1. Data controller
Matheo Mades Rondellstraße 4 76297 Stutensee Germany Email: m.mades@icloud.com
2. In brief
What you write and collect in TIG stays on your device (and in your own backup, e.g. iCloud on iPhone). We don't see it. There are only two cases in which we process data through service providers:
- for pseudonymous usage statistics, and only if you consent (Section 5);
- for handling TIG Plus (Section 6).
We don't sell any data and we don't show ads.
3. Data on your device and in your backup
The following is stored on your device:
- profile details from onboarding: first name, gender, denomination, goals, time of day;
- progress: experience points, streak, rank, stars and constellations, badges;
- chapters you've read, saved and highlighted verses;
- your journal pages: thoughts, prayers, highlights, favorite days, notes on answered prayers;
- evening reflections;
- app settings;
- your subscription status.
On iPhone: If you're signed in to iCloud, TIG additionally backs up this data to your personal iCloud account at Apple, so that it travels between your devices. We have no access to it. You can turn this off in your device's iCloud settings. If you choose your own photo for the widget, TIG accesses your photo library for that purpose. The photo stays on your device. On Android: If you have enabled backup to your Google account, Android may additionally back up this data, encrypted, to your Google account so that you can restore it on a new device. Google is responsible for this backup; we have no access to it. You can turn it off in your Android settings under Google → Backup. For the profile picture, TIG uses the system photo picker on Android; TIG only receives the image you select. The legal basis is the provision of the app features you use (Art. 6(1)(b) GDPR).
4. Your denomination (Art. 9 GDPR)
Providing your denomination is voluntary. It is used only to show you relevant content. It stays on your device or in your own backup (iCloud or Google account) and is never transmitted to us or to third parties, not even to the usage statistics. You can change or delete it at any time.
5. Usage statistics with PostHog (only with your consent)
If you consent, we send pseudonymous usage data to PostHog. This helps us understand which features are used and where things get stuck. The following is transmitted:
- which areas you open and which features you use or cancel, e.g. "reading plan started", "chapter read", "paywall viewed", each only with IDs and numbers;
- status values: experience points, rank, streak level, number of saved verses, active reading plan, subscription status, widget settings;
- app version, device type, operating system version (iOS or Android), language;
- a random identifier that TIG generates on your device.
The following is never transmitted: the contents of your journal, your prayers and reflections, verses you save or highlight, topics from Refuge, use of crisis help, your denomination, your name, your email address. The IP address is not stored. The data is pseudonymous, not anonymous: through the random identifier, events from the same device can be linked together. If TIG Plus is active, this identifier is also passed to RevenueCat so that we can see which features lead to a subscription.
- Provider: PostHog, Inc., 2261 Market Street, San Francisco, CA 94114, USA. The data is stored on servers in the EU (Frankfurt am Main). Access from the USA cannot be ruled out. The basis for this is the EU-US Data Privacy Framework or the EU standard contractual clauses. A data processing agreement is in place with PostHog.
- Legal basis: your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR; Section 25(1) TDDDG). Since TIG is a Christian app, its use may reveal information about your religious beliefs. That is why we ask explicitly.
- Withdrawal: at any time under Settings → Privacy. From then on no more data is sent, and the identifier on your device is discarded. We will delete data collected up to the withdrawal upon request. To do so, send us your statistics ID, which you can find under Settings → Privacy.
- Retention period: at most 12 months, after which the events are deleted.
- Age: if you are under 16, you may only consent with your parents' permission.
6. Subscriptions (TIG Plus)
Purchase and payment are handled exclusively through Apple (iPhone) or Google Play (Android). We receive neither your payment data nor your Apple ID or the login details of your Google account. To manage the subscription we use RevenueCat, Inc., 1 Letterman Drive, San Francisco, CA 94129, USA. RevenueCat processes:
- a random app user identifier;
- purchase receipts and transaction data from Apple or Google Play (product, time, price, currency, country);
- the subscription status;
- device type and app version;
- if you have consented to the statistics, the statistics identifier from Section 5.
- Legal basis: performance of the subscription contract (Art. 6(1)(b) GDPR). Linking it with the statistics is based on your consent (lit. a).
- Third country: transfer to the USA on the basis of the EU standard contractual clauses. A data processing agreement is in place with RevenueCat.
- Retention period: as long as necessary for managing the subscription, and beyond that insofar as statutory retention obligations apply.
7. Notifications
If you allow notifications, TIG schedules reminders locally on your device: the daily verse, the reading plan, the evening reflection at 8 p.m. (if you turn it on), and the reminder before a trial subscription ends. No data is transmitted to us in the process. You can turn this off in the app or in your device settings (iOS or Android).
8. Contact and support
If you email us, we process your address, your message, and the technical details that the app automatically inserts into the mail (app version, operating system version, device). We do this in order to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the email once your request has been resolved, unless statutory retention obligations prevent this.
9. App Store and Google Play
When you download the app and make purchases, Apple processes data under its own responsibility, e.g. Apple ID, purchase and device data. Apple's privacy policy applies: https://www.apple.com/legal/privacy/. If you get TIG from Google Play, Google processes data under its own responsibility, e.g. your Google account, purchase and device data. Google's privacy policy applies: https://policies.google.com/privacy
10. Your rights
You have the right to:
- access (Art. 15),
- rectification (Art. 16),
- erasure (Art. 17),
- restriction (Art. 18),
- data portability (Art. 20),
- objection (Art. 21),
- withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).
To do so, write to m.mades@icloud.com. You can delete your app content yourself at any time: under Settings → Reset everything. On iPhone, this also deletes the iCloud backup. You manage a backup in your Google account in your Android settings. Or you can uninstall the app. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
11. Data security
Your data is stored in the app's protected storage area on your device. The backup in iCloud or your Google account and all transfers to service providers run encrypted.
12. Changes
We adapt this policy when the app or the legal situation changes. You can always find the current version in the app and at https://tig-rechtliches.netlify.app/en/.