Privacy Policy

01 · Overview

Decishape (“Decishape,” “we,” “us,” or “our”) is operated by an individual developer based in Ukraine, who acts as the data controller for the Service. Decishape provides an iOS application that gives you a private, analytical reading of the direction your daily choices are building — your “Direction Score,” the shape of that score over time, and the patterns underneath it. This Privacy Policy applies to the Decishape iOS app, its widgets and Apple Watch app, and the website at decishape.com (together, the “Service”).

This Privacy Policy describes our practices regarding the collection, use, and disclosure of your information. Please review it carefully to understand how your data is handled. It should be read together with our Terms of Use.

02 · What we collect

We practice data minimization — we only collect what is needed to deliver your Direction Score, keep your account working across devices, and understand which campaigns and referrals bring new people to the app.

Account information

Decishape offers two ways to sign in, and you choose which to use.

With Sign in with Apple, we receive a unique Apple-provided identifier and, if you choose to share it, your name and an email address (which may be a private Apple relay address). We do not receive your Apple password.

With Sign in with Google, we receive a unique Google-provided identifier and, if you choose to share it, your name and email address. We do not receive your Google password.

The two are separate accounts: signing in with Google will not open an account created with Apple, and vice versa. We do not require any other personal identifiers to create an account.

Content you create

The core of the Service is what you record about your own days. This may include:

• The areas of your life a day touched (for example career, health, relationships, finance)
• An energy rating on a 1–5 scale
• Emotional-state selections you choose from a list
• Whether the day moved you forward, held neutral, or set you back
• An optional short text note in your own words
• Days you fill in later from memory, which are marked as such
• Decision records — the areas you weighed on the Compass, the reading you were shown, and the answer you give when the app asks two weeks later how it actually went
• Your North Star — an optional sentence you write about what you are aiming at
• Commitments, your 90-day area, and any Hold periods you declare
• Timestamps for each entry and your streak history

This information can reflect your mood and wellbeing and is treated as sensitive personal data. It is used only to compute your scores and insights and to show them back to you. It is never used for advertising, and it is never used to train machine learning or artificial intelligence models.

Purchase information

Subscriptions and one-time purchases are processed entirely by Apple through In-App Purchase. We do not see or store your full payment-card details. We receive and validate a transaction receipt and entitlement status from Apple so we can unlock premium features and restore purchases.

Referrals

Every account is given a short referral code. If you redeem a friend’s code, we record which account invited which, so that both of you receive the promotional credit and a code cannot be used twice. This creates a lasting link between the two accounts in our database.

We do not share your entries, scores, or insights with the person who invited you, or with anyone you invite — they see only that a referral was completed.

Technical & diagnostic data

To keep the app stable we may process limited technical data such as app version, device model, iOS version, language/region, and anonymized crash and performance diagnostics. This is used to fix bugs and improve reliability, not to identify you.

If you allow notifications, Apple issues us a device token so we can deliver your check-in reminders and the occasional reading worth opening. It is stored against your account. Turning notifications off in iOS Settings stops their delivery, and deleting your account removes the token.

We also share that token with our measurement partner, Singular, so it can tell whether Decishape is still installed on your device. It does this by sending silent notifications you never see — nothing appears on your screen — and treating a device that stops accepting them as one where the app has been removed. That tells us how many people uninstall, and which campaigns bring people who do. It tells us nothing about what you did in the app. If you have not allowed notifications there is no token, and none of this happens.

Marketing & attribution data

We work with a mobile measurement partner, Singular, to understand which advertising campaigns and referral links lead people to install Decishape, and to measure how that marketing performs. For this we process limited device and event data such as your IP address, device and OS information, install and referral details, and key in-app events (for example, completing onboarding or starting a subscription).

So that a subscription can be attributed to the campaign or referral that introduced you, we store a measurement identifier issued by Singular against your account, and pass Singular your Decishape account identifier — an internal number, not your name or email. Where you have allowed notifications we also pass your device token, so Singular can measure uninstalls as described above. Singular never receives your logged entries, your notes, your decision records, your scores, or any Apple Health data.

If — and only if — you grant permission through Apple's App Tracking Transparency prompt, this measurement may include your device's advertising identifier (IDFA). If you decline, we rely only on Apple's privacy-preserving attribution (SKAdNetwork / AdAttributionKit), which does not identify you. Decishape shows no ads inside the app and never uses this data to target ads to you.

03 · Apple Health

If you choose to connect Apple Health, Decishape reads a limited set of data — sleep analysis and step count — to display alongside your own entries as context. This is optional, is requested only when you ask for it, and the app is fully functional without it.

