Twiddle — Privacy Policy
Twiddle (“the app”) is made by Webtic, grafično oblikovanje, d.o.o. (Webtic d.o.o.), Kardeljeva ploščad 11A, 1000 Ljubljana, Slovenia (registration no. 7415290000, tax number SI 93924178) (“we”, “us”). Contact: info@webtic.si.
The short version
- Your entries stay on your phone. Everything you log in Twiddle — moments, check-ins, reflections, your plan and progress photos — is stored only on your device. We never receive it. If you use iCloud Backup, your phone includes it in your own backup.
- No account. You don’t sign up and we don’t ask for your name or email.
- No ads, no tracking across other apps or websites, no selling of data.
- Purchases go through Apple. We use RevenueCat to confirm them, using a random ID and your device’s Apple vendor ID. These don’t show your name, but they count as personal data.
- Two things are optional: crash reports, which stay off until you switch them on, and a one-tap question about how you heard about Twiddle, which you can skip.
- Twiddle is for people aged 13 and over.
What is stored on your device
| Data | Why | Where |
|---|---|---|
| Your onboarding answers, your plan and your reasons for changing | To personalise the program | Local database inside the app |
| Logged moments, daily check-ins and reflections | To show your patterns and progress, and to time reminders | Local database inside the app |
| Program progress and settings (reminders, app lock, crash-report choice) | To keep your place and your preferences | Local database inside the app |
| Progress photos | So you can see change over time | The app’s private storage — not your photo library |
This data is processed on your device, under your control. We do not receive it.
Backups. If you use iCloud Backup (or Google’s backup on Android), your phone may copy Twiddle’s data into your backup. That backup is made by Apple or Google under their terms; we can’t read it. You can manage backups in your phone’s settings.
You are in control. You → Your data → Export my data creates a copy (a JSON file) that you can save or share wherever you choose; we don’t see it. Delete everything erases all of your entries, photos and settings from the app. Deleting the app also deletes them. Delete everything also tries to remove an answer you gave about how you heard about Twiddle. Neither removes purchase records kept by Apple or RevenueCat, or crash reports you already sent (see below).
Services we use
The Apple App Store processes your payment under its own terms and privacy policy. We never see your card details.
RevenueCat (RevenueCat, Inc., USA) confirms whether you have Twiddle Plus. It receives, from everyone who opens the app, whether or not they buy: a random app user ID generated on your device; Apple’s identifier for vendor (a device ID shared by apps from the same developer); your device model, operating system version, app version, language settings and App Store country; and your IP address. If you buy or restore, it also receives your purchase receipt and transaction history. It receives no entries.
- Role: RevenueCat acts as our processor under a data processing agreement and may use only what it needs to provide this service.
- Where: its servers are in the United States. Transfers from the EU rely on the Standard Contractual Clauses in that agreement.
- Legal basis: for purchases, performance of a contract (giving you what you bought), Art. 6(1)(b) GDPR. For checking whether someone has Twiddle Plus and showing prices, our legitimate interest in running the app, Art. 6(1)(f) GDPR.
- How long: RevenueCat’s agreement with us sets no fixed period: it can keep these records while Webtic uses its service. To have records linked to you deleted, email us and we will ask RevenueCat to do so.
- RevenueCat’s privacy policy: revenuecat.com/privacy
Optional: crash reports
Off until you switch it on. You can help us fix bugs by turning on You → Share crash reports. Twiddle works the same either way, and you can turn it off again at any time. While it is on, Twiddle sends the following to Expo (650 Industries, Inc., USA), the company behind the crash-reporting service we use:
- when the app crashes: a technical report of what the app was doing (a “stack trace”) and the time of the crash. When something goes wrong in the app’s code: the error message and where it happened;
- how long the app takes to start and to show its first screen;
- with each report: a random installation ID (it identifies the app on your phone, not you, and changes if you reinstall Twiddle), the app and build version, your phone model, your operating system version, your language setting and your IP address. Expo stores the IP address and the country it derives from it.
