Privacy Policy

Last updated: August 01, 2023

TLDR: A core principle behind Impact Diary is to ensure that your data is completely private and owned by you. All data that you create is stored exclusively on your device. The only exception to this is when you subscribe to our paid plan to enable device syncing and automatic backups, in which case your data is end-to-end encrypted so that it remains private and only accessible by you.

The only information that we collect is your email address (when you create an account) and app usage data to provide, enhance, and communicate about our product. Your app usage data is anonymized and aggregated so that it cannot be used to identify you. We use this anonymized data to gain insights into feature usage, enabling us to create a better product. Under no circumstance do we collect the content you write or create. Your data is private, and you retain full ownership of it.

This privacy notice for Impact Diary ("Company," "we," "us," or "our"), describes how and why we collect, store, use, and/or share ("process") your information when you use our services ("Services").

Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We only collect your email address and email preferences when you create an account.

We collect personal information that you voluntarily provide to us when you register on the Services, or otherwise when you contact us.

Sensitive Information. We do not process sensitive information.

Information automatically collected

In Short: General, non-identifiable information such as your browser, country and device type is collected automatically when you use our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but includes browser and device characteristics, operating system, language preferences, country, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

HOW DO WE USE YOUR INFORMATION?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also use it for any other purpose only with your consent.

HOW DO WE SHARE THE INFORMATION?

Sharing with third parties

  • Service providers: We work with third-party service providers to provide hosting, maintenance, backup, storage, infrastructure, payment processing, analysis and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under instruction from us, including abiding by policies and procedures designed to protect your information.
  • Third-party services: You may choose to link or integrate third-party services with our Services. Doing so may give third-party apps access to your account and information about you like your email address, and any content you choose to use in connection with those third-party services. Third-party service policies and procedures are not controlled by us, and this privacy policy does not cover how third-party apps use your information. We encourage you to review the privacy policies of third parties before connecting to or using their services to learn more about their privacy and information handling practices. If you object to information about you being shared with these third parties, please disable or remove any undesired link or integration.
  • Compelled disclosure: We reserve the right to use or disclose your personal information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.

Sharing with business partners

  • Business transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
  • Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.

DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies to track your usage of our Services to improve the product.

As many other websites, we use cookies to store information such as which features of the Services you use, referrals, as well as any cookies being used by third party services.

Analytics

We use Posthog which is an open-source, GDPR, HIPPA and CCPA compliant tool to measure traffic and usage trends for the Services. We do not track IP addresses or any identifiable information.

Goodle Ads

We may use Google Ads, a service provided by Google, Inc. (“Google”). The purpose of this service is so-called conversion tracking, i.e., we can detect what happened after you clicked on our advertisements. Cookies are placed for this purpose, but they are only valid for a limited time and do not contain any personal data. Hence an individual identification of the user is not possible.

IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our servers are hosted in AWS and are located in Germany. If you are accessing our Services from outside, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in and other countries.

If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

If you would at any time like to review or change the information in your account or terminate your account, you can easily do that through the account settings. Upon terminating your account, we delete your information from our active databases.

DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at [email protected]

WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected]