Privacy Policy

1. Introduction

Lymml built Lymml ("the app") to help you build self-awareness by tracking personal data points throughout your day. This privacy policy explains what information the app collects, how it is stored, and what rights you have over it.

The short version: all the data you enter into Lymml lives only on your device. Your check-in history, metrics, and schedule are never transmitted to us or to any third party. The app does, however, send anonymous technical diagnostics to a crash-reporting service when errors occur — this is described in detail in §6 below.

2. What Data We Collect

Lymml stores the following information locally on your device:

Check-in history

Each time you complete a check-in, the app records:

• The date and time of the check-in
• The name and time of the reminder that triggered it (if applicable)
• Your responses to the metrics you configured

Data point definitions

The custom metrics you create, including their name, type (percentage, range, number, yes/no, free text), labels, and units.

Schedule configuration

The reminder schedule you configure, including times of day, names, recurrence patterns, and which metrics each reminder is linked to.

Language preference

Your selected app language (English or German), or the system default if you have not made a selection.

3. What Data We Do NOT Collect

• No names, email addresses, or account information
• No location data
• No device identifiers or advertising IDs
• No camera or microphone data
• No contacts or calendar data
• None of the data you enter into the app (check-ins, metrics, schedule) is ever transmitted to us or to any third party

4. How Data Is Stored

All data you enter is stored locally on your device using standard iOS and Android storage mechanisms:

• Check-in history is stored in a local SQLite database (lymml.db) managed by the app.
• Data point definitions, schedule, and language preference are stored in the app's shared preferences storage.

This data is not encrypted at the application level. It is protected by your device's operating system security (screen lock, filesystem encryption if enabled on your device). If your device is shared or compromised, the data may be accessible.

Your device's backup system (iCloud on iOS, Android Backup Service on Android) may include app data in device backups. These backups are governed by your operating system and cloud provider's own privacy policies.

5. Permissions

The app requests the following permissions:

No sensitive permissions (location, camera, microphone, contacts, etc.) are requested or used.

6. Crash Reporting and Performance Monitoring

Lymml uses Sentry (Sentry, Inc., 45 Fremont Street, San Francisco, CA 94105, USA) as a crash-reporting and performance-monitoring service. This is the only third-party service integrated into the app.

What is sent to Sentry

When an unexpected error occurs, the app automatically sends a crash report containing:

• The error message and Dart stack trace
• App version and build number (e.g. 1.1.0)
• Device type and category (e.g. "phone"), operating system, and OS version
• A randomly generated, per-install session identifier that cannot be linked to your identity and is reset when you reinstall the app

In addition, a sample of sessions (approximately 10 % in production) includes anonymous performance data:

• App startup duration
• Screen transition and rendering times
• CPU profile samples

What is NOT sent to Sentry

Sentry receives no data you enter into the app. Your check-in history, data point definitions, schedule configuration, and language preference are never included in any report. No names, email addresses, IP addresses, or other personal identifiers are transmitted (sendDefaultPii is disabled).

Where data is stored

Sentry is configured to store all data exclusively in EU data centers (Frankfurt, Germany). No data is transferred outside the European Economic Area.

Legal basis

Processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in maintaining the stability and reliability of the app. Crash and performance data is strictly limited to what is necessary for diagnosing technical failures; it is not used for advertising, profiling, or any other purpose.

Data retention

Sentry retains crash events and performance data for 90 days, after which it is automatically deleted.

Sentry's privacy practices

Sentry's privacy policy is available at sentry.io/privacy. We have concluded a Data Processing Agreement (Art. 28 GDPR) with Sentry.

Right to object

You have the right to object to this processing at any time. To exercise this right, contact us at contact@lymml.com. We will disable Sentry for subsequent releases of the app or provide an opt-out mechanism on request.

7. Your Data, Your Control

Deleting your check-in history

You can permanently delete all your check-in history at any time from within the app: go to Settings → App Settings and tap Clear all check-in data. You will be asked to confirm. This action cannot be undone.

Note that clearing your check-in history does not delete your data point definitions or your schedule configuration. To remove those, you can delete and reinstall the app.

Deleting all data

Uninstalling the app will remove all locally stored data from your device (subject to any copies that may exist in device backups).

8. Children's Privacy

Lymml is not directed at children under the age of 13. We do not knowingly collect personal information from children. Because all user-entered data is stored locally and no such data is transmitted to us, we have no means of verifying the age of users. If you are a parent or guardian and believe your child is using the app, you can remove all data by uninstalling the app from the device.

9. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding any personal data we process:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — request that we limit processing
• Right to object — object to processing based on legitimate interest (see §6)
• Right to data portability — receive your data in a structured, machine-readable format
• Right to lodge a complaint — with your national supervisory authority (in Germany: the competent Landesbeauftragter für Datenschutz)

To exercise any of these rights, contact us at contact@lymml.com.

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this document. We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this privacy policy or about how Lymml handles your data, please contact us at:

contact@lymml.com