My Padys
My Padys is an accountability app. You set goals, check in on them, and if you want to, you do that alongside other people in groups. This page explains what we collect to make that work, why we are allowed to, how long we keep it, and how to get it back or delete it.
We do not sell your data, we do not share it with advertisers, and we do not track you across other apps or websites.
My Padys is run by Ngong epse Tata Ivan-Clare Wirdze, a private individual based in France, publishing under the name IvyApps. There is no company, and the app is free.
That person is the data controller. You can reach them at contact@ivyapps.cloud about anything on this page, including to exercise any of the rights described below. Because My Padys is published by a private individual rather than a business, a postal address is not shown here; it is held by our hosting provider and available to the authorities on request, as French law allows.
| What | Why | Our lawful basis |
|---|---|---|
| Email address, display name, and a profile photo if you add one | To create and secure your account, and to show you to people in your groups | Performance of our contract with you |
| Your full name, if you give it when you sign up, or Apple or Google share it | To keep your account details. Only you see it. Other people see your display name | Performance of our contract with you |
| Your goals, the steps you add to them, and your check-ins | This is the app. Without it there is nothing to track | Performance of our contract with you |
| Communities and groups you join or create, and your membership of them | To show you your groups and let other members see your participation | Performance of our contract with you |
| Messages, announcements and reactions you post | To deliver them to the people you posted them to | Performance of our contract with you |
| Reports you send, and people you block | To look into content or people you report, and to hide people you block from you | Our legitimate interest in keeping the app safe. See below |
| Notes a group creator writes about you | So creators can keep track of how their members are doing | Our legitimate interest in running group accountability. See below |
| Push notification token, and your device's timezone | To send check-in reminders at the right hour where you are | Your consent, given when you allow notifications |
| Your notification settings and accountability level | To send you the kind of nudge you asked for, or none | Performance of our contract with you |
| Streaks, consistency figures and achievements, calculated from your check-ins | To show you your own progress | Performance of our contract with you |
| Technical logs: IP address, request paths, error details | To keep the service running, find bugs, and stop abuse | Our legitimate interest in a working, secure service |
We do not ask for your age, gender, address, phone number or payment details, and we have no way to collect your precise location. Your timezone is the only location signal we hold, and it is only accurate to a region.
We never ask you about your health, beliefs or personal life. But a goal you write for yourself might reveal any of it: a fitness target, a recovery meeting, a prayer habit, a therapy appointment. Under data protection law that kind of information gets extra protection.
So we hold the words you write only to show them back to you, and to the people in a group where you have chosen to share a goal. We never use them to build a profile of you, we never send them to any analytics or advertising service, and no human at IvyApps reads them except where you ask us to help with a specific problem, or where we are legally required to.
If you are a member of a group, the person running it can write private notes about you, in the same way a coach keeps notes. These are visible only to that creator and to admins of that group. They are not visible to other members, and they are not visible to you by default.
You have the right to see them. Email contact@ivyapps.cloud and we will send you a copy of any notes held about you. If you leave the group or delete your account, notes about you are deleted with it.
You can report a check-in, an announcement or a member. A report keeps the reason you chose, anything you add, and a copy of what you reported, so we can still see it if it is changed or deleted. Only we read reports. The person you report is not told who reported them.
You can also block someone. We keep the list so we can hide their posts from you. They are not told.
We use a small number of service providers. They process your data on our instructions and for no purpose of their own.
| Provider | What they do for us |
|---|---|
| Google (Firebase and Google Cloud) | Sign-in, database, file storage, hosting for our servers, and error logs |
| PostHog (EU servers) | Shows us how the app is used, as charts. Receives counts and categories only, never anything you have written |
| Expo | Delivers push notifications to your device |
| Apple | Sign in with Apple, and push delivery on iPhones and iPads |
| Sign in with Google, if you use it |
If you use Sign in with Apple, you can hide your real email address and Apple will give us a forwarding address instead. That works perfectly well with My Padys and we will never ask you for a different one.
We record a small number of events about how My Padys is used, so we can tell which parts help and which do not. For example: that a goal was created, that a check-in was recorded and whether it was a full, partial or rest day, or that somebody joined a group.
These records hold counts, categories and timestamps and nothing else. They never contain anything you have written: not goal titles, not descriptions, not journal entries, not messages, not notes. That is enforced in our code by a fixed list of what an event may contain, so there is no way for your words to reach it, even by mistake.
You are identified in these records only by a scrambled version of your account identifier, which cannot be turned back into your account without a secret only our server holds. They are deleted automatically after 14 months.
We keep a copy in our own database, and we also send them to PostHog, a product analytics service, so we can read them as charts rather than raw rows. PostHog processes them on our instructions and for no purpose of their own, on servers in the European Union. PostHog is a US company, so their staff may need to reach that data from outside Europe to run and support the service. Where that happens, the transfer relies on their certification under the EU-US Data Privacy Framework and on the standard contractual clauses in our agreement with them. They receive the scrambled identifier and the counts, never your name, your email, or anything you have written. We have also switched off their location lookup, so they never see your IP address.
We send your data to no advertising network and to nobody else. We do not track you across other apps or websites, we use no advertising identifier, and we do not collect your age or gender.
We do this on the basis of our legitimate interest in improving an app you asked to use. You can tell us to stop at any time, without giving a reason: turn off analytics in the app, or email contact@ivyapps.cloud. We stop recording immediately, we delete the events we had already recorded about you, and we tell PostHog to delete their copy. Deleting your account does the same.
Your data is stored on Google Cloud infrastructure. Google operates datacentres worldwide, so your data may be processed outside the UK and the European Economic Area. Where that happens, the transfer relies on Google's certification under the EU-US Data Privacy Framework and on the standard contractual clauses in our agreement with them. You can ask us for a copy of those safeguards at any time. We are established in France, so your data is handled under the EU GDPR wherever it is processed.
You can do the first three of these yourself, in the app, without asking us.
Email contact@ivyapps.cloud for anything not covered by a button. We answer within one month.
If you think we have handled your data badly, please tell us first and we will try to put it right. You also have the right to complain to a supervisory authority. Ours is the French CNIL, at cnil.fr, and if you live elsewhere in the EU you can complain to the authority in your own country instead.
My Padys is not for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
Sign-in is handled by Firebase Authentication, so we never see or store your password. Our database is closed to direct access from apps: everything goes through our own server, which checks who you are on every request. Uploaded files are private and are served through links that expire after a few hours.
If we change how we use your data in a way that matters, we will update this page and tell you in the app before the change takes effect. The date at the top always says when this version started.