Privacy Policy
Version 7 · in effect from 18 November 2026EnglishLietuvių
Short version: everything you write in Calmflect stays in the private storage of the app on your device. We never receive a copy of it, we collect only limited anonymous usage statistics, we run no ads and no tracking, and we keep no accounts of our own. This policy covers the narrow exceptions — the catalogue and the document updates the app downloads, the anonymous usage statistics, an optional sign-in, the crash summaries your phone's operating system produces, and the backup your own phone may make — and the rights you have.
1. Who we are
Calmflect is provided by the developers of Calmflect, the data controller for the limited processing described here. You can contact us at hello@calmflect.com.
The same policy applies to the Calmflect app on iOS and on Android and to this website. Where a section has extra text under an "iOS" or "Android" sub-heading, that part is specific to that platform; everything else applies everywhere.
2. What is stored, and where
Your entries (answers, notes, dates), any in-progress draft, any photo you attach to an entry, and your settings are stored only in Calmflect's private storage on your device. Nothing from them reaches our server except the limited anonymous usage statistics described in the section "Anonymous usage statistics".
The app also keeps a few small technical values on the device: a randomly generated identifier used only to vary which question you see (it is not tied to you or to your device and is never sent anywhere), a note of which questions you have already been shown, and a record of which version of this policy and of the Terms of Service you accepted and when. None of it leaves the device.
We never receive a copy of any of it. The only copy that can leave your device is one your own phone makes on your behalf — see the Device backup section, below.
3. How your data is protected
Calmflect keeps your entries in the private storage area the operating system gives each app and walls off from other apps. We hold no copy on any server of ours, so there is nothing at our end that could be breached, lost, or handed over.
The optional app lock adds a second barrier in front of the app itself; it is described in its own section below.
iOS
On iOS every file the app writes is marked with the system's Data Protection, so its contents are encrypted while your device is locked. Calmflect adds no password or key of its own on top of what the operating system provides.
Android
On Android the app's private storage sits within the device-wide encryption Android applies to internal storage. Calmflect adds no separate encryption layer of its own.
4. What the app downloads
The app downloads its catalogue of questions, suggestions and other text from calmflect.com, so we can add and refresh content over time without shipping a new app version. It also checks the same site for the current version of this policy and of the Terms of Service, so you learn about a change without waiting for an app update.
Both are plain downloads. The app sends no personal data, no account, and nothing you have written. The catalogue request carries a fixed app key that is identical in every copy of the app — it identifies the app, not you — and a content tag so an unchanged catalogue is not fetched again. The document check carries neither a key nor a cookie: the app deliberately discards any cookie the server might set, so it cannot become a hidden identifier.
Either request exposes your device's IP address to our server for as long as the request takes, as any web request does. We keep no access log, so your IP is not written down anywhere. Connections are always encrypted (HTTPS). If the app cannot reach the server, it keeps using the catalogue and the document text it already has.
5. What we do not do
We do not run ads and we do not track you. We keep no accounts of our own and never see or receive what you write. We use no advertising SDKs. We collect only the limited anonymous usage statistics described in the section "Anonymous usage statistics", which never include what you write.
We do not access your health data, location, contacts, or microphone.
This website
On this website, the optional return-visit cookie is our own: it is never used for advertising and is never shared or combined with data from other sites.
6. Anonymous usage statistics
The app collects limited anonymous usage statistics, so that we can maintain and improve it. The statistics do not contain your entries, your name, your email address, your IP address or any identifier of you or your device, and we do not use them to identify you.
The statistics cover: whether and how often the app is opened and approximately how long ago it was installed; which screens and features are used; whether an entry is created, but not its content; which question from our catalogue is opened or answered, by catalogue number only and without your answer; whether onboarding is completed; which version of this policy is accepted; whether the reminder, app lock and sign-in are on; and whether an error message was shown. Each statistic is accompanied by the app version, the major version of the operating system, the app language, the country set on your device and the version of our question catalogue.
The statistics are sent to our server. Our server receives your IP address when the app connects, but does not store it, does not keep logs of it and does not pass it on. The statistics are stored in the European Union by an analytics service provider that processes them only on our behalf, as our processor. They are kept for no longer than 1 year.
