Privacy Policy

As of: 8 July 2026 · Version 1.2 · applies to the “Fjara” app and the website fjara.app

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

A data protection officer is not legally required and has not been appointed.

2. Principle: Everything stays on your device

• No provider servers; the app initiates no network connections of its own.
• No account, no registration, no e-mail address required.
• No cloud sync by default; an optional iCloud sync into your own private iCloud is available, but switched off by default and only at your explicit request (section 3e).
• No analytics, no tracking, no profiling, no advertising, no third-party SDKs, no automated decision-making — hence no App Tracking Transparency dialog appears.
• The provider collects, stores, receives, and transmits no personal data whatsoever — neither names nor IP addresses, device identifiers, or usage data.

Since the provider processes no personal data, many classic GDPR obligations are largely moot. Your rights are nevertheless set out in full (section 8).

3. Individual processing operations (app)

a) Voluntary entries

Entries such as an optional first name, your start date, or notes serve solely the local display in the app and remain on your device.

b) Purchases (optional Plus membership)

Purchases are processed entirely by Apple (StoreKit). The provider receives no payment, billing, or address data; the app verifies the entitlement locally only. Responsible for purchase processing is Apple Distribution International Ltd. or the Apple entity responsible for you; the Apple Privacy Policy applies.

c) Reminders

Optional reminders are scheduled purely locally via the operating system (UserNotifications). There is no push server.

d) Operating-system diagnostics

Only if you have enabled sharing diagnostic data with Apple in the iOS system settings may Apple process crash reports. This is an Apple feature; the provider receives nothing from it.

e) Optional iCloud sync (at your explicit request)

iCloud sync is off by default — Fjara works purely locally. Only if you explicitly turn it on in the settings will your Fjara data be synced to your private iCloud, so that it stays consistent across your own Apple devices and is preserved when you switch devices. The data then resides in the private CloudKit database of your own Apple account — not on any provider server. The provider operates no servers, receives no credentials, and has no insight whatsoever into this data; the controller for the iCloud storage is Apple within the scope of your Apple account (the Apple Privacy Policy applies). You can turn the sync off again at any time. For the best possible protection, we recommend enabling Advanced Data Protection in Apple's iCloud settings; this end-to-end encrypts your iCloud data so that not even Apple can read it.

f) Apple Health (optional, only at your explicit request)

Off by default. Only if you explicitly enable it does Fjara use Apple Health (HealthKit): the app logs completed exercises as mindful minutes in your Health app. On Apple Watch, Fjara can additionally read your heart rate during an active exercise to show it to you live. This health data is processed exclusively on your device and in your own Apple Health database — it never leaves the device, is not transmitted to the provider, not stored there, and never used for advertising, analytics or profiling. Apple is responsible for Apple Health within your Apple account. You can revoke access at any time in the Health app or in iOS settings. Legal basis is your consent (Art. 6(1)(a) in conjunction with Art. 9(2)(a) GDPR).

g) Device backups

If you create a backup of your device — via iCloud Backup or through a computer — that backup may also contain Fjara’s data. This is your device’s doing, not the app’s: Fjara transmits nothing in the process and has no influence over it. The backup is your own and is encrypted by Apple; Apple is responsible for it within your Apple account. We deliberately do not exclude the data from the backup, because otherwise you would lose everything without warning when changing devices. If you would rather not have this, you can turn off device backup for Fjara in the iOS settings.

4. Website (fjara.app)

This website is static and uses no cookies, no analytics tools, and no third-party embeds (no external fonts, no CDNs).

The website is served via GitHub Pages (GitHub, Inc.). When you access it, GitHub as hosting provider processes technically necessary server logs (e.g. IP address, time of access, page requested) to deliver the site and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Details: GitHub General Privacy Statement. The provider himself has no access to personal log data.

5. Legal bases

Insofar as any processing within the meaning of data protection law takes place at all (locally on your device or in the host's server logs), it is based on Art. 6(1)(b) GDPR (provision of the app's functions) and Art. 6(1)(f) GDPR (legitimate interest in a data-minimising app and a secure website). If you enable the optional iCloud sync (section 3e), this is additionally based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future by switching the sync off. The provider transmits no data to himself, to third parties, or to third countries.

6. Disclosure to third parties

None. No data is sold, rented, or shared. The only third-party contacts are Apple for purchase processing (acting on its own responsibility, section 3b), Apple as the operator of your own iCloud if you enable the optional iCloud sync (section 3e), and GitHub as website host (section 4).

7. Storage period & deletion

Your data remains on your device until you delete it in the app or uninstall the app. Deleting the app removes all locally stored Fjara data. If you have enabled the optional iCloud sync, a copy also remains in your own private iCloud, even after uninstalling; you can remove it at any time by deleting the Fjara data in the app while sync is active, or by removing it in your Apple account's iCloud settings. Deletion by the provider is neither possible nor necessary, as he holds no data.

8. Your rights (GDPR)

You have the rights under Art. 15–18, 20, and 21 GDPR (access, rectification, erasure, restriction, data portability, objection). Since the provider holds no personal data about you, you exercise control directly yourself: view your data in the app, rectify it by editing, erase it by uninstalling. For data connected with purchases, please contact Apple.

You also have the right to lodge a complaint with a supervisory authority; in Austria: Österreichische Datenschutzbehörde, dsb.gv.at.

9. Children & minors

Fjara is aimed at adults who want to change their relationship with substances. Regardless of this, no data collection by the provider takes place at all. Purchases are subject to Apple's parental-control and Family Sharing rules.

10. Changes to this policy

This policy will be adapted if the app or the legal situation changes. The optional iCloud sync described in section 3e is already accounted for and remains off by default. Should a further feature ever be introduced through which data could leave the device, this policy will be updated in advance and the feature clearly marked. The current version can be found in the app under Settings → Legal & Privacy and on this website.

11. Contact

Privacy questions: privacy@fjara.app · Provider details: Imprint / Legal Notice.