Privacy Policy

In short

• Your records stay on your phone. The days you log, notes, locations and settings are stored only on your device. Grezi has no servers for your records and no account.
• No ads, no analytics, no tracking. We don’t sell or share your data, and we don’t track you across apps or websites.
• Three exceptions, explained below: Apple or Google looks up place names for locations (only if you enable location), anonymous crash reports and diagnostics go to Sentry, and subscriptions are managed through Apple or Google and RevenueCat.

This policy applies to the Grezi app for iPhone and Android and the website grezi.app. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data stored on your device

The app stores the following only on your phone:

• the days you log (date, type of day, optional note) and when each entry was created and last changed;
• your profile and settings: country of residence, working days per year, canton of work, reminder and auto-log settings, language and theme;
• optional location snapshots (see below).

We never receive this data. It is deleted when you delete the app, unless you made a backup. Your phone’s own backup (for example iCloud or Google backup) may include it, under Apple’s or Google’s terms.

Location (optional)

Location is off by default and only used if you enable it. When enabled, Grezi reads your position once, when you log the current day, to:

• suggest whether you worked in Switzerland, at home or abroad — this check uses a map of the Swiss border built into the app and runs entirely on your phone;
• save the coordinates, accuracy and time with that day as your own evidence.

To show a place name (town, region, country), the coordinates are sent once to the phone’s location service — Apple’s on iPhone, Google’s on Android (reverse geocoding). Apple or Google processes this request under its own privacy policy; we don’t receive it. The place name is then stored on your phone with the day.

You can remove a location from any day, turn location off in Settings, or revoke the permission in your phone’s settings at any time.

Exports and backups

PDF, CSV and backup files are created only when you ask for them. You decide where they go (for example AirDrop, email, iCloud Drive, Google Drive or a folder on your phone). Anyone you share them with receives the data they contain.

Crash reports and diagnostics (Sentry)

If the app crashes or something goes wrong (for example an export or a purchase fails), it sends a technical report to Sentry (Functional Software, Inc.), stored in Sentry’s EU data region (Germany). The app also sends short diagnostic logs of key steps, such as “export finished” or “purchase cancelled”, so we can find problems. Reports and logs contain technical information such as the error, app version, operating system version and device model. They do not contain your logged days, notes or locations, and we configured Sentry not to collect personal data. Reports and logs are kept for up to 90 days. Legal basis: our legitimate interest in a stable app.

Subscriptions (Apple, Google and RevenueCat)

Grezi Plus is sold through the App Store (iPhone) and Google Play (Android). Apple or Google handles the payment; we never see your payment details, Apple ID or Google account.

To manage subscriptions, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives a random, anonymous app user ID, your purchases and subscription status, the store country and technical information such as app and operating system version. It does not receive your logged days, notes or locations. Data may be processed in the USA; RevenueCat applies appropriate safeguards such as standard contractual clauses. Legal basis: performance of the contract (your subscription).

Notifications

Reminders and limit alerts are scheduled on your phone with the phone’s notifications. No notification data is sent to us.

Built-in data

Swiss border data (© swisstopo) and public holiday data (OpenHolidays API, ODbL 1.0) are included in the app. Using them makes no network requests.

Website

grezi.app is a static website hosted by Cloudflare. It uses no cookies, no analytics and no tracking. Like any web server, Cloudflare processes technical data such as your IP address to deliver the pages and protect against abuse. If a page runs into an error in your browser, a technical error report (the error, page address and browser version) is sent to Sentry’s EU region, without personal data.

Your rights

You can request information about your data, its correction or deletion, object to processing, and — where the GDPR applies — request data portability. Because your records are stored only on your device, you can view, export and delete them yourself in the app at any time. For data held by Sentry or RevenueCat, contact us at the address above.

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with your local data protection authority.

Children

Grezi is intended for working adults and is not directed at children under 16.

Changes

We will update this policy when the app changes. The date at the top shows the latest version.