App: Count to Dea.. for iPhone and Android · Effective: 14 November 2026 · Version: 1.0
In short
- Your entries — marked days, answers, notes, wishes, your own dates and questions — are stored only on your device. They are never sent to our server, even if you have an account. We cannot read them.
- The account is optional. If you create one, we store your e-mail, birth date, the app's look settings and your subscription details. You can turn off the copy of your birth date and settings, and delete the account in the app at any time.
- Payments are handled by Apple or Google. We never see your card details.
- We have no analytics, no advertising, no cookies and no tracking.
- You can save a copy of your entries to a file, to your iCloud (iPhone) or to your Google Drive. The copy goes from your device straight to Apple or Google; we never receive it.
- You can ask what data we hold about you, correct it and delete it.
1. Who we are
Count to Dea.. is made by Sergii Misiak, an independent developer from Ukraine ("we"). We decide how the personal data described in this policy is used, so we are its controller (in GDPR terms).
- E-mail: support@counttodea.com
2. What this policy covers
This policy covers the Count to Dea.. app for iPhone and Android, the website counttodea.com, the Count to Dea.. account and the e-mails we exchange with you. The App Store and Google Play have their own privacy policies for what they do, for example with your store account and payments.
3. What stays on your device
The app stores the following only on your device:
- your birth date (to count your days);
- the days you have marked;
- answers to questions, drafts, notes and summaries made from them;
- wishes for the year of life, your own dates and milestones, your own questions and categories, favourite questions;
- reminders;
- settings: language, theme, look, life horizon.
Your entries are never sent to our server — with or without an account. The account can hold only your birth date and settings (section 4.1). We cannot see, restore or delete your entries for you. If the app is deleted or the device is lost and there is no copy, the entries are gone.
Copy to a file. You can save a free copy of all your entries to a file at any time ("My data" → "Save a copy to a file"). The file is stored wherever you choose. It is not encrypted: anyone who has the file can read it. Keep it safe. Before replacing anything (for example, restoring entries from a copy), the app sets the previous entries aside as a separate copy on the same device.
Copy in iCloud (iPhone). If you turn on "Back up to iCloud", the app stores a copy of your entries, birth date and settings in the app's private storage in your iCloud (Apple CloudKit). It uses the Apple Account already signed in on the phone; there is no separate sign-in. The copy goes from your device straight to Apple; we never receive or see it. You can turn the copy off in the app and delete it in the device's iCloud settings.
Copy on Google Drive. If you connect your Google Drive, the app stores a copy of all your entries, birth date and settings in the app's hidden folder on your Google Drive. The app asks for one permission only — access to that folder (drive.appdata) — and cannot see your other files. The copy goes from your device straight to Google; it does not pass through our server and we never receive it. You can disconnect Google Drive in the app and delete the copies in Google Drive settings ("Manage apps"). The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Device backups. If backup is turned on in your phone's settings, the app's data, including your entries, may be part of that backup: on iPhone, the iCloud backup; on Android, the Google backup. These backups are kept in your Apple or Google account under their rules; we have no access to them.
Reminders are scheduled on the device itself. Nothing about them is sent to us.
Another person's days. If you look at how many days another person has lived, the app does not store their birth date or send it anywhere.
4. What we and our service providers receive
4.1 Account (optional). You can use the app without an account. The account lets your subscription work on several of your devices and brings back your birth date and settings on a new device after you sign in. Accounts are run by Supabase (section 6). If you create an account, we store:
- your e-mail address and password. The password is stored only as a one-way fingerprint (hash) — we cannot see it;
- the language of e-mails (Ukrainian or English), the date the account was created and sign-in times;
- technical data the account service records at sign-in: IP address and device type;
- your birth date and the app's look settings: language, theme, "less motion", "more room", the look of the "Today" screen, year dividers, legend, life horizon (average or your own number of years, or no horizon) and the time of the last change. We store them so that the app is set up the same way on a new device after you sign in. This copy is on from the start; you can turn it off in Settings → "Account" → "Keep birth date and settings in the account". It is then erased from the server at once, and nothing is sent until you turn it on again;
- your subscription details: the plan, its status and dates, and the store it was bought in (App Store or Google Play).
Entries (days, answers, notes, wishes, your own dates and questions) and reminders never go to the account.
If two devices have different settings, the newer change wins. A device that already has a birth date never takes a different date from the account, because that would wipe its entries: it keeps its own.
