Legal

Privacy policy

Effective date: May 20, 2026 Last updated: October 31, 2026

This Privacy Policy explains what personal data Greatr collects when you use our mobile application (“Greatr” or the “App”), why we collect it, who we share it with, and what rights you have. We have written it to be readable. The legal precision is here, but plain English wins where possible.

Greatr is operated by Yaoki Studios, a Dutch general partnership (vennootschap onder firma, VOF) in Deventer, the Netherlands. We are the data controller for the personal data described in this policy.

1. Who we are and how to reach us

Yaoki Studios is a Dutch partnership in Deventer. We are the controller of your personal data.

Yaoki Studios, a vennootschap onder firma (VOF), the data controller (trade name Yaoki Studios)
Address: Engestraat 13 A, 7411 LC Deventer, the Netherlands
Chamber of Commerce (KVK) number: 90569482 (main establishment, establishment number 000056291078)
Contact for privacy, data requests, and account deletion: privacy@getgreatr.app
Contact for the Terms of Service and legal notices: legal@getgreatr.app

We are not required to appoint a Data Protection Officer, but you can reach our privacy team at the address above.

2. What this policy covers

This policy applies to the Greatr app and to our website getgreatr.app. It does not cover third parties we link to.

This policy applies to personal data we process when you use the Greatr app on iOS or Android, and when you visit getgreatr.app. It does not apply to third-party services we link to (for example the Apple App Store, Google Play, or external websites), which have their own privacy policies. What a visit to the website involves is described in Section 15.

3. Third-party services

A small number of vendors help us run Greatr. Each one processes data on our instructions, under contract.

We use the following processors and service providers. Each is bound by a data processing agreement that requires them to protect your data and to process it only for the purposes we set.

3.1 Supabase

Purpose: Database hosting and authentication. Stores your account, habits, rituals, completions, journal entries, reading and meditation records, and subscription state.
Data location: Primary database in the United States (Ohio); a read replica is located in the European Union (Paris) for low-latency reads by EU users.
Privacy policy: https://supabase.com/privacy

3.2 PostHog

Purpose: Product analytics and error tracking.
Data processed: Internal user ID, product events, device metadata, crash and error logs, approximate IP-derived geolocation (country / city level).
Data location: European Union instance.
Privacy policy: https://posthog.com/privacy

3.3 Expo Push Notifications

Purpose: Registering a push notification token for your device so that, in the future, we can deliver remote notifications (for example, account-related messages). Today, all reminders for habits, rituals, streaks, and sessions are scheduled and fired locally on your device by Apple's local notification system - no notification content is sent through a remote push service.
Data processed: Push notification token, device platform, device model name (used to label the token in your account so you can recognise it).
Data location: United States.
Privacy policy: https://expo.dev/privacy

3.4 Google Books API

Purpose: Searching for book metadata (title, author, cover) when you add a book to your reading list. Greatr sends only your search query; no account information is sent.
Data location: Google global infrastructure.
Privacy policy: https://policies.google.com/privacy

Purpose: Letting you sign in to Greatr with your Apple ID or Google account, instead of an email and password.
Data processed: Your email address (or Apple’s private relay address) and your name, if you choose to share them.
Privacy policies: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy

3.6 Superwall

Purpose: Subscription paywall presentation and subscription state management.
Data processed: An anonymous user ID (mapped to your Greatr account on our side), subscription events (purchase, renewal, cancellation, expiration), device platform, and app version.
Data location: United States.
Important: Superwall never receives your name, email, journal entries, or any habit data.
Privacy policy: https://superwall.com/privacy

3.7 Apple App Store and Google Play Store

Purpose: Processing in-app subscription payments.
Data processed: Your purchase transaction is handled entirely by Apple or Google. We receive only your subscription status (active, expired, cancelled, in grace period) and the product ID purchased. We never see your payment method, billing address, or card details.
Privacy policies: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy

