Privacy Policy

Who is responsible

The controller for this website and the app Pebbles is:

Leon Grimmeisen, Roibos Labs Herderstraße 33b 22085 Hamburg Germany Email: lmgrimmeisen@gmail.com

In short

Pebbles keeps your data on your iPhone wherever possible. There is no account, no advertising and no tracking.

The app

What happens to your data inside Pebbles:

• Everything you create in the app is stored on your iPhone.
• With your permission, the app reads data from Apple Health. You choose which types, and you can change this any time in the Health app. Health data stays on your device. It is never used for advertising or shared with third parties.
• Reminders are scheduled on your iPhone. You can turn them off in Settings.
• The Pebbles widgets read a summary of your pebbles from a space on your iPhone that the app shares with them. There is no account and no server.
• If you save a look-back card, the app asks to add that one image to your photo library. It never reads your photos.

Purchases with RevenueCat

For purchases in the app, we use RevenueCat, Inc. (USA) to unlock them and restore them on your other devices (Art. 6(1)(b) GDPR).

• What is processed: purchase and transaction details and a random, pseudonymous user ID. Neither we nor RevenueCat receive payment details such as card numbers; Apple alone handles the payment.
• The transfer to the USA is covered by the EU Standard Contractual Clauses.

Downloads and purchases

You download Pebbles from Apple’s App Store, and purchases go through Apple. Apple processes this data under its own privacy policy. From Apple, Roibos Labs only receives anonymous, aggregated statistics, and crash reports if you chose to share them with app developers in your iPhone settings.

This website

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technical data such as your IP address, the page and the time, to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR). We keep no log files of our own. Cloudflare is certified under the EU-US Data Privacy Framework.

The site sets no cookies, uses no analytics and loads nothing from other servers, including fonts.

If you contact us

If you email us, we use your message and email address only to answer you (Art. 6(1)(b) and (f) GDPR), and delete them once the matter is closed, unless the law requires us to keep them. Our mailbox is provided by Google (Gmail).

Your rights

You can ask for access to, correction or deletion of your data, restrict or object to its processing, and receive it in a portable format (Art. 15 to 21 GDPR). Just email us.

You can also complain to a data protection authority. Ours is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

Changes

We update this policy when the app or the website changes. The date at the top shows the current version.