs are voluntary. Without Apple Health access, activities cannot be imported automatically. Without Screen Time permissions, usage tracking and app limits cannot function. Without a profile name and picture, the friends feature is unavailable. All other core functions continue to work.
• Retention & Erasure: Data remains stored until you delete it:
  1. Deleting the app removes all local data on the device.
  2. Deleting iCloud data: iOS Settings → [Your Name] → iCloud → Manage Storage → dailypiece → Delete Data.
  3. Ending a friendship immediately removes the shared zone.
  4. Apple Health: Data written to Health (water intake) can be deleted directly within the Apple Health app.
• Your Rights: You have the right to access, rectification, erasure, restriction of processing, and data portability (Art. 15–20 GDPR), as well as the right to object to processing based on legitimate interests (Art. 21 GDPR). You may revoke granted consents at any time with future effect (Art. 7(3) GDPR). Since we hold no direct access to your iCloud data, we will gladly assist you in viewing or deleting it yourself. Contact us at jonas@yamaji.studio.
• Email Contact: When contacting support, your email address and message contents are processed to resolve your inquiry (Art. 6(1)(f) GDPR; for inquiries regarding your rights Art. 6(1)(c) GDPR). Emails are deleted once resolved, subject to statutory retention obligations.
• Right of Complaint: You have the right to lodge a complaint with a supervisory authority. Our competent supervisory authority is:
  Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
  Street Address: Heilbronner Straße 35, 70191 Stuttgart, Germany
  Postal Address: Postfach 10 29 32, 70025 Stuttgart, Germany
  Email: poststelle@lfdi.bwl.de
• Age Requirements: dailypiece is intended for individuals aged 16 and older. Younger users require parental consent.
• Not a Medical Device: Progress rings and recommendations serve as guidance only and do not constitute medical advice.
• No Automated Decision-Making: Scoring, status colours, and target suggestions are computed automatically, but produce no legal or similarly significant effects concerning you (Art. 22 GDPR).
• Amendments & Precedence: This privacy policy is updated to reflect app modifications. The current version applies. Last updated: 12 November 2026. In the event of discrepancies between the German and English versions, the German version shall prevail.