Legal

Privacy policy

Last updated: July 2026

1. Controller

2. Overview

This policy explains the processing of personal data in connection with the website (landing page) and the mobile app No! (project name: say-no).

In short: The app stores your reflections and profile settings locally on your device. It needs no account and does not sync content to a cloud. Access to the app is unlocked with a one-time purchase via the App Store. This website is a static information page without user accounts.

3. Website (landing page)

3.1 Hosting and server logs

When you visit this website, technically necessary connection data (e.g. IP address, time, requested resource, user agent) is processed by the respective hosting provider in server logs. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation of the website).

Exact retention and details depend on the hosting provider used. Once a fixed hosting provider is in place, this section will be updated.

3.2 Cookies and tracking

To the best of our knowledge, this landing page does not use tracking or marketing cookies and does not embed third-party analytics services (such as Google Analytics). No advertising profiles are created.

3.3 Fonts

Fonts (Fraunces, Sora) are served locally with the website and are not loaded from third parties (such as Google Fonts).

3.4 Contact by email

If you contact us by email, we process the data you provide (email address, message content, name if any) to respond to your request. Legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (general inquiries).

4. Mobile app “No!”

4.1 No account

The app requires no registration and no login. No user account is created on a server. Use of the app is unlocked with a one-time purchase processed by Apple through the App Store.

4.2 Local storage

On the device (e.g. via AsyncStorage) the app stores, among other things:

• Reflection entries (situation, feelings, reaction, notes)
• optional display name
• language setting
• onboarding status
• settings for local reminders, if any
• optional AI weekly report text generated on the device, if you create one

These data do not leave the device via a backend service we operate. There is no cloud sync and no server-side analysis of your reflections.

Legal basis for local processing on your device is your use of the app (Art. 6(1)(b) GDPR) or your legitimate interest in the app’s functionality (Art. 6(1)(f) GDPR). You can delete the data in the app at any time or uninstall the app.

4.3 On-device AI weekly reports

If you start an AI weekly report, the app can run a model on the device to summarize entries from that week. Generation happens locally. We do not operate a cloud AI endpoint that receives your journal text for this feature.

On-device generation can use substantial RAM and power. The app should warn you before a run. Generation may take longer or fail on devices with little free memory.

4.4 Local notifications

If you enable reminders, the app schedules local notifications on the device. No push content is sent via an external messaging service by us. You control the system permission for notifications in iOS settings.

4.5 App stores and device manufacturers

When downloading and using the app, Apple (App Store) and the device manufacturer may process their own data (e.g. purchase handling, device identifiers, crash reports if you allow them). These processings are subject to the privacy policies of the respective providers. We have only limited influence on them.

4.6 No health-data cloud, no therapy offering

No! is a practice room for self-reflection and deliberately distances itself from therapy and medical advice. The app is not a medical device. AI reports are optional reading aids based on your entries, not clinical advice. In mental health crises, please seek professional help locally.

5. Recipients and third-country transfers

Beyond the parties named in this policy (hosting, email, fonts, app store providers), we do not share personal data from app use with third parties. Where service providers process data in third countries (e.g. the USA), this is done, where applicable, on the basis of appropriate safeguards (e.g. adequacy decision / EU-US Data Privacy Framework or standard contractual clauses).

6. Retention

• Website logs: according to the hosting provider’s periods or as short as required for security and operation.
• Email inquiries: as long as handling and any documentation require; then deletion unless statutory retention duties apply.
• App data: until you delete them in the app or uninstall the app.

7. Your rights

Under the GDPR you have in particular the right to:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)

To exercise your rights, a message to kontakt@waldemarenns.deis enough.

You also have the right to lodge a complaint with a data protection supervisory authority. Among others, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is competent.

8. Obligation to provide data

You can use the website without providing personal data. Core app features do not require your name; the display name is optional. Unlocking the app requires a one-time App Store purchase.

9. Changes

We may update this privacy policy if the app, website, or legal situation changes. You will find the current version on this page.

Back to home · Legal notice