Twiddle — Privacy Policy
Twiddle (“the app”) is made by Webtic, grafično oblikovanje, d.o.o. (Webtic d.o.o.), Kardeljeva ploščad 11A, 1000 Ljubljana, Slovenia (registration no. 7415290000, tax number SI 93924178) (“we”, “us”). Contact: info@webtic.si.
The short version
- Your entries stay on your phone. Everything you log in Twiddle — moments, check-ins, reflections, your plan and progress photos — is stored only on your device. We have no server that receives it, and we cannot see it.
- No account. You don’t sign up and we don’t ask for your name or email.
- No ads, no tracking across other apps or websites, no selling of data.
- Purchases go through Apple or Google. We use RevenueCat to confirm them, using an anonymous identifier.
- Two things are optional: anonymous crash reports, which stay off until you switch them on, and a one-tap question about how you heard about Twiddle, which you can skip.
- Twiddle is for people aged 13 and over.
What is stored on your device
| Data | Why | Where |
|---|---|---|
| Your onboarding answers, your plan and your reasons for changing | To personalise the program | Local database inside the app |
| Logged moments, daily check-ins and reflections | To show your patterns and progress, and to time reminders | Local database inside the app |
| Program progress and settings (reminders, app lock, crash-report choice) | To keep your place and your preferences | Local database inside the app |
| Progress photos | So you can see change over time | The app’s private storage — not your photo library |
This data is processed on your device, under your control. We do not receive it.
Backups. If you use iCloud Backup (or Google’s backup on Android), your phone may copy Twiddle’s data into your backup. That backup is made by Apple or Google under their terms; we can’t read it. You can manage backups in your phone’s settings.
You are in control. You → Your data → Export my data creates a copy (a JSON file) that you can save or share wherever you choose; we don’t see it. Delete everything erases all of your entries, photos and settings from the app. Deleting the app also deletes them. Neither removes purchase records kept by Apple, Google or RevenueCat, or crash reports or an answer you already sent (see below).
Services we use
Apple App Store and Google Play process your payment under their own terms and privacy policies. We never see your card details.
RevenueCat (RevenueCat, Inc., USA) confirms whether you have Twiddle Plus. When the app starts and when you buy or restore, it receives: an anonymous app user ID generated on your device, your purchase receipt and transaction history, and basic technical data (app version, device type, operating system version, country or region, currency and language, and your IP address as part of the network connection). It receives no health information and none of your entries.
- Role: RevenueCat acts as our processor under a data processing agreement and may use only what it needs to provide this service.
- Where: its servers are in the United States. Transfers from the EU rely on the Standard Contractual Clauses in that agreement.
- Legal basis: performance of a contract (giving you what you bought), Art. 6(1)(b) GDPR.
- How long: purchase records are kept for as long as needed to provide your purchase, and as RevenueCat’s retention rules and legal obligations require. To have records linked to you deleted, email us and we will ask RevenueCat to do so.
- RevenueCat’s privacy policy: revenuecat.com/privacy
Optional: crash reports
Off until you switch it on. You can help us fix bugs by turning on You → Share crash reports. Twiddle works the same either way, and you can turn it off again at any time. While it is on, Twiddle sends the following to Expo (650 Industries, Inc., USA), the company behind the crash-reporting service we use:
- when the app crashes: a technical report of what the app was doing (a “stack trace”) and the time of the crash. When something goes wrong in the app’s code: the error message and where it happened;
- how long the app takes to start and to show its first screen;
- with each report: a random installation ID (it identifies the app on your phone, not you, and changes if you reinstall Twiddle), the app and build version, your phone model, your operating system version, your language setting and your IP address, from which Expo can work out your approximate country.
Twiddle is built so that none of this contains your entries, reflections, photos or settings. Crash reports are not linked to your name, email or purchases, and we use them only to find and fix bugs.
- Role: Expo provides the service on our behalf.
- Legal basis: your consent, Art. 6(1)(a) GDPR, which you give by switching the setting on and can withdraw by switching it off. Turning it off stops anything further being sent.
- Where: Expo is in the United States. It takes part in the EU–US Data Privacy Framework and, where needed, uses Standard Contractual Clauses.
- How long: Expo keeps this data for at least 90 days. Reports carry only the random ID, so we can’t tell which reports are yours; they are removed when Expo’s retention ends.
- Expo’s privacy policy: expo.dev/privacy
Optional: how you heard about Twiddle
During setup Twiddle may ask “How did you hear about Twiddle?” with a short list of choices, such as App Store search, a friend, social media or Reddit. You can skip it. If you answer, your choice is saved in RevenueCat against your anonymous app user ID, so we can see which channels reach people. The choices never refer to your health, and we do not link the answer to who you are.
Legal basis: your consent, by answering, Art. 6(1)(a) GDPR. To have it removed, email us.
Device permissions
- Notifications — to show reminders you turn on. They are scheduled on your device; there is no push server. By default, reminders just say “Twiddle”; you can choose to have them mention your habit.
- Camera / Photos — only when you choose to add a progress photo. Photos are copied into the app’s private storage.
- Face ID / Touch ID / passcode — optional app lock. Your device handles the check; Twiddle never receives biometric data.
Links to other sites
Some screens link to outside resources: support organisations, helplines, peer communities such as Reddit, and Apple’s standard terms. They open in a browser sheet. When you open one, that site’s own privacy policy applies and the site can see your visit. We add no identifiers to these links.
Twiddle on the web
If you try the web version of Twiddle in a browser, what you enter stays in that browser’s storage on your device. The page itself is hosted by Vercel Inc., which, like any web host, processes your IP address and request details in its server logs. The web version sends no crash reports. The website usetwiddle.com is hosted by Cloudflare, Inc., which, in the same way, processes your IP address and request details in its logs. The site sets no cookies and has no analytics.
Age
Twiddle is for people aged 13 and over and is not directed at children under 13. Because Twiddle doesn’t collect personal data about your habits, teenagers can use it privately; nothing is shared with parents or anyone else.
Health information
The habits Twiddle helps with can be health-related. Your entries, reflections, photos and settings never leave your device through Twiddle, are never used for advertising, and are never shared with third parties. Nothing in the optional crash reports or the optional “how did you hear” answer is about your health.
Your rights
Under the GDPR you can ask us about any personal data we hold about you, and request access, correction, deletion, restriction or portability, or object to processing. In practice we hold none of your habit data; for purchase records and an optional answer, contact us or RevenueCat. Crash reports carry only a random ID that we can’t tie to you, which is why we can’t look them up. You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, ip-rs.si) or your local data protection authority.
Changes
If this policy changes, we’ll update the date above and, for significant changes, tell you in the app.
Contact
Webtic, grafično oblikovanje, d.o.o. · Kardeljeva ploščad 11A, 1000 Ljubljana · info@webtic.si