3.8 AppsFlyer

Purpose: Marketing attribution. Helps us understand which ad campaign or channel led you to install Greatr, so we can spend less on ads that don't work and more on ads that bring people who actually enjoy the app.
Data processed: Install timestamp, ad attribution data (campaign, ad set, creative), a limited set of conversion events (signup, paywall view, trial start, purchase, subscription), device platform, app version, locale, and IP address (used only for country-level attribution, not retained for marketing). If you grant App Tracking Transparency permission on iOS, AppsFlyer additionally processes your Apple advertising identifier (IDFA) to improve attribution accuracy. If you decline, no IDFA is accessed and attribution is provided only via Apple's privacy-preserving SKAdNetwork postbacks.
Partner sharing: AppsFlyer forwards aggregated, event-level conversion data to our ad-network partners - currently TikTok for Business and Meta (Facebook / Instagram) - so they can measure the performance of the ads they served you. We do not share your name, email, journal entries, habit data, or any other Greatr content with TikTok or Meta. The relationship is limited to "an install happened" and "a subscription happened" signals.
Data location: United States.
Privacy policy: https://www.appsflyer.com/legal/services-privacy-policy/

We may also share personal data when we have to: to comply with a valid legal request, to enforce our Terms of Service, to protect the rights, property, or safety of Greatr, our users, or others, or in connection with a corporate transaction (such as a merger or acquisition). In a corporate transaction we will require the recipient to honour the commitments in this Privacy Policy.

4. Subscriptions and payment data

All payments are handled by Apple or Google. We never see your card or billing details.

Greatr offers auto-renewable subscriptions for premium access. Pricing, billing periods, and renewal details are set out in our Terms of Service.

All payment processing is handled by the Apple App Store or Google Play Store. We never see, store, or have access to your payment card details, billing address, or bank information.
We receive only: the subscription product you purchased, your subscription status (active, expired, cancelled, in grace period), the original purchase date, and the next renewal date.
We use this information to determine whether your account has premium access and to provide customer support for subscription-related issues.
To request a refund, contact Apple or Google directly. We cannot issue refunds for store-purchased subscriptions. Apple: https://reportaproblem.apple.com. Google: https://support.google.com/googleplay/answer/7205930.

5. Data we collect

We collect the minimum we need to run Greatr, deliver your subscription, and improve the product. No location, no health data, no contacts, no camera, no microphone, and no advertising ID unless you allow tracking on iOS (see Section 15).

5.1 Account data

Email address
Display name and full name
Profile picture (if you upload one)
Bio (if you fill one in)
Authentication provider (email/password, Apple Sign-In, or Google Sign-In)
Internal user ID

5.2 Onboarding data

When you first set up Greatr we ask you a few questions so we can personalise the app. These include your age group, gender (optional), goals you want to focus on, and your selected personality archetype. You can update or skip most of these later from your profile.

5.3 Habit and ritual data

The habits and rituals you create, their configurations, the categories they belong to, the order in which you arrange them, and the completion logs, streaks, and durations they generate.

5.4 Reading data

Books you add to your reading list, pages read, and reading session time.

5.5 Meditation data

Sessions completed, session durations, and lesson progress.

5.6 Journaling content

The full text of journal entries you write inside Greatr. We treat this with extra care - see Section 9.

5.7 Device metadata

Operating system and version, app version, device model, platform (iOS or Android), locale, and time zone.

5.8 Push notification tokens

The Expo push token issued for your device. Today, all reminders for habits, rituals, streaks, and sessions are scheduled and fired locally on your device by Apple's local notification system. The token is stored so that, in the future, we can deliver account-related messages remotely.

5.9 Product analytics

Feature usage events (for example “habit completed”, “ritual started”) tied to your internal user ID, collected by PostHog.

5.10 IP address

Your IP address is processed by PostHog to derive approximate geolocation only (country and city level). We do not log or retain your full IP address for marketing purposes.

5.11 Subscription state

Whether you have an active subscription, the product purchased, renewal and expiry timestamps, and transaction identifiers (never your payment card or bank details).

5.12 Support correspondence

Emails you send us and our replies.

What we do not collect. Greatr does not request or collect your precise or coarse device location, health or fitness data, contacts, calendar entries, photos (other than an avatar you choose to upload), microphone audio, camera images, or biometric data. The only advertising identifier we may access is Apple's IDFA, and only with your explicit App Tracking Transparency consent, and only for marketing attribution as described in Section 3.8. We do not access Google's GAID. We do not buy personal data from data brokers. We do not sell your personal data.

