Privacy Policy

01 · Overview

Decishape (“Decishape,” “we,” “us,” or “our”) is operated by an individual developer based in Ukraine, who acts as the data controller for the Service. Decishape provides an iOS application that gives you a private, analytical reading of the direction your daily choices are building — your “Direction Score,” trajectory windows, and pattern insights. This Privacy Policy applies to the Decishape iOS app and the website at decishape.com (together, the “Service”).

This Privacy Policy describes our practices regarding the collection, use, and disclosure of your information. Please review it carefully to understand how your data is handled.

02 · What we collect

We practice data minimization — we only collect what is needed to deliver your Direction Score, keep your account working across devices, and understand which campaigns and referrals bring new people to the app.

Account information

When you sign in with Sign in with Apple, we receive a unique Apple-provided identifier and, if you choose to share it, your name and an email address (which may be a private Apple relay address). We do not receive your Apple password. We do not require any other personal identifiers to create an account.

Content you create

The core of the Service is the daily signal you log. This may include:

• Decision tags you select (e.g. work, health, relationships)
• An energy rating (a 1–5 scale)
• Emotional-state selections you choose from a list
• A progress indicator and an optional short text note
• Timestamps for each entry and your streak history

This information can reflect your mood and wellbeing and is treated as sensitive personal data. It is used only to compute your scores and insights, and is never used for advertising.

Purchase information

Subscriptions and one-time purchases are processed entirely by Apple through In-App Purchase. We do not see or store your full payment-card details. We receive and validate a transaction receipt and entitlement status from Apple so we can unlock premium features and restore purchases.

Technical & diagnostic data

To keep the app stable we may process limited technical data such as app version, device model, iOS version, language/region, and anonymized crash and performance diagnostics. This is used to fix bugs and improve reliability, not to identify you.

Marketing & attribution data

We work with a mobile measurement partner, Singular, to understand which advertising campaigns and referral links lead people to install Decishape, and to measure how that marketing performs. For this we process limited device and event data such as your IP address, device and OS information, install and referral details, and key in-app events (for example, completing onboarding or starting a subscription).

If — and only if — you grant permission through Apple's App Tracking Transparency prompt, this measurement may include your device's advertising identifier (IDFA). If you decline, we rely only on Apple's privacy-preserving attribution (SKAdNetwork / AdAttributionKit), which does not identify you. Decishape shows no ads inside the app and never uses this data to target ads to you.

03 · Purpose

Your scores and insights are generated for you. We do not build profiles to sell, and we do not use your content to make decisions that produce legal or similarly significant effects about you.

04 · Legal basis

For users in the EEA and UK, our legal bases under the GDPR are: performance of a contract (to provide the features you ask for), your consent (for processing sensitive wellbeing-related content, which you may withdraw at any time by deleting entries or your account), and our legitimate interests (keeping the Service secure and reliable). Where we rely on consent, you can withdraw it without affecting prior lawful processing.

For measuring marketing and attribution using device-level identifiers, our legal basis is your consent, given through the App Tracking Transparency prompt. Where you do not consent, we use only aggregated, privacy-preserving measurement that does not rely on that identifier.

05 · Sharing

We do not sell your personal data. We share it only with the limited categories of service providers needed to run Decishape, under contracts that require them to protect it:

• Apple — authentication (Sign in with Apple), App Store distribution, and In-App Purchase processing.
• Cloud hosting & database providers — to securely store your account data and synced entries on our behalf.
• Diagnostics providers — to process anonymized crash and performance data.
• Singular — our mobile measurement partner, to attribute installs to marketing campaigns and referrals and to measure campaign performance. With your consent it may process your device's advertising identifier (IDFA).

We may also disclose information if required by law, to comply with a valid legal process, to enforce our Terms, or to protect the rights, safety, and property of our users or the public. If Decishape is involved in a merger or acquisition, we will notify you before your data becomes subject to a different privacy policy.

06 · Commitment

07 · Retention

We keep your account data for as long as your account is active. You are always in control:

• You can edit or delete individual entries at any time inside the app.
• You can permanently delete your entire account from Settings → Delete Account. This erases your profile and all associated logged entries from our active systems.

When you delete your account, we remove your personal data from our production databases without undue delay. Residual copies may persist in encrypted backups for a limited period before being overwritten on our routine backup cycle, after which they are permanently gone. We may retain a minimal record where required to comply with legal obligations or resolve disputes.

08 · Your rights

Depending on where you live, you may have the right to access, correct, export (portability), restrict, object to, or delete the personal data we hold about you, and to withdraw consent. Many of these are available directly in the app (edit entries, export to CSV, delete account). For any request you cannot complete in-app, contact us using the details below and we will respond within the timeframe required by law.

California residents may exercise rights under the CCPA/CPRA, including the right to know, delete, correct, and limit use of sensitive personal information. We do not sell your personal information or share it for cross-context behavioral advertising. You can decline device-level marketing measurement at any time by turning off tracking for Decishape in your iOS Settings, or by declining the App Tracking Transparency prompt. We will not discriminate against you for exercising any right.

09 · Security

We use industry-standard safeguards including encryption in transit (TLS) and at rest, authenticated access controls, and server-side validation. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work continuously to protect your information and limit access to only what is necessary.

10 · Age

Decishape is rated 17+ and is not directed to children. We do not knowingly collect personal data from anyone under the age of majority in their jurisdiction (and never from children under 13). If you believe a minor has provided us personal data, contact us and we will delete it.

11 · Transfers

We may process and store data in countries other than where you live, including the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect personal data transferred across borders.

12 · Updates

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

13 · Contact