In short: your data stays on your iPhone and in your iCloud. There are no ads, we don't track you and we don't sell anything to anyone. Only the few things needed for some features to work leave your phone, and you'll find them below.
Data controller
The data controller is Matteo Bulgac, who publishes the app under the name Bulgac Dev Studio. For any privacy question write to [email protected].
What stays on your iPhone
Schedule, activities, reminders, goals, journal (texts, photos, voice notes, places and mood), statistics, settings and profile photo are saved on your iPhone. We don't see them.
If you turn on iCloud backup, a copy goes to your private iCloud storage, managed by Apple. Only you can read it, with your Apple ID.
What leaves your phone, and why
| What | Where it goes | Why |
|---|---|---|
| Title, times and location of upcoming activities (the next few hours at most), plus an anonymous device code | Our server on Cloudflare (European Union and other countries, with appropriate safeguards) | To start and update live activities in the Dynamic Island and on the Lock Screen even when the app is closed (Gold). Past activities are deleted. |
| The app version | Our server on Cloudflare | To tell you when an update is needed. |
| What you choose to show your Members: name, profile photo, today's ring, streak, keys, plate; the requests and gifts you send | Concierge's public iCloud database (Apple) | The Concierge Club. Only the Members you accepted can see it. Choose what to show in Profile › Privacy › Your Member profile. |
| Your location, when you use weather or travel time | Apple (Weather and Maps) | To show the weather and work out when to leave. We don't store it. |
| Purchases | Apple (App Store) | Subscriptions and in-app purchases are handled by Apple: we never see your payment details. |
Permissions the app may ask for
- Notifications: for activity, journal and quote alerts.
- Location (only while using the app): weather and travel time.
- Camera and Photos: profile photo, background and journal photos.
- Microphone: journal voice notes.
- Health: read-only access to sleep hours. Health data never leaves your iPhone and is never used for advertising.
- Face ID: to protect the app and the journal. iOS does the check: the app never receives your face.
Every permission is optional and can be turned off at any time in your iPhone Settings. Without a permission, only the related feature won't be available.
Legal basis
We process data to provide the features you ask for (performance of a contract, Art. 6(1)(b) GDPR) and, for phone permissions, with your consent, which you can withdraw at any time.
How long
- On the server: activities are deleted as soon as they're over; the anonymous device code stays as long as you use live activities.
- In the Club: as long as you're in the Club. If you leave or delete your data in the app, your Member profile is removed.
- On your phone and in your iCloud: until you delete it.
What we don't do
- No ads and no tracking across apps or websites.
- No selling or sharing of your data.
- This website uses no cookies or analytics tools.
Your rights
You can ask us to access, correct or delete your data, restrict its use, receive it in a readable format or object to its processing, by writing to [email protected]. Inside the app you'll also find Delete all data. If you think your data is mishandled, you can contact the Italian data protection authority (garanteprivacy.it) or the one in your country.
Children
If you are under 16 (or the age of digital consent in your country), use the Concierge Club only with a parent's permission.
Changes
If this policy changes, we update the date at the top and, for important changes, we'll tell you in the app.