You can stop the statistics at any time in Settings → Data & privacy by switching off "Share anonymous usage statistics".
7. Crash and performance summaries
We operate no crash-reporting service of our own and run no analytics SDK. What little diagnostic information exists is produced and handled by your device's operating system, not by us.
iOS
On iOS, crash and freeze information is handled by the operating system itself; the app does not send it to us and we do not receive it. If you have turned on sharing analytics with app developers in iOS Settings, Apple may show us anonymised, aggregated crash reports — that sharing is controlled by you in iOS, not by the app.
Android
On Android, if you have turned on sharing usage and diagnostics data in your system settings, Google Play may show us anonymised, aggregated crash and performance data. That sharing is controlled by you in Android settings, not by the app.
8. Notifications
If you enable reminders, they are scheduled as local notifications by your device's operating system. No push servers and no notification tokens are involved. The reminder text is a fixed, generic phrase — it never contains any of your entries.
9. Signing in
Signing in is optional and can be skipped. If you use it, Calmflect stores only a one-way (SHA-256) hash of your account identifier on your device, so the app can recognise it. We do not store or transmit your name, your email, or the account itself, and the app does not ask the sign-in provider for your name or email address.
iOS
On iOS this is Sign in with Apple. The sign-in itself is handled by Apple and is subject to Apple's own privacy policy.
Android
On Android this is Sign in with Google. The sign-in itself is handled by Google and is subject to Google's own privacy policy.
10. Other services on your device
A few things the app leans on belong to the platform, not to us. They operate under the platform vendor's privacy policy, and we have no visibility into what they do.
iOS
On iOS that means Sign in with Apple, used only if you choose it, and the App Store review prompt, which the app may ask iOS to show once after you have made a few entries.
Android
On Android that means Google Play services, used only if you sign in with Google, and Google Play's own in-app review prompt, which the app may ask Play to show after you have made a few entries.
11. Photos
If you attach a photo to a Moment entry, you pick it yourself through your device's own photo picker or camera. Calmflect sees and keeps only the photo you choose or take; it cannot see the rest of your photo library and has no access to it.
We keep a downscaled, re-encoded copy in the app's private storage; re-encoding drops the original file's metadata, including any location tags it may have carried. Photos are never uploaded anywhere, and deleting the entry deletes its photo.
iOS
On iOS the picker is the system photo picker, which hands Calmflect only the single image you choose and never the rest of your library. If instead you choose to take a new photo, iOS asks for camera permission the first time; you can decline and still use the picker.
Android
On Android you pick the photo through Android's own photo picker, or take one with the system camera app. Neither needs a library or camera permission.
12. App lock
The optional app lock uses your device's built-in authentication. Your biometric data is handled entirely by the operating system — Calmflect never has access to it.
iOS
On iOS the lock uses Face ID or Touch ID.
Android
On Android it uses your fingerprint, face unlock, or the device PIN, pattern or password.
13. Device backup
Calmflect has no sync of its own and never uploads your entries. But if your phone's own backup is switched on, the operating system may include the app's data in a backup kept in your personal Apple or Google account. Any such backup is made by the operating system under Apple's or Google's terms; we never receive it, see it, or have any access to it.
iOS
If you have iCloud Backup switched on, or you make an encrypted backup of your iPhone to a computer, iOS includes the app's data — your entries and any photo saved to an entry — in that backup, stored in your own iCloud account or on your own computer. A photo you are still choosing, before you save the entry, is excluded; once the entry is saved, its photo is included like the rest of your entries. You can turn iCloud Backup off, or delete an existing backup, in iOS Settings under your name, then iCloud, then iCloud Backup.
Android
If Android's own backup is switched on in your system settings, Android copies most of the app's data — your entries and settings — to your own Google account, and carries it across when you set up a new phone. Moment photos are excluded, both from that backup and from the phone-to-phone transfer. You can turn the backup off, or remove an existing one, from Android Settings under Google, then Backup (or your device's equivalent), or from Google One.
14. This website
The same policy covers the calmflect.com website, which is where the current and past versions of it and the Terms of Service are published, and the address linked from the App Store and Google Play listings.