Greatr is not a medical device. The data we collect about your habits, rituals, meditation, journaling, and reading is for your personal habit-building and reflection. It is not health data in the HIPAA or EU health-data sense, and it is not used to diagnose, treat, cure, or prevent any disease. See our in-app Health disclaimer in Settings > Legal > Health disclaimer.

6. Why we collect it and our legal basis

Different purposes have different legal bases under the GDPR.

Purpose	Data used	Legal basis (GDPR Art. 6)
Creating and operating your account, syncing your data across devices, providing the core habit, ritual, meditation, reading, and journaling features	Account data, onboarding data, habit and ritual data, journaling content, reading data, meditation data, device metadata	Performance of a contract (Art. 6(1)(b))
Activating, restoring, and validating your subscription	Subscription state, account data, device metadata	Performance of a contract (Art. 6(1)(b))
Sending push notifications related to your habits and rituals	Push notification tokens, habit data	Performance of a contract (Art. 6(1)(b))
Keeping the App secure, detecting abuse, debugging crashes	Device metadata, crash and error logs, account data	Legitimate interests (Art. 6(1)(f)) - keeping the service safe and reliable
Understanding how the App is used so we can improve it	Product analytics, device metadata, approximate IP geolocation	Legitimate interests (Art. 6(1)(f)) - improving the product. You can opt out at any time in Profile > Settings > Privacy.
Measuring which marketing channels led to your install, so we can spend our ad budget responsibly	Install + conversion events shared with AppsFlyer (and onward to TikTok / Meta for aggregated measurement); IDFA only with ATT consent	Consent (Art. 6(1)(a)) where IDFA is used (via Apple's ATT prompt). Legitimate interests (Art. 6(1)(f)) for aggregated SKAdNetwork attribution where no advertising identifier is processed.
Moderating user-visible profile content (display name, bio, avatar) shown on the leaderboard, and handling reports and blocks	Display name, bio, avatar, report metadata	Legitimate interests (Art. 6(1)(f)) - keeping the community usable and safe
Responding to your support questions	Support correspondence, account data	Legitimate interests (Art. 6(1)(f)) - helping you
Complying with legal obligations (e.g. tax, accounting, responding to lawful requests)	Subscription state, account data, support correspondence	Legal obligation (Art. 6(1)(c))

Providing your account data and the data you create in the App is necessary to use Greatr. If you do not provide it, we cannot offer the App to you. Analytics is not necessary - you can turn it off and still use Greatr in full.

7. Account deletion

Account deletion is a tap away inside the App. It is permanent.

You can delete your Greatr account directly in the App: open Profile, tap Account, then Delete account and confirm.

You can also request account deletion on the web at https://getgreatr.app/delete-account/ or by emailing privacy@getgreatr.app from the address associated with your account.

When you delete your account:

Your account, habits, rituals, journal entries, reading and meditation records are deleted from our active systems within 30 days.
Product analytics events tied to you are deleted or fully anonymised within the same period or sooner.
Backups are overwritten within 30 days as part of our normal rotation.
We retain accounting and limited subscription records where required by law.

If you have an active subscription at the time of deletion, your subscription remains active until the end of the current billing period unless you cancel it separately via your App Store or Play Store account. Deleting your Greatr account does not cancel your subscription. To stop being billed, cancel the subscription in the App Store or Google Play, as explained in our Terms of Service.

8. How long we keep your data

We keep your data while your account exists, then delete it within 30 days. Some records we have to keep longer by law.

Data	Retention
Account data and all data you create in the App (habits, rituals, journaling, reading, meditation)	For the lifetime of your account, then deleted within 30 days of account deletion.
Product analytics events	90 days from collection, then deleted or aggregated beyond identification.
Crash and error logs	90 days from collection.
Subscription and transaction records	Up to 7 years, where required for tax and accounting purposes under Dutch law.
Support correspondence	Up to 2 years from the last contact, unless a longer period is required to defend a legal claim.

If you delete your account, we will delete or irreversibly anonymise the data above within 30 days, except where we are legally required to keep specific records (such as accounting records) for longer.

9. Journal entries and other things you write

Your journal text is private to you. We treat it with extra care.

