Privacy Policy.

Who is responsible

The controller for this app is Alain Kessler, a sole proprietorship registered in Switzerland, operating under the brand Klar. For any privacy question or request, contact support@getklar.org.

What we collect

Account data.We store your email address to sign you in and to keep your routines across devices. With Sign in with Apple you may use Apple's private relay email; that works fine. A display name and a small emoji are optional and set by you.

Your routines. The name you type, how often a week you want to do it, whether it has an end date, and the days you tick off. The name is free text you write yourself — it is stored as you typed it, so write it however you like.

Sharing, if you use it.You can let one person follow one routine. They see that routine's name and which days of the week you ticked off, and nothing else — not your other routines, not your email. It is read-only in both directions: they cannot tick a day off for you, and you cannot for them. If you have set a display name, the person you share with can see it. You can stop sharing at any time, which takes their access away immediately.

Purchase status. Purchases are processed by Apple. We receive only the resulting entitlement status (active or not) through our subscription provider RevenueCat. We never receive your card or payment details.

Anonymous install signal. On first launch the app sends a single anonymous event so we can count installs. It contains a random identifier generated on your device, the platform, the app version and your app language. No name, email, contacts, advertising identifier or location, and it is not linked to your account.

A one-time clipboard read.If you arrived through a link from someone who recommends the app, that link places a short token on your clipboard. On the first cold start the app reads the clipboard once, and only accepts text matching that exact token format. iOS shows its own “pasted from” notice when this happens. Anything else on your clipboard is ignored and never leaves your device, and the check does not run again.

What stays on your phone

Which apps you shut.This is the important one. Blocking runs on Apple's Screen Time framework, and the selection you make is an opaque token that Apple keeps on the device. Basalt never learns which apps or websites you chose. What we store is only that something is shut, and whether the web filter is on — never what is behind it.

Reminders. The daily nudge is a local notification scheduled on your phone. There is no push token and no server involved; we do not know whether it fired or whether you opened it.

The camera. Used for exactly one thing: reading an invite code off another screen. Nothing is recorded, nothing is uploaded, and no image ever leaves the device.

Your calendar.If you export a plan, the app writes sessions into a calendar named “Basalt” that belongs to you. We do not read your other calendars or events.

Appearance and layout. Your light/dark choice and how you arranged the widget are kept on the device.

What we do not do

No advertising and no ad networks. No cross-app or cross-site tracking, and no advertising identifier (IDFA). No location data, no access to your contacts, photos or microphone. No feed, no public profiles, and nothing about you is visible to anyone you have not explicitly shared a routine with. We do not sell or rent personal data to anyone.

Why we process this data

To provide the app and your account, to keep your routines and your history, to unlock and restore the paid features, and to understand how many people install the app. Legal bases under the GDPR are the performance of our contract with you (Art. 6 para. 1 lit. b) and our legitimate interest in basic, privacy friendly install statistics (Art. 6 para. 1 lit. f). The Swiss Data Protection Act (DSG) applies in parallel.

Service providers

We use a small set of processors, each only to run the service:

Apple for Sign in with Apple, for Screen Time, and for all payments. Supabase for account authentication and database hosting, located in the European Union. RevenueCat for managing subscription entitlements. These providers process data on our behalf under data processing agreements.

Where data is stored and how long

Account data and your routines are stored on Supabase servers in the European Union (Ireland region). We keep them for as long as your account exists. You can delete your account at any time in the app under Settings; that removes your account, your routines, every day you have ticked off, and any share you had set up. The anonymous install signal is aggregated and cannot be traced back to you.

Your rights

You have the right to access, correct, delete and export your personal data, and to object to or restrict its processing. The fastest way to delete everything is the in-app account deletion. For any other request, write to support@getklar.org. You also have the right to lodge a complaint with a data protection authority.

Children

Basalt is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children under 13, or under 16 in the European Union. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. The current version is always available at this page, with the date shown below. Material changes will be reflected here before they take effect.