This website
The site has no sign-up and no contact form. It counts visits so that we can see how it is used. For each page view it records the page viewed, the referring site and any campaign tags in the link (such as utm_source), the device type, browser and operating system, the country derived from your browser's time-zone setting (never from your IP address), clicks on the App Store and Google Play buttons, and your cookie choice. The statistics are sent through our own server, which receives your IP address when your browser connects but does not store it, does not keep logs of it and does not pass it on. They are stored in the European Union by an analytics service provider that processes them only on our behalf, as our processor. The site loads no third-party scripts; fonts are served from this site rather than from a third party.
A banner on the site asks whether you accept one small cookie. The cookie cf_consent remembers your choice for 180 days and is strictly necessary. Only if you accept does the site also set cf_vid, a random identifier that recognises a return visit and is kept for 13 months, and use a browser session entry that marks a visit and ends after 30 minutes of inactivity. If you do not accept, neither is used, and each statistic is sent with a fresh random identifier that cannot be linked to your other visits. You can change or withdraw your choice at any time through "Cookie settings" at the bottom of every page.
15. Legal basis and transfers
Because we never receive a copy of your entries, there is no transfer of your entries to us, to any processor, or to any country. To the extent your entries are processed, this happens locally on your device, under your control — except for the device backup described above, which is between you and Apple or Google.
Where any limited processing does rely on a legal basis — for example the optional sign-in — it rests on your consent, which you give by choosing that option and can withdraw by signing out or resetting.
We process the usage statistics on the basis of our legitimate interest in maintaining and improving the app (Article 6(1)(f) GDPR). The same basis applies to the brief handling of your IP address when the app connects to our server; it is not stored or passed on.
This website
On this website, the return-visit cookie (cf_vid) and the session entry rest on your consent, which you give by accepting the banner and can withdraw at any time through "Cookie settings". The anonymous visit counts, which use no cookie or browser storage, rest on our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR).
16. Keeping and deleting your data
You can delete any entry from within the app; deleting an entry also deletes any photo attached to it.
Settings has a Reset control. Reset clears your settings — reminder time, app-lock preference, language, sign-in state and the like — and deliberately leaves your entries untouched; the app tells you so before you confirm. To remove your entries, delete them in the app, or remove everything at once by deleting the app.
If your phone's backup (see the Device backup section) holds a copy in your Apple or Google account, removing that is separate — do it from your device's backup settings, from iCloud, or from Google One.
Anonymous usage statistics are kept for no longer than 1 year and are then deleted.
Android
On Android you can also erase everything the app has stored, in one step, from Settings, then Apps, then Calmflect, then Storage, then Clear storage (also called Clear data).
This website
Website statistics are kept for no longer than 1 year and are then deleted.
17. Your rights
Under the GDPR you have the rights to access, rectify, erase, restrict, port, and object to the processing of your personal data. Because we never receive a copy of your entries, you already hold and control that data yourself:
Access and rectification — read and edit any entry in the app at any time. Erasure — delete entries in the app, or delete the app to remove all of them from the device. Portability — the app does not currently include an export feature; your entries are readable and can be copied within the app. Objection and restriction — the optional sign-in is the only processing that relies on your consent, and you can withdraw it by signing out. You may object to the anonymous usage statistics at any time by switching them off in Settings → Data & privacy. As we cannot identify you from the statistics, we are unable to provide access to, rectify, erase or port statistics already sent (Article 11 GDPR).
For any question, contact us at hello@calmflect.com. You also have the right to lodge a complaint with a data protection supervisory authority — in Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), or the authority in your own country. Because we never take a copy of your entries, there is nothing for us to sell, share, or disclose.
18. Children
Calmflect is not directed at children under 16 and does not knowingly process their data.
19. Changes to this policy
We may update this policy. Each version has a version number and an effective date. We keep every past version and can give you an earlier one on request.
When a change is material, we set the new version's effective date at least 30 days ahead and the app shows you a summary of what changed. On or after that date the app asks you to review and accept the new version before you continue. A minor change is shown as a dismissible notice only. You can always read the current text in the app under Settings, or on this website.
20. Contact
Questions about your privacy? Email hello@calmflect.com.