Privacy policy
Controller
Maximilian MiernikHilversumer Str. 28, 28259 Bremen, Germany
Email: prudentiell@gmail.com · Phone: +49 1520 4458524
In short: your routines, projects, goals and contacts stay on your iPhone. For visitors, the website sets no cookies and uses no analytics or advertising services.
Part 1: The app
Your content stays on your device
Prudentia, projects, tasks, events, goals, contacts, important dates, notes, photos and settings are stored exclusively on your iPhone. You do not need an account, and we do not receive this data. The automatic backup places a copy of your app data, including your own photos and videos, in a folder in your own iCloud Drive that only the app can see. We have no access to it; Apple’s terms apply. You can turn the backup off in the app under Settings → Data.
Location and weather
If you allow it, the app uses your approximate location to calculate sunrise and sunset for the day band and to show the weather. For the weather forecast the app sends the approximate coordinates to Open-Meteo (open-meteo.com); the weather data is licensed under CC BY 4.0. If you search for a place for the weather, your search term goes to Open-Meteo’s place service. For address suggestions for your own events the app uses Apple’s place service. Sunrise and sunset are calculated on the device. For technical reasons the providers see your IP address. Without a location the app uses Berlin.
Calendar and reminders
If you switch it on in the settings and allow it, the app reads events from your calendar and items from Apple Reminders to show or assign them in the day band. This happens on the device only. If you check off an assigned reminder in Prudentia, it is also marked as completed in Apple Reminders. We do not receive this data.
Notifications, alarm, camera, photos, microphone
Reminders and the alarm are scheduled locally on the device. On iPhones with iOS 26 or later the alarm rings via AlarmKit, the iOS alarm. The app only uses the camera, photos and microphone if you attach a photo or video to a task; the files stay on the device. You can revoke each permission in the iPhone settings.
Siri, Shortcuts and widgets
Widgets, the Live Activity and Siri shortcuts show or use app data on your device. Voice commands are processed by Apple; Apple’s terms apply. We receive nothing.
GIF search
When you search for a GIF, your search term, a random identifier generated on your device (not a device ID) and, for technical reasons, your IP address are transmitted to the provider of the GIF search (KLIPY). Without GIF search nothing is transmitted.
AI features
On request the app copies a text (prompt) to the clipboard, which you paste into the AI of your choice yourself, and reads in an answer that you paste or choose as a file. The app itself sends nothing to an AI. What you enter there is subject to the terms of the respective AI provider.
With “Share my day with the AI” (evening routine, optional) the text can, at your request, also contain details about your day: what you completed and postponed, your plan for the next days and short details from you, optionally also about health or mood. You copy the text or pass it on via the share menu to the app of your choice; Prudentia itself does not send it anywhere and does not store these entries. How the AI provider processes them is governed by its terms. The app only adopts an AI answer after you have seen a preview; it deletes nothing.
Sharing packages
When you share a Prudentia or a project, the app creates a file (.ppack) with title, tasks, duration, notes and embedded photos. Goals, completed tasks, your planning, contacts, your profile and your location are never included. You decide where the file goes.
Community and notices
When you open the community area, the app loads the catalogue (Prudentia, projects, events and channels) from prudentia-app.com. At most twice a day it also fetches notices for the “Important dates” area and the sentences of the thank-you screen. The app’s language is part of the request address. The app sends no account, device or content data. The distance to events and public holidays are calculated on the device. For technical reasons your IP address and details of the request are transmitted (see server logs below).
When you open a QR code or link from a channel (prudentia-app.com/c/… or /i/…), the page shows a preview of the channel or content and the way to the App Store; if the app is installed, the app opens instead. The page sets no cookies and contains no counters. Only the usual server data arises (see server logs). For the link, the app asks prudentia-app.com which content is behind it; your location is not transmitted.
Optional usage figures and error reports
Only if you agree (in the onboarding or under Settings → Privacy & help; both switches are off by default) does the app send to our server:
- Usage figures: totals per day, for example “3 routines completed”, as well as views and adoptions of individual community items (with the item’s identifier, so authors can see their reach). Platform and language are added.
- Error reports: the error message with technical trace, app version, system version and language.
There is no identifier, no content, names or places; the app and the server remove paths on the device and email addresses from the reports, and we do not store the IP address for this. The usage figures are plain totals without personal reference and are kept for two years. We delete error reports automatically after 90 days at the latest. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw in the app at any time.
Part 2: The website
Hosting at Cloudflare
The website and the interface for the app run at Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes the data on our behalf (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; this establishes an adequate level of protection for transfers to the USA (Art. 45 GDPR).
Server logs
With every request, IP address, time, requested address, browser identifier and status code are processed for technical reasons, to deliver the page and to protect against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). These server logs are deleted after 7 days at the latest. We do not use them for statistics about individuals.
No cookies, no analytics, no third-party fonts
The public pages set no cookies and use no analytics or advertising services. Fonts and images are on our own server; nothing is loaded from Google or other providers.
Preview with your own package
If you drop a .ppack file on the home page, your browser opens it directly on your device. The file is not uploaded.
Contact by email
If you write to us, we use your message and address only to reply (Art. 6(1)(b) and (f) GDPR). We delete them once the request is dealt with and no statutory retention duties apply.
Application for a channel
If you apply at prudentia-app.com/mitmachen, we store the name of the channel, your email address, your text and, if given, the link or sample package, in order to decide on the application and reply to you (Art. 6(1)(b) GDPR). So that nobody sends applications in bulk, we also store a checksum of your IP address and the day; we do not store the IP address itself. After the decision we delete the application after 90 days. If it is accepted, the information under “Channels and account area” applies from then on.
Reporting content
If you report content in the app or at prudentia-app.com/melden, we store which content is meant, the reason, your description and, if you give it, your email address for follow-up questions. Here too we store only a checksum of IP address and day for rate limiting. We use the report to remove unlawful content and violations of the community rules (Art. 6(1)(c) and (f) GDPR, Digital Services Act). We delete completed reports after one year.
Channels and account area
Anyone who has a channel signs in at prudentia-app.com/konto with an email address, password and the code of an authenticator app. We store the password only as a hash. When it is set, we check whether it appears in known data breaches; only the beginning of its hash value (5 characters) goes to the service “Have I Been Pwned”, never the password itself. We store the secret of the authenticator app encrypted, recovery codes only as a hash. For signing in we set a technically necessary cookie (session) that is valid for at most 12 hours and ends after 30 minutes of inactivity. For every sign-in we store a rough device description (e.g. “Safari on iPhone”) and a checksum of the browser to warn you about a sign-in from a new device, as well as failed attempts, in order to briefly lock accounts after five wrong attempts (Art. 6(1)(b) and (f) GDPR).
For the channel we store name, short line, self-description and profile picture, the content and events, who changed them and when, when the terms were accepted, moderation measures with reasons and objections, as well as a log of changes and sign-ins that we delete after 12 months. Name, channel details and published content and events are public and appear in the app; the users’ email addresses do not. If you search for a place when creating an event, our server sends the search term to the place service Nominatim of OpenStreetMap (OpenStreetMap Foundation, United Kingdom) and the coordinates found to Open-Meteo to determine the time zone. These services do not receive your IP address or email address. When a channel ends, we delete this data within 30 days unless we have to keep it.
The emergency access for the admin account of Team Prudentia runs via Cloudflare Access and only concerns the operator.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. To exercise them, write to the email address above. You delete all locally stored app data yourself under Settings → Data.
You can complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.
Changes
Before new features such as advertising or synchronisation are added, we will extend this policy with purpose, legal basis, recipients, storage period and, where necessary, your consent.