Privacy Policy

Who is responsible

Calmfill is run by Chernenko Danylo Vitaliiovych, a sole proprietor (FOP, fizychna osoba-pidpryiemets) registered in Ukraine, address: Dnipro, Ukraine. Chernenko Danylo Vitaliiovych is the data controller for the personal data described here.

Contact for anything about privacy: privacy@calmfill.com. General support: support@calmfill.com.

What stays on your iPhone

Calmfill has no account and no server that stores your journal. Everything you put into the app is kept in the app’s storage on your iPhone:

• CSV files you import and the rows, trades, accounts and balance snapshots derived from them;
• your plan and rules, session reviews, notes and the rule you pick for the next session;
• voice notes you record (audio files and their records) — recorded with your permission for the microphone and never uploaded or transcribed by us;
• settings such as the session time zone, appearance, Face ID lock and your analytics choice.

The database and voice notes are excluded from the iPhone’s iCloud and computer backups, so they don’t leave the device that way either. Face ID is handled by iOS; the app only learns whether unlocking succeeded.

We never receive this data, so we cannot read, recover, sell or hand it over.

Backups and exports you create

You can create an encrypted backup (protected with a password you choose) or export trades as CSV or all data as JSON. These files are created on your iPhone and go only where you send them through the iOS share sheet — for example Files, iCloud Drive, AirDrop or email. That provider then holds the file under its own terms. We never see the file or the password and cannot recover either. The discipline card you can share is an image without P&L or account amounts.

What leaves your iPhone

At most these two things, and neither contains your trades, file contents, notes or voice recordings:

1. Anonymous usage events — PostHog, only if you turn them on

Usage analytics are off until you turn them on in Settings → Share anonymous usage. While they are off, the app sends nothing to PostHog. If you turn them on, the app sends five kinds of event to PostHog, our product analytics provider, to see whether onboarding and import work: onboarding finished (and whether a custom plan was used), import succeeded (the file format), import failed (an error code), paywall shown (where from) and free trial started (the product ID). Each event carries a random ID created on your iPhone by the PostHog SDK and technical details the SDK adds, such as app version, iOS version, device model, language and time zone. Like any internet request it also reaches PostHog with your IP address.

No name, email, account number, amounts, prices, symbols or file contents are sent, the app never identifies you to PostHog, and PostHog does not build a person profile. There is no session recording and no tracking of taps or screens.

Legal basis: your consent (GDPR Art. 6(1)(a)), given with that switch. Turn it off again at any time; the app then stops sending events.

2. Purchases — Apple and RevenueCat

Subscriptions are sold by Apple through In-App Purchase. Apple handles payment, billing and refunds; we never see your card or Apple ID details.

To know whether your Pro subscription is active, the app uses RevenueCat. RevenueCat receives an anonymous app user ID it creates for this install, your App Store transaction and receipt data (product, purchase and renewal dates, trial status, store country and currency) and technical data such as app and iOS version and IP address. Legal basis: providing the subscription you bought (GDPR Art. 6(1)(b)).

This website

• Hosting and security — Cloudflare. Cloudflare serves calmfill.com and processes technical request data such as IP address, browser and requested page to deliver the site, block abuse and rate-limit forms. Short-lived request logs are kept for up to 7 days. Legal basis: legitimate interest in running a secure site (Art. 6(1)(f)).
• Page analytics — PostHog, cookieless. The site counts page views without cookies or local storage, without page addresses or referrers, without recordings and without person profiles; the identifier lives in memory and disappears when you close the tab. Legal basis: legitimate interest (Art. 6(1)(f)).
• No advertising, no social media pixels, no fonts or scripts loaded from third parties.

Waitlist

If you join the waitlist, we use your email address to send one confirmation email. Until you click the link in it and press Confirm, nothing is stored — the link itself carries your address, signed so it can’t be forged, and expires after 7 days. After you confirm, your email address is saved as a contact with Resend, our email provider, so we can tell you when Calmfill is on the App Store.

Legal basis: your consent (Art. 6(1)(a)). Withdraw it any time with the unsubscribe link in our email or by writing to privacy@calmfill.com; we then delete the contact.

Support emails

When you use the support form or email support@calmfill.com or privacy@calmfill.com, we receive your email address, topic and message. Form messages are delivered to us by Resend; emails to our addresses are forwarded by Cloudflare Email Routing to our mailbox hosted by Google (Gmail). We use them only to answer you. Legal basis: answering your request (Art. 6(1)(b) and (f)). Please don’t send account numbers, passwords or CSV files.

Providers and international transfers

We use these providers (processors) for the purposes above:

• PostHog Inc. (USA) — product analytics;
• RevenueCat Inc. (USA) — subscription status;
• Apple Inc. — App Store sales and payments (Apple acts as an independent controller);
• Cloudflare Inc. (global network) — website hosting, security, email forwarding;
• Resend (USA) — waitlist and support email;
• Google LLC — our support mailbox.

Some of them process data outside your country, including in the USA. Where the GDPR applies, transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

What we never do

• We do not sell your data or share it for advertising.
• We do not train AI models on your data.
• We do not track you across other apps or websites, and the app does not use Apple’s advertising identifier.

How long data is kept

• On your iPhone: until you use Settings → Delete all data or delete the app.
• Backups and exports: wherever you saved them, until you delete them.
• Usage events (PostHog), if you turned them on: up to 12 months, then deleted.
• Purchase records (RevenueCat): while your subscription is active and afterwards for as long as tax and accounting law requires.
• Waitlist contact (Resend): until you unsubscribe or ask us to delete it. Unconfirmed sign-ups are never stored; Resend keeps a log of sent emails for a short period.
• Support emails: up to 24 months after the conversation ends, unless we need them longer for a legal claim.
• Website request logs (Cloudflare): up to 7 days.

Your rights

Under the GDPR (and similar laws such as the UK GDPR and US state privacy laws) you can ask for access to your data, a copy in a portable format, correction, deletion, restriction, or object to processing, and withdraw consent at any time. You won’t be treated differently for using these rights.

• Access and export: the app’s data is already with you — use Settings → Export all data (JSON) or Export trades (CSV).
• Deletion: Settings → Delete all data, or delete the app. See the delete data page for what else to do.
• Analytics: off unless you turned on Settings → Share anonymous usage; turn it off to withdraw consent. The random analytics ID isn’t shown in the app and isn’t linked to you, so we generally cannot find past events for a specific person.
• Data we hold (waitlist, support emails, purchase records): write to privacy@calmfill.com. For purchase records, include the order ID from your Apple receipt. We reply within one month.

You can also complain to a data protection authority, for example the one where you live or work. In Ukraine that is the Ukrainian Parliament Commissioner for Human Rights.

Age

Calmfill is a tool for adults who trade futures and is not meant for anyone under 18. We don’t knowingly collect data from children; if you think a child sent us data, write to us and we’ll delete it.

Changes

If the app or the site starts handling data differently, we update this page and the date below before the change goes live.