Privacy Policy
Last updated: October 2026 · Auf Deutsch
Summary
Essgefühl stores your check-ins, journal, and insights on your device. There is no account, cloud sync, or analytics. None of this sensitive content is transmitted. The app can send an anonymous crash report, and only if you allow it — see “Crash reports” below.
When the app checks purchase access after launch, when you return to the app, or while opening paid content, your app store and RevenueCat process purchase status and an anonymous app-specific identifier. Purchases and restores also process the store receipt. They do not receive your check-ins, journal, notes, or insights.
Data stored on your device
Check-ins, journal and gratitude entries, self-care logs, optional weight and cycle entries, and app settings are stored in a private SQLite database in the app sandbox and are not transmitted.
The home-screen widget
So the iOS home-screen widget can show something without opening the app, Essgefühl writes a small, fixed set of derived values into a shared container (group.com.vacuumbreather.essgefuehl), which sits beside the private database rather than inside it: how much of the expedition map you have charted as a percentage (widget_kartiert_percent); whether you have ever recorded a moment, yes or no, with no number attached (widget_has_entries); today’s ordered sequence of derived body-hunger categories — no body signal, a little, clearly hungry, or other moment — stored as compact drawing codes, oldest first (widget_today_marks); and the eight short text fields the widget uses, already in the language you chose in the app, because the widget itself cannot translate anything — the charted headline, its number and caption (widget_headline, widget_headline_value, widget_headline_label), today’s moment count (widget_today_count_line), the small and medium widgets’ “+n” overflow labels (widget_small_overflow, widget_medium_overflow), and the invitation shown before your very first moment (widget_empty_title, widget_empty_cta). It also keeps one retired field, widget_detail_line, which earlier versions of the widget read; it is always written as an empty string and holds nothing. That is the whole list — no note, journal entry, emotion, weight or cycle entry is written there, and nothing in it is transmitted. Only Essgefühl and its own widget can read the container, and Settings → Delete all data clears it.
Apple Health and Health Connect
Essgefühl does not connect to Apple Health on iOS or to Health Connect on Android. It requests no health permission, declares no HealthKit entitlement, and reads nothing from either system. Everything the app knows about your sleep you told it yourself, through the self-care toggles in a check-in.
In-app purchases
When the app checks access — after launch, each time you return to the app, and when you open paid content — or you start or restore a purchase, your app store and RevenueCat process the product identifier, store receipt, purchase status, and a randomly generated anonymous app-user identifier. If a purchase was started and did not visibly finish, the app notes on this device which product it was and when, and asks the store once more at the next launch, for up to seven days, so the purchase you paid for arrives; that note is a product identifier and a timestamp, and it is removed as soon as the purchase resolves. Essgefühl disables automatic device-identifier collection and RevenueCat diagnostics. No private app content is sent. That anonymous app-user identifier is the only identifier the app itself collects. Settings shows it as your “Support ID” and copies it on a tap, so you can quote it when you write to us and we can find the purchase it belongs to. It is not an account: there is no name, profile or sign-in behind it, it is not linked to an identity, and it is never used for tracking.
Contacting the developer
Settings → Contact the developer opens a sheet where you write a message. Sending it hands that message to your own mail app, or — if you have none — to the system share sheet or your clipboard, addressed to info.nospam@vacuumbreather.com. Alongside what you wrote it carries a short technical block, and the sheet shows you every line of it before you can send: the app version and build number; the platform and operating-system version; the language the app is displaying; your time zone and its UTC offset; whether any purchase is unlocked, yes or no, with no product named; and the anonymous app-user identifier described above. That is the whole list — no check-in, journal entry, gratitude entry, self-care record, weight or cycle entry, no emotion, and no note or other text you have written into an entry, and nothing is attached. Nothing is sent until you send it, and from your mail app onward it is governed by that provider.
Crash reports (Firebase Crashlytics)
If the app crashes, Essgefühl can send an anonymous crash report through Firebase Crashlytics (Google Ireland Limited) so the fault can be found and fixed. This happens only with your explicit consent: you are asked once, right after the introduction, the answer is remembered, and until you say yes nothing is collected at all. What is sent is technical diagnostic data — the error stack trace, the app version and build number, the device model, the operating-system version, and a random installation identifier. No check-in, journal or gratitude entry, no self-care record, weight or cycle entry, no emotion and no text you have written is sent, and there is no name or account behind the report. You can withdraw or give consent at any time under Settings → Anonymous crash reports. Legal basis: Art. 6(1)(a) GDPR together with § 25(1) TTDSG (consent).
What we do not do
- No accounts, cloud sync, advertising, analytics, or telemetry.
- No crash reporting unless you turn it on — see “Crash reports” above.
- No sale of personal data or model training.
- No server push notifications; reminders are local.
- No access to contacts, microphone, camera, photos, or precise location.
Exports and links
Data leaves the app only when you act: when you export your entries as JSON through the system share sheet; when you share the weekly view, which the app renders to a PNG image containing whatever that screen shows you; when you share the expedition atlas, which is plain text listing your charted percentage and the landmarks you have discovered with their dates; when you open a public help link or the link to this policy; when you write to the developer, which sends your message and the short technical block described above and nothing else; or when the app checks purchase access. Private reflections are never sent with purchase checks, and no check-in, journal or health content is included in the atlas text or in any link. Share and export destinations are governed by their own privacy policies.
Storage and deletion
Local data is protected by the operating-system sandbox and device encryption. Settings → Delete all data permanently removes local content. Uninstalling removes app data. Your app store and RevenueCat may retain purchase records as legally required.
Your rights
You can export, edit, and erase local data at any time. We cannot access your on-device content. For purchase data, contact your app store or RevenueCat, or email us for assistance.
Children
Essgefühl is not intended for people under 16.