Twiddle is built so that none of this contains your entries, reflections, photos or settings. Crash reports are not linked to your name, email or purchases, and we use them only to find and fix bugs. Data recorded since the app last left the screen, including from a crash, is sent if you switch this on.
- Role: Expo provides the service on our behalf. Under its terms it may also use aggregated or de-identified data to improve its own products.
- Legal basis: your consent, Art. 6(1)(a) GDPR, which you give by switching the setting on and can withdraw by switching it off. Turning it off stops anything further being sent.
- Where: Expo is in the United States. It takes part in the EU–US Data Privacy Framework, and its terms also include Standard Contractual Clauses.
- How long: Expo deletes this data after 90 days. Deletion runs in monthly batches, so a record can last up to 120 days. Reports carry a random ID rather than your name, so we can’t tell which reports are yours; they are removed when Expo’s retention ends.
- Expo’s privacy policy: expo.dev/privacy
Optional: how you heard about Twiddle
During setup Twiddle may ask “How did you hear about Twiddle?” with a short list of choices, such as App Store search, a friend, social media or Reddit. You can skip it. If you answer, your choice is saved in RevenueCat against your random app user ID, so we can see which channels reach people. The choices never refer to your health, and we do not link the answer to who you are.
Legal basis: your consent, by answering, Art. 6(1)(a) GDPR. To have it removed, email us.
Device permissions
- Notifications — to show reminders you turn on. They are scheduled on your device; there is no push server. By default, reminders just say “Twiddle”; you can choose to have them mention your habit.
- Camera / Photos — only when you choose to add a progress photo. Photos are copied into the app’s private storage.
- Face ID / Touch ID / passcode — optional app lock. Your device handles the check; Twiddle never receives biometric data.
Links to other sites
Some screens link to outside resources: support organisations, helplines, peer communities such as Reddit, and Apple’s standard terms. They open in a browser sheet. When you open one, that site’s own privacy policy applies and the site can see your visit. We add no identifiers to these links.
Twiddle on the web
If you try the web version of Twiddle in a browser, what you enter stays in that browser’s storage on your device. The page itself is hosted by Vercel Inc., which, like any web host, processes your IP address and request details in its server logs. The web version sends no crash reports. The website usetwiddle.com is hosted by Cloudflare, Inc., which, in the same way, processes your IP address and request details in its logs. The site sets no cookies and has no analytics. Cloudflare and Vercel act as our service providers and are in the United States; both take part in the EU–US Data Privacy Framework. We use them because we have a legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
If you write to us
If you email us, we use your message and address to answer you (Art. 6(1)(b) or (f) GDPR) and keep them only as long as we need to handle your request and meet our legal duties. Our email provider processes these messages for us. Please don’t send health details.
Age
Twiddle is for people aged 13 and over and is not directed at children under 13. We don’t tell parents or anyone else what you log. Apple may be different: child accounts in a Family Sharing group can need a parent’s approval to download or buy, so a parent may see the app’s name.
Health information
The habits Twiddle helps with can be health-related. Your entries, reflections, photos and settings never leave your device through Twiddle, are never used for advertising, and are never shared with third parties. Nothing in the optional crash reports or the optional “how did you hear” answer is about your health.
Your rights
Under the GDPR you can ask us about any personal data we hold about you, and request access, correction, deletion, restriction or portability, or object to processing. In practice we hold none of your habit data; for purchase records and an optional answer, contact us or RevenueCat. Crash reports carry a random ID and an IP address that we can’t tie to you, which is why we can’t look them up. You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, ip-rs.si) or your local data protection authority.
Changes
If this policy changes, we’ll update the date above and, for significant changes, tell you in the app.
Contact
Webtic, grafično oblikovanje, d.o.o. · Kardeljeva ploščad 11A, 1000 Ljubljana · info@webtic.si