Privacy policy
Who we are
Ease My Mind (the app) is provided by Bastian Bräu Software, Rattenberger Straße 1 b, 94267 Prackenbach, Germany (see the Impressum). For anything about your data, write to info@b263.io.
In short
What you tell the app stays on this iPhone. Only if you turn on the AI is a check-in sent through our server to an AI model that Scaleway runs in the EU, to get a suggestion. The app works without the AI, and you can turn it off any time in Settings. We don't keep what is sent; in rare cases of misuse or errors, Scaleway may hold a request for a short time. There are no accounts, no tracking and no advertising.
What stays on your phone
Your practice history (with the strength you chose before each), reflections, favorites, settings, reminders, subscription status and your choice about the AI are kept on this iPhone, and we can't see them. They stay until you delete them: one entry in History, everything with "Delete everything" in Settings, or by deleting the app. An iPhone backup can include them, protected by Apple. In Settings you can export your history, favorites and settings as one file and choose where it goes. The app also remembers when it was first opened, how often and when it last asked you to rate it, and whether you tapped Rate in About, so that it doesn't ask too often.
What is sent when the AI is on
Only while the AI is on, each check-in sends one request. It holds your check-in (the feelings you chose, their strength and anything you typed, as written), a short summary of your history and your preferences. What you say there about how you feel (the feelings you chose or, at night, what keeps you up, their strength, anything you typed and the summary of your history) can be health data. We send and process it only on your explicit consent (GDPR Art. 9(2)(a)), and only while the AI is on. The request also carries a random key for your installation. If you have an active subscription, it also carries the proof of it that Apple signs on your iPhone; our server checks that proof in memory and forgets it, and it contains Apple's purchase identifiers, which we don't use, store or log. Without a subscription, no proof is sent: our server then allows one request per installation and day, answers further requests of that day with a limit notice, and the app suggests a practice with the rules on your phone instead. We never see your name, e-mail or payment details.
An AI model run by Scaleway answers. It chooses a practice from the app's library, writes a line on why, and looks for signs of a crisis, in which case the app shows local help instead of a practice. It makes no decision with legal or similarly significant effects: you decide what to do. With the AI off, or when it can't be reached, rules on your phone suggest a practice and nothing you tell the app is sent.
Who receives data
- Scaleway (France) hosts our server in Paris, the software that receives your request and passes it to the AI model, with its key store, and runs the AI model. No other company sees your requests.
- Apple runs the App Store, your purchase and the check that the app is genuine, under its own terms; it does not receive your check-ins. If you allow it in iOS settings, Apple shares crash reports with us in a form that doesn't identify you.
- Crisp (France) runs our support page for us. Please don't send health details in support messages.
- DanubeData (Romania) hosts our website on servers in Germany. To deliver the pages, it sees your IP address and records it in the server's access log, which it keeps for 10 days on its servers in Germany. The log also holds the time, the page you asked for, the browser and device you use, the page you came from and the server's answer. DanubeData uses it to run and secure the service, not for analytics, and we can't shorten how long it is kept or switch the log off.
We don't sell data or share it with anyone else. Everything we process for the app and this website stays in the EU. The one exception is support: if you write to us, Crisp stores the conversation in the EU but uses some US service providers, under the EU's standard contractual clauses.
What is kept, and for how long
- On our server (at Scaleway) there is a random key for your installation and a few counters, to recognize genuine apps and apply a daily limit (one AI request per day without an active subscription). We don't link the key to you. It is deleted 30 days after last use, also after you turn the AI off, and can stay in a daily backup for 7 more days. The server sees your IP address while connected but doesn't store it. Its logs hold counts and timings, never your text or your IP address, for 7 days; the same counts are kept for 30 days.
- In Scaleway's AI model requests are not kept by default and not used to train models. If a request is misused or causes an abnormal error, Scaleway may keep it, including your check-in, for a limited time to investigate; its documentation says up to two weeks. We can't see or delete that copy.
- Support messages are deleted 12 months after the conversation ends.
Why we may process it
- Sending your check-in to the AI: your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)).
- Checking your subscription: our contract with you while a subscription is active (Art. 6(1)(b)).
- The server's key, counters and logs, and the daily limit for installations without a subscription, support messages and delivering the website: our legitimate interest in a safe and affordable service, in answering you and in running the website (Art. 6(1)(f)).
Your choices and rights
You don't have to turn on the AI: the app and its crisis help work without it. To withdraw your consent, turn the AI off in Settings; it takes effect at once and doesn't affect requests already answered.
You can ask for access, correction, deletion, restriction and portability, and you can complain to a data protection authority, for example where you live or work. Most of your data is only on your phone, where you can export or delete it yourself. We can't link the server's key or a copy Scaleway may keep to you, so we may not be able to find them. Write to info@b263.io.
Your right to object
Where we rely on our legitimate interest, you can object at any time on grounds relating to your particular situation: write to info@b263.io. For our server, turning the AI off stops all requests, and the key is deleted after 30 days.
Age
The app is for people aged 16 and over. If you are under 16, please don't use it or turn on the AI.
Changes
We announce material changes to this policy in the App Store release notes. If what is sent to the AI changes materially, the app asks for your consent again before anything is sent.