04 · On device

Decishape is offline-first: your entries are written to your device first and synced to your account afterwards, so the app works without a connection. Some things are only ever local.

05 · Purpose

Your scores and insights are generated for you. We do not build profiles to sell, we do not use your content to train machine learning or artificial intelligence models, and we do not use it to make decisions that produce legal or similarly significant effects about you.

06 · Legal basis

For users in the EEA and UK, our legal bases under the GDPR are: performance of a contract (to provide the features you ask for), your consent (for processing sensitive wellbeing-related content, which you may withdraw at any time by deleting entries or your account), and our legitimate interests (keeping the Service secure and reliable). Where we rely on consent, you can withdraw it without affecting prior lawful processing.

For reading Apple Health data, our legal basis is your explicit consent, given through Apple’s HealthKit permission prompt and withdrawable at any time in the Health app.

For measuring marketing and attribution using device-level identifiers, our legal basis is your consent, given through the App Tracking Transparency prompt. Where you do not consent, we use only aggregated, privacy-preserving measurement that does not rely on that identifier.

07 · Sharing

We do not sell your personal data. We share it only with the limited categories of service providers needed to run Decishape:

• Apple — authentication (Sign in with Apple), App Store distribution, In-App Purchase processing, and push-notification delivery.
• Google — authentication only, if you choose to sign in with Google. Google receives no logged entries, scores, or insights.
• Cloud hosting & database providers — to securely store your account data and synced entries on our behalf.
• Diagnostics providers — to process anonymized crash and performance data.
• Singular — our mobile measurement partner, to attribute installs to marketing campaigns and referrals, to measure campaign performance, and to detect uninstalls. It receives your account identifier, your notification device token where you have allowed notifications, and — with your consent — your device's advertising identifier (IDFA).

We may also disclose information if required by law, to comply with a valid legal process, to enforce our Terms, or to protect the rights, safety, and property of our users or the public. If Decishape is involved in a merger or acquisition, we will notify you before your data becomes subject to a different privacy policy.

08 · Commitment

09 · Retention

We keep your account data for as long as your account is active. You are always in control:

• You can edit or delete individual entries at any time inside the app.
• You can export everything you have written at any time, as a spreadsheet or as a printable report.
• You can permanently delete your entire account from Settings → Delete Account, and also from the subscription screen before you have purchased anything. This erases your profile and all associated entries, decision records, and notes from our active systems.

Account deletion is a permanent deletion, not a deactivation. We remove your personal data from our production databases without undue delay. Residual copies may persist in encrypted backups for a limited period before being overwritten on our routine backup cycle, after which they are permanently gone. We may retain a minimal record where required to comply with legal obligations or resolve disputes. You may sign up again afterwards with the same email address, but your previous record will not return.

Deleting your Decishape account does not cancel a subscription billed by Apple. If you no longer wish to be charged, cancel it in Settings → [your name] → Subscriptions on your Apple device before deleting your account. See our Terms of Use for details.

10 · Your choices

Every optional permission the app asks for can be withdrawn at any time, from your device, without contacting us:

Withdrawing a permission never disables the rest of the app, and it does not affect the lawfulness of processing carried out before you withdrew it.

11 · Your rights

Depending on where you live, you may have the right to access, correct, export (portability), restrict, object to, or delete the personal data we hold about you, and to withdraw consent. Many of these are available directly in the app (edit entries, export your record, delete account). For any request you cannot complete in-app, contact us using the details below and we will respond within the timeframe required by law.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have handled your data improperly. We would rather hear from you first, but that right is yours regardless.

California residents may exercise rights under the CCPA/CPRA, including the right to know, delete, correct, and limit use of sensitive personal information. We do not sell your personal information or share it for cross-context behavioral advertising. You can decline device-level marketing measurement at any time by turning off tracking for Decishape in your iOS Settings, or by declining the App Tracking Transparency prompt. We will not discriminate against you for exercising any right.

12 · Security

We use industry-standard safeguards including encryption in transit (TLS) and at rest, authenticated access controls, and server-side validation. Sign-in tokens are held in the iOS Keychain rather than in ordinary app storage, and are issued per device so that signing out on one device does not affect another. Access to production data is limited to what is necessary to operate the Service.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work continuously to protect your information. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

13 · Age

Decishape is intended for adults and is not directed to children. Our Terms of Use require users to be 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

14 · Transfers

We may process and store data in countries other than where you live, including the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect personal data transferred across borders.

15 · Updates

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy. If a change would require new consent — for example, a new category of data — we will ask for it before that processing begins.

16 · Contact