Privacy policy
In short: no accounts, no ads, no tracking. Your purchases, goals and settings stay on your phone. Only what the AI, the free trial and subscriptions need leaves the phone, plus anonymous crash reports.
1. Who is responsible
The data controller is Karolina Szewczyk, e-mail: andrumly.app@gmail.com.
2. Data stored on your phone
Purchases you add (name, price, category, link, photo, answers, decisions, reviews and notes), goals, amounts put aside and the app settings are stored only on your device. We have no access to them.
The end of the 14-day free trial is stored on the device, and on iPhone also in the Keychain, so it survives reinstalling the app.
A backup you export in Settings holds your purchases, goals, amounts put aside, the trial end, which system it was made on (iOS/Android) and whether the phone had a Premium subscription. The file goes wherever you save or send it; we never receive it.
No bank connection. The app never connects to any bank or account and never moves money.
3. Data sent off the phone
- Anonymous installation ID. The app creates a random ID (on iPhone in the Keychain; on Android derived on the phone from the ID the system gives this app, and one-way hashed, so the system ID itself is never sent). Our server, running on Cloudflare, stores it only as a hash, together with: the creation date, the trial end, the number of AI uses and reflections this month, the last checked subscription status and the day of last use. This keeps the trial and the monthly limits from restarting after a reinstall. We never link it to a name, e-mail address or other data.
- AI product recognition (Premium): the product description, link or photo and the app language go to our server, which passes them to Anthropic PBC (Claude) to recognise the name, category and price. The server does not store that content; we only record technical usage data (input type, number of tokens, cost). Anthropic's policy: anthropic.com/legal/privacy.
- Listek's reflection when you decide (Premium): the item you're deciding about and up to 10 similar purchases (name, price, month, decision, triggers, your review) are sent the same way so the AI can write one or two sentences. No IDs, links, photos or personal data; the server stores nothing.
- Reading a product page: for a pasted link, the phone loads the shop page to read the name and price.
- Exchange rates: from the public Frankfurter service (frankfurter.dev), with no data about you.
- Payments: subscriptions are handled by Google (Google Play) and Apple (App Store). RevenueCat, Inc. checks the subscription status using the anonymous installation ID. We never see card details.
- Crash reports: when the app breaks, it sends Functional Software, Inc. (Sentry), on servers in the European Union (Frankfurt), a technical report: app version, phone model and system, and where in the code the error happened. Reports contain no purchases, typed text, links or IP address.
- Feedback sent with "Send feedback": your e-mail app opens with a ready message to us. It contains what you write plus the app version, phone system, language and Premium type (trial, subscription, none). You send it yourself; we receive it in Gmail (Google).
- The "Tell me when it launches" list on andrumly.com: if you leave your e-mail address, we store it (with the page language and the date) in our database on Cloudflare to send one message when the app is on Google Play. The basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw by writing to us. We delete the address after that message is sent, or straight away on request. We never share it. To protect the list from bots, we count sign-up attempts per IP address, keeping only a hash of it for two days.
- Notifications (decision reminders, review reminders, the end of the trial) are scheduled on the phone, with no notification server.
- The hosting provider of our server and this website (Cloudflare, Inc.) may keep standard technical logs (e.g. IP address) under its own policy. andrumly.com uses no cookies and no analytics.
4. Legal basis and purpose
We process data to provide the service (Art. 6(1)(b) GDPR): product recognition, AI reflections, the free trial and subscriptions. Crash reports and feedback are used to fix and improve the app (legitimate interest, Art. 6(1)(f) GDPR).
5. Transfers outside the European Economic Area
Anthropic, RevenueCat and Cloudflare are US companies. Transfers rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, depending on the provider.
6. What we don't do
We show no ads, sell no data, do no profiling and do not track you across other apps or websites.
7. How long
- Data on the phone stays there until you delete it. Deleting the app deletes all its data.
- Content sent to the AI is not stored by us.
- The installation record on our server is deleted automatically after 24 months without use, or earlier on request. Daily AI cost totals (not linked to anyone) are kept for 90 days.
- Sentry deletes crash reports automatically after its plan's retention period, at the latest after 90 days.
8. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to lodge a complaint with a data protection authority (in Poland, the President of the Personal Data Protection Office, UODO). Because your data is on your phone, you can exercise most of these rights directly in the app (export, edit, delete). For anything else, write to andrumly.app@gmail.com.
9. Children
The app is not intended for anyone under 16.
10. Changes
We will announce significant changes in the app or in the store listing. The date of the last change is at the top of this page.