Draft for review by a lawyer. Parts in square brackets must be filled in before publishing.

Privacy policy

Last updated: [publication date]

Last Straw is a journal where you log the behavior of one specific person under a pseudonym. We built it so that what you write stays on your phone. Below we describe exactly what happens to your data.

1. Data controller

The data controller is [entity name, address, tax ID]. Privacy contact: [email address].

2. Data that stays on your phone

Pseudonyms, flags, the state of the cup, the timeline, closed chapters, onboarding answers and chats with Redzia are stored only in the app’s storage on your device. We don’t send them to our servers and we have no access to them. You don’t create an account.

You can delete everything in the app: the Ty (You) tab, then Usuń wszystkie dane (Delete all data). Deleting the app deletes this data too.

3. AI flag creator (only with your consent)

The creator works offline using rules built into the app. If you turn on the AI version and give your consent:

• we send only the description of the situation you type, without the pseudonym and without your flag history,
• before sending, the app removes obvious identifying details from the description (e.g. phone numbers, email addresses),
• our server in the EU passes the description to the AI model provider [provider name] with data retention turned off, and doesn’t store it,
• you can withdraw your consent at any time in the Ty (You) tab.

Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). [to verify: classification of the data]

4. Subscription and purchases

Payments are handled by Apple. We don’t see your card details. We check your subscription status through RevenueCat, Inc. using an anonymous app identifier that isn’t linked to your name or email address. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

[to complete: data transfers to the USA and the mechanism used (EU-US Data Privacy Framework or standard contractual clauses)]

5. AI creator usage limit

To limit abuse, the server may count daily uses of the AI creator against the anonymous app identifier. We don’t link this counter to the content of the descriptions. [counter retention period]

6. This website

This website uses no cookies and no analytics tools. Fonts are served from our own server. [hosting provider, server logs and their retention period]

7. Data recipients

• Apple Distribution International Ltd. (payments, app distribution),
• RevenueCat, Inc. (subscription status),
• [AI model provider] (AI creator only, with consent),
• [server hosting provider].

8. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, port it, object, and withdraw your consent at any time. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland). Most of your data exists only on your device, so you are the one in full control of it and can delete it in the app.

9. Children

The app is intended for people aged [16 / 18] or older.

10. Changes to this policy

We’ll let you know about significant changes in the app. The current version is always on this page.