If you sign out, entries and settings stay on the device and the account copy stays on the server.
4.2 Account e-mails. We send only the service e-mails the account needs: e-mail confirmation, new password, sign-in link, e-mail change. No newsletters, no advertising. E-mails are delivered by Resend, which receives your address and the text of the e-mail for this purpose.
4.3 App Store and Google Play purchases (RevenueCat). Paid features are sold through the App Store or Google Play. To check purchases and unlock paid features, the app uses RevenueCat, Inc. (USA). When the app starts, and when you buy or restore a purchase, RevenueCat receives:
- an app user ID: until you sign in, a random ID created on the device; after sign-in, your account ID (also a random number). It is not your name or e-mail. This is how a purchase works on all your devices and comes back after reinstalling;
- purchase data from Apple or Google: the receipt or purchase token, plan name, purchase and expiry dates, price and currency;
- basic technical data: device type, operating system and app versions, time of the last request;
- your IP address, which is visible in any internet connection.
If you are signed in, we record in the account which plan you bought in the store, so that it also works on your other devices. RevenueCat does not receive your entries, name, e-mail or card details. The payment itself is processed by Apple or Google under their own privacy policies.
4.4 Website. The website counttodea.com is delivered by Cloudflare. Like any host, it sees the technical data of a request — IP address, browser, page address — to deliver the page and protect the site from attacks. The website has no cookies, analytics, advertising or tracking pixels. The demo on the home page runs only in your browser: the text you type is not sent anywhere and disappears when the page is reloaded.
4.5 E-mails to us. If you write to support@counttodea.com, we receive your address, the text of your e-mail and any attachments. Please send only what is needed: we do not need your entries to help you. If you tell us about your health or how you feel, we use it only to reply to you. E-mails to this address are forwarded by Cloudflare (Email Routing) to our mailbox in Gmail (Google).
4.6 Data from the app stores. Apple and Google give developers sales reports and aggregated statistics (for example, downloads by country). If you agreed in your phone's settings to share diagnostics with developers, the stores may also pass us crash reports that do not contain your name. If you leave a public review, we may read it and reply.
4.7 What we do not do. No analytics. No advertising. No cookies. No tracking across other apps or websites. No selling of data. No profiling or automated decisions about you. No social-media sign-in. If minimal anonymous usage statistics ever appear, we will first update this policy and, where the law requires, ask for your consent.
5. Why we use data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create the account, let you sign in, send service e-mails | E-mail, password hash, e-mail language, sign-in technical data | Performance of a contract with you (Art. 6(1)(b) GDPR; Art. 11(1)(3) of the Ukrainian Law "On Personal Data Protection") |
| Bring back your birth date and settings on a new device | Birth date, settings, time of change | Performance of a contract with you: part of the account service, which you can turn off |
| Check the subscription and unlock paid features on all your devices | Subscription details, purchase data, app user ID | Performance of a contract with you (Art. 6(1)(b) GDPR; Art. 11(1)(3) of the Law) |
| Keep sales records | Store reports, purchase data | Our legitimate interest and accounting and tax obligations (Art. 6(1)(f) and (c) GDPR; Art. 11(1)(5)–(6) of the Law) |
| Reply to your e-mails | E-mail address and text | Performance of a contract or our legitimate interest in helping you (Art. 6(1)(b) or (f) GDPR; Art. 11(1)(3) or (6) of the Law) |
| Deliver the website, protect it and the accounts from abuse | IP address, request and sign-in technical data | Legitimate interest (Art. 6(1)(f) GDPR; Art. 11(1)(6) of the Law) |
| Defend our rights in a dispute | Only the data needed | Legitimate interest (Art. 6(1)(f) GDPR; Art. 11(1)(6) of the Law) |
6. Who receives your data
| Who | Role | What they receive | When |
|---|---|---|---|
| Supabase | our provider (processor): accounts and database | e-mail, password hash, language, birth date, settings, subscription; sign-in technical data | if you have an account |
| Resend | our provider (processor): account e-mail delivery | e-mail address and text of the e-mail | if you have an account |
| RevenueCat | our provider (processor): checking store purchases | app user ID, purchase data | while the app runs and on purchases |
| Cloudflare | our provider (processor): website hosting and support e-mail forwarding | request technical data; e-mails to us | if you open the website or write to us |
| Google (Gmail) | our provider: support mailbox | your e-mails to us | if you write to us |
| Apple and Google | stores and payments under their own policies | purchase data | if you buy in a store |
| Apple (iCloud), Google (Drive) | your own storage service | the copy of your entries in your account | if you turned the copy on |
Also:
- Authorities or courts — only when the law requires it.
