Privacy Policy

Summary: Purrstep stores your routines, steps, notes, schedules, runs and settings on your device. There is no Purrstep account, no server of our own, no advertising and no analytics, crash-reporting or advertising SDKs. The app connects to the internet only for purchases: through the App Store or Google Play and the purchase service RevenueCat. Routine content is never transmitted in the process. Beyond that, data leaves your device only through system backups you use, an export you share yourself, or a message to support.

1. Controller

2. App data processed locally

Purrstep processes the content you enter for your routines. It is kept in a local database inside the app sandbox and is not accessible to the provider.

• Routines: titles, steps, durations, emojis, notes, checklists, variants and schedules.
• Runs and history: starts, confirmed steps, results, time accounts and the statistics calculated from them.
• Session time: time anchors and a command log of the running routine so it can be resumed correctly after an interruption. Nothing is transmitted.
• Settings: language, appearance, onboarding state, cat, colour, icon and sound choices, and a locally cached, confirmed Pro status.

Purrstep needs no access to the microphone, contacts, calendar, location, photos or health data and does not process such data. The database is not additionally encrypted by Purrstep; it is protected by the app sandbox and your operating system’s device protection. Routine titles and free text do not appear in logs.

3. Notices, live display, widgets and shortcuts

So that reminders and “time is up” notices arrive even when the app is closed, Purrstep schedules local notifications in your device’s operating system. There are no push notifications, no push tokens and no push backend.

• Notifications use generic texts by default. Routine and step names appear only if you turn on “Details in notifications”. The Android lock screen always shows the generic version.
• Android: if you allow “Alarms & reminders”, Purrstep schedules notices on time; after a device restart the app restores scheduled reminders.
• Live display (Pro): a Live Activity on iPhone (lock screen, Dynamic Island) or a live notification on Android shows the current step with a countdown. It is updated locally, ends with the session and is not fed by a server. In privacy mode it shows generic texts only.
• Widgets, shortcuts and Siri (Pro): Purrstep writes a small data snapshot (JSON) to a storage area shared within the app (on iPhone the App Group), which widgets and shortcuts only read. Actions from the live display, widgets or shortcuts open the app and are processed locally there. The snapshot is removed when the licence ends, with “Delete all data” or on uninstall.
• Voice announcements (Pro): they announce step names only while the player is open, using your device’s speech output.

Focus modes, silent mode, battery saving, permissions and operating-system limits can delay or suppress notices. Permission for notifications is requested only when you turn on your first reminder or tap the notice in the player; if you decline, the app remains fully usable.

4. Backups, export, import and sharing

• System backups: if you use iCloud Backup (iPhone) or the Android backup of your Google account, the database and settings can be included under the rules of Apple or Google. Darkstone can neither read nor manage these backups.
• Backup before migration: before a database format change, Purrstep automatically creates an internal backup and keeps the last two.
• Automatic backup (Pro): daily, if there were changes, Purrstep keeps the last seven backups: on iPhone in the app documents (visible in the Files app), on Android in the app folder and, if you wish, additionally in a folder you choose yourself.
• Export: a JSON file with your routines, optionally with history, that you create explicitly. It is unencrypted; the app points this out before sharing. The operating system hands the file only to the destination you choose.
• Import: a file you select is read only locally and fully validated before the database is changed.

Export files, email attachments, system backups and a backup folder you chose yourself are outside Purrstep’s control once saved. The app cannot delete such copies remotely.

5. Purrstep Pro, Apple/Google and RevenueCat

Purrstep Pro is an optional one-time purchase without a subscription. The Apple App Store or Google Play handles payment, store account and refunds. For the offer, checking the purchase status, unlocking and restoring, Purrstep uses RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA). This is the app’s only network access; transmission uses HTTPS. The following is processed:

• a randomly generated, anonymous RevenueCat app user ID (no name, no email address, no account with us),
• purchased products, entitlement status and timestamps, store and country or storefront,
• technically necessary details such as IP address, platform, app and operating-system version and language,
• for the 7-day trial on iPhone, a free trial product in the store account whose purchase date determines the end of the trial; on Android the trial start is stored locally only.

