Grooveday Privacy Policy

1. The short version

• Your data stays on your phone. Grooveday has no internet access: the app does not have the Android permission that allows network connections. It does not send your habits, history or settings to us or to anyone else.
• No user accounts, no ads, no analytics. We do not track how you use the app.
• The data in the app is encrypted. The key is protected by Android Keystore on your phone.
• We do not sell or share your data. We do not have it, so we cannot pass it on to anyone.
• You decide about copies. A backup or export file is created only when you make one yourself or turn on automatic backup, and it goes where you choose.

2. Who publishes the app

The app is published by:

SOLUTIONS 4IT ŁUKASZ ŻOCHOWSKI
ul. Księdza Biskupa Władysława Bandurskiego 50b
05-270 Marki, Poland
email: [email protected]

In this policy, "we" or "the publisher" means us.

Important: we do not receive the data you record in the app. We are the data controller (within the meaning of the GDPR) only for the personal data we actually process: when you write to us (section 10) and when Google Play gives us information about the app (section 9).

3. What data the app holds and where

The app stores what you enter or set in it:

• habits: name, icon, colour, goal (e.g. daily, several times a week, an amount and unit), "When? After what?", "Plan B", mini version description, reminder time;
• history: days you checked off a habit, amounts done (e.g. minutes), skipped days, obstacles chosen from a list ("What got in the way?"), mini version periods;
• answers in the weekly summary (chosen from a list);
• points, level, streak and habit stage calculated by the app;
• app settings (e.g. theme, reminders, widget, automatic backup) and which Knowledge articles you have read.

Where: only in the app's private storage on your phone. Other apps cannot access it.

We do not collect: your name, email address, phone number, location, contacts, photos, advertising IDs or data from other apps.

Health information. Grooveday is for tracking habits and supporting you in building them. If you write anything about your health in a habit name or another field, that information also stays only on your phone. The app is not a medical device and does not replace advice from a professional.

4. How the data on your phone is protected

• The app's database is encrypted (SQLCipher, 256-bit key). The app refuses to open the database if encryption is not working.
• The encryption key is created on your phone and protected by Android Keystore. We do not know it and cannot recover it.
• The app's data is not included in Google backups and is not moved when you switch to a new phone (we turned off Android backup for this app). You move your data to a new phone with your own backup (section 6).
• A few small pieces of information needed for the widget and scheduled reminders (e.g. today's habit names, reminder text) are kept by Android in the app's private storage outside the encrypted database. They also never leave the phone and are not included in Google backups.
• When you restore a backup, the system may briefly place a copy of the selected file in the app's private cache.

No protection is perfect. Keep a screen lock on your phone: anyone with access to your unlocked phone can open the app.

5. What may be visible outside the app

• Notifications (reminders): contain the habit name. We mark them as private, so if you have chosen in your Android settings to hide sensitive content on the lock screen, the habit name will not be shown there. You can turn reminders off in the app or in Android settings.
• Home screen widget: shows today's habit names. In the app settings you can turn on "Hide names on the widget".

6. Backups and exports — only when you decide

• Export to file (JSON) and history as a CSV file: the file is created when you ask for it, and Android shows a list of places where you can save or send it (e.g. Files, email, Google Drive). We delete the temporary file from the phone right after sharing.
• Automatic backup (off by default): when you turn it on, you choose the folder yourself, and when you open the app it saves a backup there about once a day or once a week and keeps the last few backups.
• Backup and export files are not encrypted. Anyone with access to them will see your habits and history. The app warns you about this before saving.
• If the chosen location syncs with a cloud service (e.g. Google Drive), the file will go to that service under its provider's terms. This is your choice and your relationship with that provider; we have no access to or control over these files.
• A backup file does not contain the database encryption key.

7. What we do not do

• We do not send data over the internet — the store version of the app has no network permission.
• We do not use ads, analytics, tracking or third-party crash reporting services.
• We do not create accounts or require sign-in.
• We do not sell data, share it with other companies or build profiles.
• We do not make automated decisions about you that have legal effects. Points, stages and tips are calculated on your phone only to show you your progress.

