Privacy policy

Last updated: 2026-10-16

Controller: GGSHOP LIMITED, Unit 856 of Workspace B on 8/F, Tai King Industrial Building, San Po Kong, Hong Kong. Contact for any privacy question: ggshoplimitedco@gmail.com.

In short: your diary never leaves your phone. Our server only learns which forecast square (about 25 × 25 km) is requested. We do not ask for your name or email, we do not use analytics tools, and we do not sell data. The free version shows ads from Google; they are personalised only as described under "Ads".

Data that stays on your phone

• Diary: symptoms, medicines, notes. This is health information, and it is stored only on your device. We do not receive it.
• Places and settings.
• Backup: if backup is turned on in your phone, Android (Google) or iPhone (iCloud) can include the app's data in your backup. That backup is handled by Google or Apple under your account and their privacy policies; we cannot read it. You can turn it off in your phone's settings.
• CSV export and PDF for the doctor are created on the phone. They leave the phone only if you share them yourself.

Location

Using your location is optional. If you allow it, the phone uses your approximate location only to find the forecast square. Your coordinates are not sent to us; only the square number is sent (for example "161_-15"). You can also choose a city by name without giving location access.

Forecast requests (everyone)

To show a forecast, the app downloads the file for your square from our server. Like every web server, ours sees your IP address, the time, the square that was requested and the app version. We keep this in server logs for up to 14 days for security and to fix errors, then it is deleted. Legal basis: our legitimate interest in running a safe service (GDPR Art. 6(1)(f)).

Pro

To give cypress, plane tree and poplar only to people who paid, our server checks the purchase:

• The app sends the purchase proof (Google Play: purchase token; App Store: the transaction signed by Apple) and a random installation number. Our server checks the proof with Google, or checks Apple's signature. We never receive your name, email or payment details; payment is handled by Google or Apple.
• We store: a code derived from the purchase (a hash), the product, the expiry date, and for yearly plans on Android the purchase token (to check renewals with Google); for each device a hashed installation number, a connection key (stored as a hash) and when it was last used; the forecast squares opened by the purchase in the last 7 days and how many new squares were opened today (for the daily update and the limits).
• How long: squares: 8 days; daily counters: 2 days; a device that is not used for 60 days is removed; a purchase that has expired or been refunded is deleted 30 days later.
• Our server asks Atmospore for the forecast of the square's centre. Your IP address and installation number are not sent to Atmospore.
• Legal basis: performance of the contract for Pro (GDPR Art. 6(1)(b)).

Ads (free version)

The free version shows ads on Android and iPhone. The first 7 days after you install the app are ad-free. After that there is a small banner on the Forecast and Diary screens, and video ads that you start yourself if you want a reward. The ads come from Google AdMob. With Pro there are no ads.

• EEA, UK and Switzerland: Google's consent form asks for your choice first. Only if you agree may Google use your phone's advertising ID and device information to show ads that match your interests; otherwise you see non-personalised ads. You can change your choice at any time in Settings → "Ad privacy settings".
• iPhone: the app asks for your permission through Apple's App Tracking Transparency. Only if you allow it may Google use the advertising identifier (IDFA). You can change this at any time in the iPhone's Settings → Privacy & Security → Tracking.
• Android outside the EEA, the UK and Switzerland: Google may show personalised ads using the advertising ID. You can delete or reset the advertising ID in your phone's settings (Privacy → Ads, or Google → Ads).
• Even for non-personalised ads, Google processes your IP address and device information to show and measure ads and to prevent fraud. Google is responsible for this; see policies.google.com/privacy and policies.google.com/technologies/partner-sites.
• Your diary, your places and your location are never used for ads and are not passed to Google.
• Legal basis: your consent for personalised ads and for storing or reading information on your device (GDPR Art. 6(1)(a)); our legitimate interest in financing the free version for non-personalised ads (Art. 6(1)(f)).

Notifications and widgets

They are created on your phone from the forecast that has already been downloaded. Nothing extra is sent to us.

Who processes data for us

• OVHcloud hosts our server in Europe.
• Google (Play purchases, AdMob) and Apple (App Store purchases) under their own terms.

We do not share data with anyone else, except where the law obliges us.

Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability and object to processing. Write to ggshoplimitedco@gmail.com. Because we do not know who you are, we may ask for information that lets us find the right purchase (for example the order number from Google Play or Apple) — we use it only for your request. You can also complain to the data protection authority where you live or work (in Bulgaria: Commission for Personal Data Protection, cpdp.bg).

To delete everything at once: delete the app (this removes the diary from the phone; also delete it from your backup if you want). The Pro data on our server is removed automatically as described above, or sooner if you ask us.

Children

The app is not aimed at children. A parent can keep a diary for a child on the parent's own phone; that data also stays on the phone.

Security

All connections use HTTPS. Keys and installation numbers are stored as hashes. Access to the server is restricted.

Changes

If we change this policy, we will update the date above and tell you in the app if the change is important.