Routine content, notes, history and settings are not transmitted to RevenueCat. The app uses no advertising ID; automatic collection of device identifiers and RevenueCat diagnostics are switched off. Advertising, attribution and usage analytics are not built in. A confirmed Pro status is cached locally so that Pro also applies offline.

The legal basis is Art. 6(1)(b) GDPR for purchase, unlocking and restoring, and Art. 6(1)(f) GDPR for a reliable entitlement status and prevention of abuse. RevenueCat may process data in the USA and provides, among other things, EU standard contractual clauses in its Data Processing Addendum. More information: RevenueCat privacy policy.

6. Website and hosting

The web pages at darkstone.app are static, set no cookies and contain no analytics, advertising, social-media or tracking services. Your IP address is technically necessary to deliver the page over HTTPS. The web server and upstream proxy keep no regular access logs; security-critical technical messages may be processed briefly.

The server is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The legal basis is Art. 6(1)(f) GDPR; our interest is secure and reliable operation. More information: Hetzner privacy policy.

7. Support contact

If you contact us by email, including through the “Feedback by email” link in the settings, we process the sender address, message content and information you provide voluntarily only to handle your request. The app itself sends nothing: it only opens your mail app, and the message is sent only when you send it there. Our email service is provided by Google; processing by Google Ireland Limited and affiliated companies may therefore take place. More information: Google privacy policy.

Please do not send routine content, passwords, full store receipts or payment details. For a diagnosis, the app version, device model, operating system and a description of the problem are enough.

8. Legal bases, recipients and transfers

• Performance of a contract, Art. 6(1)(b) GDPR: app functionality, support relating to a contract, and purchase and restore.
• Legitimate interest, Art. 6(1)(f) GDPR: secure website operation, handling of errors and a reliable purchase entitlement.
• Your deliberate action: export, sharing, import and contacting support happen only when you trigger them.
• Recipients: Apple, Google, RevenueCat, Hetzner and email providers only for the task described in each case.
• Third countries: Apple, Google or RevenueCat may process data outside the EEA; their safeguards, contracts and privacy notices apply.

Where service providers act as processors for us, they are contractually bound to documented purposes, confidentiality, appropriate security measures and the applicable data-protection obligations. Apple and Google process store and account data in part as independent controllers under their own terms.

9. Retention and deletion

• Local data on the device: until “Delete all data”, deletion of the app data or uninstallation.
• Automatic backups and pre-migration backups: rotating (the last seven and two respectively); “Delete all data” removes them as well on request.
• Device and cloud backups: according to your platform and account settings and the rules of Apple or Google.
• Exports, email attachments and a backup folder you chose yourself: until you delete them at the respective location.
• Purchase and entitlement data: according to statutory obligations and the retention rules of the store or RevenueCat; the purchase remains restorable.
• Support messages: until the request is resolved and no statutory or legitimate interest in evidence remains, usually no longer than three years after closure.

To delete your data in the app: Settings › Data › Delete all data, with two-step confirmation. This removes the database, drafts, scheduled notices, widget and shortcut data and the local Pro cache; on request also all backups. Because we keep no accounts and no routine data on servers, there is nothing further to delete at Darkstone. Out of the app’s reach are files you exported and shared, a backup folder you chose yourself, system backups already written, mailboxes and store receipts. A store purchase is not revoked by deletion and can be restored. You can ask by email to support@darkstone.app for deletion of the data tied to the RevenueCat identifier; it belongs to your store account and is subject to retention obligations.

10. Your rights and changes

Under the GDPR you may in particular request access, rectification, erasure, restriction, data portability and object to processing. Where processing is based on consent, you can withdraw it for the future. Contact: support@darkstone.app. We may require reasonable proof of identity before disclosing or deleting data relating to a support request or RevenueCat identifier.

You can lodge a complaint with a data-protection supervisory authority, in particular the Austrian Data Protection Authority. This policy will be updated if features, providers or the legal situation change materially; the current version remains available at this URL.