Privacy Policy

This is a translation provided for convenience. In case of doubt, the German version prevails, as it is the one that refers to German and EU law in its original wording.

1. Controller

The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Till Klostermeier
tkm
Sauerbruchstr. 58
45470 Mülheim an der Ruhr
Germany
Email: journyy@usetkm.com

No data protection officer has been appointed; the legal conditions requiring one are not met.

2. The journyy app

2.1 Principle

journyy is an iPhone app that works entirely on your device. The provider operates no server infrastructure that data from the app could be sent to. There is no registration, no user account and no sign-in.

In particular, none of the following takes place:

• no collection or transmission of entries, mood values or habits to the provider
• no tracking, no analytics or statistics tools (no Google Analytics, no Firebase, no comparable services)
• no advertising and no ad networks
• no third-party software components (SDKs) that let data flow out — including no third-party crash reporting
• no creation of usage profiles

2.2 Storage on your device

Your entries, mood values, habits, settings and any profile picture you choose are stored exclusively on your device (Apple SwiftData). This data leaves the device only if you export it yourself or switch on iCloud synchronisation.

Since the provider has no access to this data, no processing by the provider takes place in this respect. The data is deleted when you delete it in the app or remove the app from your device.

If you use Apple’s regular iPhone backup (iCloud backup or a local backup), the app data becomes part of that backup. Apple’s terms and privacy notices apply to it.

2.3 iCloud synchronisation (optional)

In the app’s settings you can switch on synchronisation via iCloud. When it is active, your entries, habits and mood values are synchronised between your own devices using Apple CloudKit.

The data is held in the private database of your iCloud account. The provider has no technical access to it and can neither view nor evaluate it. The service is provided by Apple Inc., or for users in the European Economic Area by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple’s iCloud terms and privacy policy apply.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given by switching the setting on. You can switch synchronisation off again in the app at any time; your data then stays locally on the device. The feature is part of journyy Pro and is off by default.

2.4 Purchases (in-app purchases)

journyy Plus and journyy Pro are offered as one-time in-app purchases through the App Store. Apple handles the entire payment process; the purchase contract is between you and Apple, not the provider of this app.

The provider receives no personal purchaser data from Apple — in particular no name, address or payment details — only aggregated, anonymised sales statistics. Whether a purchase exists is verified through Apple’s StoreKit directly between your device and Apple.

2.5 Face ID / Touch ID

You can optionally lock the app with Face ID or Touch ID. The check is performed entirely by the operating system; the app only receives the result “successful” or “not successful”. Biometric data is neither collected, stored nor transmitted by the app. The legal basis is your consent (Art. 6(1)(a) GDPR), given by enabling the lock.

2.6 Notifications and Live Activity

Reminders and the evening “streak rescue” are scheduled locally on your device only. No push servers are involved, and no device identifiers (push tokens) are stored by the provider. You can turn notifications off at any time in the app or in the iOS settings.

2.7 Export and sharing

You can export your data yourself as PDF, Markdown or a JSON backup. The file is created on your device. Where you pass it on afterwards — to another app, by email or into cloud storage — is entirely your decision; from that point the privacy terms of the respective destination apply.

2.8 The App Store

When you download the app from the App Store, Apple processes data in the course of that (such as your Apple account and download information). The provider has no influence over this. Apple’s privacy policy governs the details.

3. This website

3.1 Access data

When this website is accessed, the server processes technically necessary access data: IP address, date and time of access, the page requested, the HTTP status code, the volume of data transferred, and the browser and operating system type submitted. This processing is necessary in order to deliver the site and to ensure its secure operation.

The legal basis is the legitimate interest in the technically error-free and secure operation of the website (Art. 6(1)(f) GDPR). The data is not merged with other sources, is not used to analyse user behaviour, and is deleted after a short period.

3.2 Hosting

The website runs on a server operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS acts as a processor; a data processing agreement under Art. 28 GDPR is in place. The servers are located in Germany.

3.3 Cookies, tracking, fonts

This website sets no cookies, uses no analytics or tracking tools and embeds no third-party content — including no fonts from external servers. There is therefore neither a consent banner nor any transfer of data to third parties when you simply visit the site.

3.4 Contacting me

There is no contact form. If you send an email, the information it contains (email address, content of the message) is processed in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves the performance or initiation of a contract, and otherwise the legitimate interest in answering it (Art. 6(1)(f) GDPR). Messages are deleted as soon as they are no longer needed and no statutory retention obligations apply.

4. Recipients and transfers to third countries

Personal data is not sold to third parties or passed on for advertising purposes. The only recipients within the meaning of the GDPR are the service providers named above, in the scope described (IONOS for hosting; Apple for download, purchase and — if you switch it on — iCloud).

Where Apple transfers data to countries outside the EU/EEA, this is done on the basis of the safeguards Apple uses, in particular the EU standard contractual clauses. The provider itself transfers no data to third countries.

5. Your rights

Under the GDPR you have the following rights:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

A practical note: because the app transmits no data to the provider, there is as a rule no data about you held there that a request for access or erasure could relate to. You manage your content yourself in the app: entries can be deleted individually, exported, or removed from the device entirely along with the app. For data held by Apple (purchase, iCloud), please contact Apple directly.

For matters arising from this policy, an email to journyy@usetkm.com is enough.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for the provider is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany

7. Changes to this policy

This privacy policy is adjusted when the app or the legal situation changes. The version published here is the one that applies.

Back to the home page · Imprint · Support