App Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) for data processing in the "StuhlgangGo" app is SD Nightshift Studio. Full contact details can be found in our legal notice.

StuhlgangGo is a diary and self-tracking app. It is expressly not a health app and not a medical device. The app does not interpret the content of your entries, draws no conclusions about you and does not classify them. It simply displays what you noted yourself – sorted by time and counted up.

For the same reason the app accesses none of your operating system's health interfaces (such as Apple Health or Google Health Connect) and passes nothing to them.

How you interpret your entries is up to you. The app does not do it for you.

All of your entries are stored exclusively in a local database on your device. This includes date and time, the type according to the Bristol stool scale, urgency, stress level, colour, findings and your optional notes.

This data is not transmitted to us, not synchronised to any cloud and not backed up. The app contains no network layer for its core functions – there is simply no technical path by which your entries could reach us. We have no access to them at any point.

Because your entries are processed exclusively locally and solely by you, no processing by us takes place in that respect. To the extent processing were assumed, it serves the performance of the core function you requested (Art. 6(1)(b) GDPR).

Regardless of the classification in section 2, we treat your entries with the strongest protection available in practice – namely by never letting them leave your device.

StuhlgangGo requires no registration and does not create a user account. You are asked for neither a name nor an email address.

The app contains no analytics tools, no crash reporting service, no advertising SDKs and no tracking libraries. No usage statistics, device identifiers or advertising IDs are collected or transmitted to us.

The optional home screen widget shows nothing but the numbers 1 to 7 – no title, no counter, no statistics and none of your entries. It is deliberately designed so that anyone glancing at your device cannot tell what the app tracks.

The widget stores no data of its own. A tap does not create an entry; it merely opens the app with the selected type so you can complete the entry there. No entry content is exchanged between the widget and the app.

The export produces a report as a PDF or raw data as a CSV file. The file is generated entirely on your device; nothing is uploaded to a server. Your operating system's share dialog then opens.

What happens to the file afterwards is entirely your decision. As soon as you pass it on to another app, a messenger, a cloud service or another person, that recipient's privacy terms and responsibility govern any further processing. The report contains your personal records, so think carefully about who you give it to.

The PDF includes a blank line at the top for name and date of birth, which you can fill in by hand if you wish. The app neither asks for nor stores this information.

The export feature can be unlocked with a single one-time in-app purchase. To manage the unlock status we use the service RevenueCat (RevenueCat, Inc., USA). An anonymous, randomly generated identifier and the store's purchase receipt are processed in order to verify that the purchase is valid.

There is no link to your entries – RevenueCat receives purchase information only and never any content from your diary. The payment itself is handled entirely by the Apple App Store or Google Play Store; we never gain access to your payment details. The respective store operator's privacy terms apply in addition.

The same processing takes place when you select "Restore purchases" in the settings.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

You can optionally lock the app against access by others. The check is performed entirely by your operating system. We receive no biometric data whatsoever – the app only ever gets an "unlocked" or "not unlocked" answer from your device. Biometric features never leave the secure area of your device.

Legal basis: your consent by enabling the feature (Art. 6(1)(a) GDPR).

When you choose "Send feedback" in the settings, the app opens a pre-filled email in your mail client. Only the app version and build number are filled in so we can attribute bug reports – no entries whatsoever are attached or transmitted. The email is only sent once you send it yourself.

We process the data you provide (email address, message content) exclusively to handle your request.

Legal basis: legitimate interest in answering inquiries and improving the app (Art. 6(1)(f) GDPR).

After extended use the app may ask you once whether you would like to rate it in the store. The dialog is triggered through your operating system's review API; whether and when it appears is decided by Apple or Google. We do not learn whether you leave a rating or what it says.

StuhlgangGo does not access your camera, microphone, photo library, contacts, calendar, location, or the operating system's health interfaces.

• Biometrics / device unlock: only if you enable the app lock (see section 8).
• File sharing: only during an export, triggered by you (see section 6).
• Opening links: when you open these legal pages or the feedback email.

A transfer to a third country only comes into consideration in connection with the in-app purchase (RevenueCat as well as the store operators Apple and Google, each based or ultimately owned in the USA). Your entries are not affected by this.

We base these transfers on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the European Commission's standard contractual clauses and, where applicable, the providers' certification under the EU-U.S. Data Privacy Framework.

Your entries remain on your device until you delete them yourself. Individual entries can be removed directly in the history. The settings additionally offer "Delete all data", which irreversibly removes every entry.

Uninstalling the app also deletes all locally stored data completely. Since there is no cloud backup, the data cannot be recovered afterwards – create an export beforehand if you want to keep it.

Under the GDPR you have the following rights, provided the statutory requirements are met: the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You may withdraw any consent you have given at any time with effect for the future.

Since we maintain no accounts and store none of your entries on servers, these rights regarding your records rest entirely in your own hands: access is available through the app itself, portability through the export function, and erasure through the corresponding switch in the settings.

Right to lodge a complaint: you have the right to complain to a data protection supervisory authority if you believe the processing of your data infringes the GDPR.

If you have any questions about data protection, please get in touch at any time. Contact details are in the legal notice.

StuhlgangGo is not aimed at children. Use of the app is permitted from the age of 16. Where a lower age limit applies for valid consent under national law, use by minors is only permitted with the consent of a parent or guardian.

We reserve the right to adapt this privacy policy so that it always meets current legal requirements, or to reflect changes to our services. The version available at the time of your use applies in each case. The date given above ("Last updated") indicates when it was last revised.