Privacy Policy
This Privacy Policy explains how Nodux Media AB processes personal data in connection with the YearDiary app for iPhone, iPad and Mac and the website yeardiary.com. YearDiary is designed to work entirely on your device, your journal is linked solely to your own Apple ID and iCloud. We do not collect any contact information, and the app has no user accounts and no central database.
1. Data controller
The controller responsible for the processing of your personal data is:
Nodux Media AB
Company registration number: 559575-8052
Registered office: Nyköping Municipality, Sweden
Email: contact@yeardiary.com
Questions about data protection and requests for access, rectification or erasure can be sent to the same address.
2. What data we process
YearDiary is built to run entirely on your device. Your journal entries, photos, settings and any other content are stored locally in the app and do not leave your device. We have no central database and no user accounts, and we do not collect your name, email or any other contact information through the app.
- Local app data: your journal entries, attached photos, tags, moods, dates and settings. Stored only on your device in the app’s local storage, and backed up via your own Apple iCloud if you have enabled it. We have no access to this data.
- Purchases and subscriptions: handled by the Apple App Store. We receive an anonymous transaction identifier so we can verify your purchase in the app. We never receive card details, name or billing address.
- Notifications: if you enable reminders, they are scheduled locally on your device. We do not operate a push server and receive no device token or personal data, and we never use notifications for marketing.
- Support communication: if you choose to email us, we process your email address and the content of your message solely to respond to you. This is voluntary and initiated by you.
- Website logs: when you visit yeardiary.com, our web hosting provider (Vercel Inc.) processes your IP address, timestamp and technical information about your device for operation and security logging.
3. Why we process the data
- To provide the app’s functions (legal basis: performance of a contract). Local storage of your entries and verification of any in-app purchase.
- To respond to support (legal basis: legitimate interest).
- Operation and security of the website (legal basis: legitimate interest), to prevent abuse and technical disruption.
- Accounting (legal basis: legal obligation). Records from the App Store are retained for seven years under the Swedish Bookkeeping Act (Bokföringslagen).
4. Where your data is stored
All entries and settings are stored locally on your iPhone, iPad or Mac. Nothing is sent to us or to any cloud service operated by us.
If you have enabled backup via Apple iCloud, a copy of the app’s data is stored with Apple under Apple’s terms. You control whether this feature is on.
Purchase data for App Store subscriptions is handled by Apple Distribution International Ltd (Ireland). The website is operated by Vercel Inc. with servers within the EU and the USA. Transfers to the USA rely on the EU-US Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.
5. Sub-processors
We engage the following processors under data processing agreements pursuant to Article 28 of the GDPR:
- Apple Distribution International Ltd (Ireland), handles purchases and subscriptions via the App Store. We receive anonymous transaction identifiers, no card details.
- Vercel Inc. (USA), web hosting for yeardiary.com. Processes IP address and technical data on visits. Servers within the EU and USA (DPF + SCC).
We never share your personal data with other third parties without your consent or a basis in law.
6. Cookies and local storage
The website yeardiary.com uses no analytics cookies, no tracking cookies and no advertising networks. Within the app, your settings, entries and cache are stored in local storage on your device. That data never leaves your device and is not shared with anyone.
7. Your rights under the GDPR
You have the right to:
- be informed about which data we process about you;
- request a copy of your personal data;
- request rectification of inaccurate data;
- request erasure of your data;
- request restriction of processing;
- data portability (receive your data in a machine-readable format);
- object to processing carried out on the basis of legitimate interest;
- lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Because all of your entries are stored locally, you can erase them at any time using the app’s reset function or by uninstalling the app from your device. For other requests, contact us at contact@yeardiary.com. We respond to your request without undue delay and within 30 days at the latest.
8. How long we keep data
- App entries and settings: for as long as the app is installed on your device. Nothing is stored with us.
- Accounting records from the App Store: seven (7) years under the Swedish Bookkeeping Act.
- Support matters: up to three (3) years after the matter is closed.
- Website operational logs: cleared on an ongoing basis, normally within 30 days.
9. How we protect data
We take technical and organizational measures to protect your data, including:
- encrypted transfer (HTTPS/TLS) between your device and the website;
- local storage in the device’s protected app storage (sandbox);
- access restriction so that only authorized personnel can reach operational systems;
- logging to detect unauthorized access.
10. Personal data breaches
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Swedish Authority for Privacy Protection (IMY) within 72 hours. Where the risk is high, we will also inform affected users without undue delay, where this is possible.
11. Complaints to the supervisory authority
If you are dissatisfied with our processing of your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.
12. Changes to this policy
We may update this Privacy Policy. Material changes will be announced in the app or on the website at least 30 days before they take effect.
Nodux Media AB · contact@yeardiary.com