- A successor — if the app ever passes to another developer, accounts and subscription details may be transferred so that your purchases keep working. The successor must keep the promises of this policy, and we will tell you in advance.
We work only with providers that are bound by data processing agreements to protect your data at least as well as this policy describes. We never sell your data.
7. Transfers outside Ukraine and the EU
Some providers — Supabase, Resend, RevenueCat, Cloudflare, Google and their subprocessors — are US companies or may process data in the USA. Their data processing agreements use the EU Standard Contractual Clauses. For users in Ukraine, the transfer is needed to perform the contract with you. You can ask us for a copy of these safeguards.
8. How long we keep data
- Entries on the device: until you delete them or the app.
- Account (e-mail, birth date, settings, subscription): while the account exists. When the account is deleted, we erase them at once; they leave Supabase's automatic database backups as those backups are overwritten on the provider's schedule.
- Copy of birth date and settings: erased at once when you turn it off in settings.
- Sign-in and request technical data (Supabase, Cloudflare): a short time, under the provider's rules, for security and operation.
- Purchase records at RevenueCat: while the purchase is active and up to 12 months after it ends.
- Store sales reports: as long as accounting and tax law requires.
- Support e-mails: up to 24 months after the conversation ends; longer only if needed for a legal claim.
9. Security
- Your entries are protected by the security of the device itself. A screen lock helps.
- All data between the app and servers travels encrypted (HTTPS).
- The password is stored only as a hash.
- Database access rules let each account see and change only its own row; the account can only read its subscription details.
- Only we have access to the database and to support e-mails.
- No protection is perfect. If a breach affects your data, we will tell you by the account e-mail (if you have one), in the app or on the website, and notify the authorities where the law requires.
10. Your rights
You can, yourself, in the app, at any time:
- save a copy of your entries to a file ("My data" → "Save a copy to a file");
- change your birth date and settings — the account copy updates;
- turn off the account copy of your birth date and settings — it is erased;
- delete the account (Settings → "Account" → "Delete account"). We then erase your e-mail, birth date, settings and subscription details at once. Entries on the device stay; only you can delete them. Deleting the account does not cancel an active subscription: cancel it in the store;
- delete entries on the device — in the app or by deleting the app.
Depending on where you live, you can also ask us to:
- tell you whether we process your data and give you a copy;
- correct it;
- delete it;
- restrict or object to its processing (including processing based on our legitimate interest);
- give you your account data in a portable format;
- withdraw consent at any time where processing was based on consent.
The Ukrainian Law "On Personal Data Protection" (Art. 8) gives similar rights.
How: write to support@counttodea.com from your account's e-mail address. If you cannot sign in, write to us and we will delete the account within 30 days. How to delete the account without the app is described in the Delete your account section of Help. If you have no account and the question is about a store purchase, add the order number from the store receipt. We reply within 30 days. We do not have your entries, so we cannot restore or hand them over.
Complaints: you can complain to a data protection authority. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua). In the EU, the supervisory authority of your country. We would be grateful for the chance to fix the problem first.
11. Children
The app is meant for people aged 16 and over. We do not knowingly create accounts for children under 16 or collect their data. If you believe a child under 16 has created an account or sent us their data, write to us and we will delete it.
12. Permissions
- Notifications — only if you turn on reminders.
- iCloud — only if you turn on "Back up to iCloud".
- Google Drive — only access to the app's hidden folder, if you connect Google Drive.
The app does not ask for location, contacts, camera, microphone or photos. Saving to and restoring from a file use the standard file dialogs and "Share", so the app gets access only to the file you choose.
13. Other services
The "Support" section in the app lists helplines. If you call a line or open its website, that organisation's privacy rules apply. We are not told about it.
14. Changes to this policy
We will update this policy when the app or the law changes. The date at the top shows the current version. We will announce important changes in the app, on the website and, to account holders, by e-mail before they take effect. If a change needs your consent, we will ask for it.
15. Contact
Sergii Misiak · support@counttodea.com
16. Language versions
This policy exists in Ukrainian and English. Both versions have the same content. If they differ, the reading more favourable to you applies.