App privacy
This policy covers the Metamorphosis web app at app.jw-metamorfosa.org. In short: everything you enter stays in your browser. There is no server holding your data, no account and no analytics.
Controller
irespect LTD, Anthipolochagou Georgiou M. Savva 26, Shop 1-2, 8201 Paphos, Cyprus. Represented by its director Rudolf Nordheimer. E-mail: info@irespect.com
Where the data lives
Habits, ticks, notes on days, pauses, the archive and settings (language, theme) are kept in your browser’s local storage on this device. The app sends them neither to us nor to anyone else. There are no analytics, ads or cookies. The exceptions: short error reports without your entries (see “Error reports”) and, only if you turn them on, Home Screen reminders (see that section). When opened from the Home Screen, the app asks the browser once not to clear its storage on its own. Nothing leaves the device in the process. Legal basis: Art. 6(1)(b) GDPR; storing on the device under § 25(2) no. 2 TDDDG, as it is strictly necessary for the function you use.
Wellbeing (optional)
In Settings you can turn on wellbeing: Today and the day sheet then save one of three words — “rough”, “okay” or “good” — with the date, and the day sheet also saves hours of sleep the night before (from “5 or less” to “9 or more”). This is health data (Art. 9 GDPR), so the feature stays off until you turn it on yourself on the “what is saved and where” screen. The legal basis is your explicit consent, Art. 9(2)(a) GDPR. The entries are kept only in the browser storage on this device. They go neither to a server nor into error reports. They are included in the export only while wellbeing is on. To withdraw consent, use the same place: “Turn off and delete wellbeing entries”. The entries are deleted at once; habits and check-ins stay.
Home Screen reminders (optional)
When the app is opened from the Home Screen and the browser supports push messages (iPhone with iOS 18.4 or later), you can turn on Home Screen reminders in Settings. The browser then issues an address for messages with keys for it; it is stored on our server at Hostinger International Ltd. (Cyprus) together with the reminder times, weekdays, the number of habits at that time, time zone and language. Habit names, check-ins and other entries do not go there; no IP address is stored with the subscription. At the chosen time the server sends a short encrypted message through your browser’s push service (Safari: Apple, Chrome: Google, Firefox: Mozilla); the service sees the address, time and size, not the text. Legal basis: the function you asked for, Art. 6(1)(b) GDPR; access to push on the device under § 25(2) no. 2 TDDDG. To turn it off, use the same switch: the subscription on the server is deleted at once. It is also deleted when the browser reports that it is no longer valid, or if the app has not been opened for 180 days; “Delete all data” removes it too.
Error reports
If a technical error occurs, the app may send a short report: error type and text, the technical call stack, app version, language and platform. Email addresses and long numbers are removed from the text before sending. Your entries, habit names, storage contents and device or account identifiers are not included; at most five reports per session, none when offline. Recipient: GlitchTip (processor: Burke Software), stored in Frankfurt am Main, Germany (DigitalOcean FRA1); sub-processor: Cloudflare (CDN). GlitchTip and Cloudflare see your IP address when connecting; it is stored only in shortened form, so it identifies neither a person nor a device. Reports are kept for at most 90 days and deleted monthly. Purpose: finding and fixing errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable app). Objection under Art. 21 GDPR: info@irespect.com.
Emails to us
If you write to us via “Suggest an idea / report a problem” at info@jw-metamorfosa.org, we use your address and message only to reply (Art. 6(1)(b) and (f) GDPR). The email itself only adds the app version, language and platform. We delete the correspondence once it is resolved, unless we must keep it.
Loading the app
The app’s files are served by Hostinger International Ltd. (Cyprus). Like any web server, it receives the IP address, time and browser details and writes them to a log (Art. 6(1)(f) GDPR). No content from the app is transmitted. Fonts are part of the app and are not loaded from third parties.
Export and calendar
The export (JSON, CSV) and the calendar file (.ics) for a reminder are created in the browser and go wherever you save them. From then on the file is in your hands. Habits can say something about health — share exports only with people you trust.
Deletion
Settings → “Data” → “Delete all data”: after confirming, everything is removed from the browser. We hold no copy. Clearing the site data in your browser removes everything as well.
Your rights
You exercise access, rectification, erasure and portability directly in the app: view, edit, “Delete all data”, export. A request to us would have nothing to act on — your entries are not with us. About server logs: info@irespect.com.
Right to complain
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Ours: Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, Cyprus.
Changes
We update this policy when the app changes. Version of 17 October 2026.