Journal entries can be personal. We treat them as sensitive in practice, even where they are not “special category” data under Article 9 GDPR. Specifically:

Journal entries are stored under your user account in our database, protected by row-level security so that other users cannot read them.
We do not include the text of journal entries in product analytics or crash reports.
We do not use journal content to train any machine-learning model.
We do not sell, rent, or share journal content with any advertising partner.
Greatr employees do not read journal content. Limited engineering access exists only to repair specific issues you report to us, and only with your prior written request to privacy@getgreatr.app.

If a future feature involves processing journal content in a new way (for example AI-assisted reflections), we will ask for your explicit consent before turning it on for you.

10. How we protect your data

Encryption in transit and at rest, row-level security, least-privilege access. No system is perfect, but we take this seriously.

We use industry-standard technical and organisational measures to protect your personal data:

All traffic between your device and our servers is encrypted using TLS.
Data at rest in our database is encrypted by our infrastructure provider.
Row-level security policies enforced at the database level ensure that one user cannot read another user’s rows. Every user-data query is filtered by user ID and rejected if the requesting session does not own the row.
Access to production data is restricted to a small number of authorised engineers, audited, and protected by multi-factor authentication.
Authentication uses secure password hashing or OAuth, never plaintext credentials.
We keep our dependencies up to date and monitor for vulnerabilities.

No system is completely secure. If we discover a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of becoming aware of it, and we will notify affected users without undue delay where the law requires.

11. Leaderboard, public data, and content moderation

The leaderboard shows a display name, an avatar, and a count. Nothing else. We moderate that surface, and you can report or block other users.

Other Greatr users may see your display name, a streak or completion count, and any avatar you have chosen on the leaderboard. They cannot see your email, journal entries, individual habit logs, or any other personal data.

To keep this surface usable, we operate a lightweight content-moderation pipeline:

Write-time filtering. When you save a display name or a bio, we apply automated content filtering. Submissions containing slurs, obscenity, or impersonation patterns are rejected before they are stored. This check runs both on your device and again on our server.
Report. Every other user's profile card includes a Report button with reasons (inappropriate name / bio / avatar, harassment, spam, other). Reports are reviewed by our team and may result in content removal or account suspension.
Block. You can block any other user from their profile card. Blocked users disappear from your leaderboards immediately and will not see your activity. You can manage your blocked users in Settings > Account > Blocked users and unblock them at any time.
Opt out (right to object). Leaderboard processing is based on our legitimate interests (Art. 6(1)(f) GDPR). You can object at any time by emailing privacy@getgreatr.app with the subject "Leaderboard opt-out". On receipt, we will exclude your account from all leaderboards within 30 days. Deleting your account from Profile > Account > Delete account removes you from leaderboards immediately.
Records. We retain moderation records (reports submitted, blocks created) for as long as the reporting account exists, and as needed to act on repeat offenders. Block records are visible only to the blocker.

12. Your rights

You can access, correct, delete, and export your data. You can also object to certain uses and complain to a regulator.

Under the GDPR and equivalent laws, you have the following rights with respect to your personal data:

Access - ask for a copy of the personal data we hold about you.
Rectification - ask us to correct inaccurate or incomplete data.
Erasure (“right to be forgotten”) - ask us to delete your data; you can do this yourself in the App via Profile > Account > Delete account.
Restriction - ask us to limit how we use your data while a question is resolved.
Portability - ask for the data you provided to us in a structured, machine-readable format and have it sent to you or, where technically feasible, to another controller.
Objection - object to processing based on our legitimate interests, including product analytics.
Withdrawal of consent - where processing is based on your consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
Lodge a complaint - with a data protection supervisory authority (see Section 18).

To exercise any of these rights, email privacy@getgreatr.app. We will respond within one month. We may ask you to confirm your identity before acting. There is no charge unless your request is manifestly unfounded or excessive.

You can also turn off product analytics at any time inside the App: Profile > Settings > Privacy > Share usage data.

13. International data transfers

Most of your data stays in the EU when possible. Some processors are in the US. We rely on Standard Contractual Clauses and equivalent safeguards.