8. Permissions and why we need them

The app does not ask for access to your location, contacts, camera, microphone or photos. To save and read backups, it uses the system file or folder picker, where you choose the exact location.

9. Google Play

You download the app from Google Play. Google processes data related to downloads, updates and your Google account under its own terms: Google Privacy Policy.

Google gives us the following in the Google Play Console:

• aggregated statistics (e.g. number of installs, countries, Android versions, ratings);
• crash and error reports (Android vitals) — only from people who have agreed, in their device or Google account settings, to share usage and diagnostics data with Google; they contain technical information such as device model, Android version and a description of the error;
• reviews you publish in the store, and the name from your Google profile shown with the review; we may reply to them.

We use this information only to improve the app and to reply to reviews (legal basis: our legitimate interest, Article 6(1)(f) GDPR). We do not combine it with the data in the app, which we do not have access to anyway.

Payments. Grooveday is free today and has no payments. If a paid part is added in the future, payments will be handled by Google Play. We will not receive your card details; Google will only give us the information needed to confirm a purchase. We will update this policy before introducing payments.

10. When you write to us

If you email [email protected], we process your email address, the content of your message and any data you include in it.

• Purpose: to reply and handle your request.
• Legal basis: our legitimate interest in handling correspondence (Article 6(1)(f) GDPR).
• How long: until your request is handled, and then no longer than necessary to defend against possible claims (until the applicable limitation periods expire).
• Who has access: us and the email service provider acting on our behalf. If data is transferred outside the European Economic Area, this happens on the basis of mechanisms provided for in the GDPR (e.g. a European Commission adequacy decision or standard contractual clauses).

We do not ask you to send us data from the app. If you attach a screenshot or a backup file, remember that we will see its contents — send only what is necessary.

11. Children

Grooveday is not directed at children. It is intended for people aged 16 and over. We do not knowingly collect children's data; the app does not send us any data at all.

12. Your rights and how to manage your data

You keep full control of the data in the app:

• Access and portability: "Export to file" creates a complete JSON backup that you can restore on another phone; you can also save your history as CSV, e.g. for a spreadsheet.
• Correction: you edit habits and entries in the app.
• Deleting a habit: deletes its history. The app keeps the name of the deleted habit and the points earned with it, so that your total points and level do not change.
• Deleting all data: uninstall the app, or in Android settings go to Apps → Grooveday → Storage → Clear data. This removes the database, its encryption key and the rest of the app's data from the phone. It cannot be recovered without your own backup.
• Your backups: backup and export files saved outside the app (e.g. in a folder or in the cloud) must be deleted by you — the app does not delete them when it is uninstalled.

Rights regarding data we process (correspondence, data from Google Play): you have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. Write to [email protected]; we will reply without undue delay and within one month at the latest. Data provided by Google Play is aggregated or technical and usually does not allow us to identify you.

You also have the right to lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in the country where you live or work.

If you live outside the European Union, you have the rights granted by your local law. Wherever you are: we do not sell personal information and do not share it for advertising.

13. How long data is kept

• Data in the app: on your phone until you delete it or uninstall the app.
• Backups and exports: wherever you saved them, until you delete them. Automatic backup keeps the last few files and deletes older backups it created itself.
• Correspondence: as described in section 10.
• Data from Google Play: for as long as Google keeps it and makes it available to us.

14. Changes to this policy

If the way the app works changes (e.g. payments, accounts or sync are added), we will update this policy before the change and update the date at the top. We will announce significant changes in the Google Play update notes or in the app. The current version is always available at grooveday.app.

15. Contact

SOLUTIONS 4IT ŁUKASZ ŻOCHOWSKI
ul. Księdza Biskupa Władysława Bandurskiego 50b, 05-270 Marki, Poland
email: [email protected]