Some of your personal data is processed outside the European Economic Area:

Supabase: Our primary database is hosted in the United States (Ohio), with an EU read replica in Paris. We share account data, the data you create in the App, and subscription state with Supabase under Standard Contractual Clauses (SCCs).
Superwall: Operates in the United States. We share anonymous user ID and subscription event data with Superwall, governed by Standard Contractual Clauses (SCCs).
Expo Push Notifications: Operates in the United States. We share push tokens, governed by Standard Contractual Clauses (SCCs).
AppsFlyer: Operates in the United States. We share install + conversion events and (with your ATT consent on iOS) IDFA, governed by Standard Contractual Clauses (SCCs).
TikTok for Business and Meta: Receive aggregated, event-level conversion postbacks from AppsFlyer for their own ad-measurement purposes. Transfers to TikTok and Meta are governed by Standard Contractual Clauses (SCCs) and the partner's own data transfer frameworks.
Apple and Google: Operate worldwide. Limited data is shared in connection with sign-in, push notifications, and payment processing under their own data transfer frameworks.

Where personal data is transferred outside the EEA to a country that has not been recognised by the European Commission as providing an adequate level of protection, we rely on:

the European Commission’s Standard Contractual Clauses (Decision 2021/914); and
where relevant, the EU-U.S. Data Privacy Framework when the recipient is certified under it.

You can ask us for a copy of the safeguards in place by writing to privacy@getgreatr.app.

14. Children

Greatr is not for children. We do not knowingly collect data from anyone under 16 in the EU, or under 13 elsewhere.

Greatr is not directed at children, and we do not knowingly collect personal data from children under 16 in the EU/EEA or under 13 elsewhere. If you believe a child has provided us with personal data, contact us at privacy@getgreatr.app and we will delete it.

15. Identifiers, App Tracking Transparency, and advertising

Product analytics uses a random in-app ID. Marketing attribution uses Apple's privacy-preserving SKAdNetwork by default, and IDFA only if you grant App Tracking Transparency permission. We never show third-party ads inside Greatr.

The Greatr app is not a website, so we do not use browser cookies inside the app. We do use:

a randomly generated internal user identifier to tie product events to your account;
device-level information from the operating system (OS version, app version, device model, locale, time zone); and
on iOS, with your consent, the Apple advertising identifier (IDFA) for marketing attribution only.

App Tracking Transparency (iOS). On iOS, the first time the App needs to attribute an install we present Apple's standard App Tracking Transparency (ATT) prompt:

If you grant permission, AppsFlyer reads your IDFA and uses it (together with the conversion signals listed in Section 3.8) so we and our ad partners (currently TikTok and Meta) can measure which campaign you came from.
If you decline, IDFA is never accessed. Attribution is provided only through Apple's privacy-preserving SKAdNetwork, which delivers aggregated, delayed postbacks with no personal identifier.

You can change your decision at any time in iOS Settings > Privacy & Security > Tracking and in the per-app settings for Greatr.

Google Advertising ID (GAID). We do not access GAID on Android.

No in-app advertising. Greatr does not show third-party advertising inside the App. The only marketing data flow that leaves Greatr is the attribution stream described in Section 3.8.

Our website. getgreatr.app sets no cookies and runs no analytics or advertising scripts. If you close the app banner on a blog post, your browser stores the time you closed it in its local storage, so the banner stays hidden for 30 days; it never leaves your device. The web servers for getgreatr.app and for cms.getgreatr.app, where the images in our articles are served from, keep standard access logs (such as your IP address, the page or file requested and the time) to keep the website secure and working, based on our legitimate interest in running a secure website.

16. Automated decision-making

We do not make decisions about you using only an algorithm.

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

17. Changes to this policy

If we make a material change, we will tell you in the App, by email, or on our website.

We may update this Privacy Policy from time to time. If a change is material we will tell you in the App, by email, or on our website at least 14 days before it takes effect, except where a shorter period is required by law or by an urgent security concern. The “Last updated” date at the top will always reflect the latest version.

18. Contact and complaints

Email is the fastest way to reach us. If you are not satisfied, you can complain to your local data protection authority.

Privacy and data requests: privacy@getgreatr.app
Legal notices: legal@getgreatr.app
Postal mail: Yaoki Studios, Engestraat 13 A, 7411 LC Deventer, the Netherlands

If you are in the EEA, the UK, or Switzerland, you can lodge a complaint with a supervisory authority. Our lead supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), https://autoriteitpersoonsgegevens.nl. You can also complain to the supervisory authority in the country where you live or work, or where you believe the alleged infringement took place.

Under the EU Digital Services Act, our single point of contact for users and authorities for matters covered by that Regulation is legal@getgreatr.app, available in English.