App privacy policy
Effective 14 October 2026. This policy covers the native optimistic.day app; the website has its own additional privacy policy.
Controller
Stefan Grunert, Norway. Privacy and support contact: [email protected].
Data on your device
Language preference, downloaded text, images, audio and the last listening position are saved in the app’s private storage. Search and mood filtering run on your device. The app does not upload search terms or playback-position data. iOS may include local files in the device backups you manage; the system may clear caches. Deleting the app removes its local data; manage backups in your Apple settings.
Delivery and technical logs
The app downloads from optimistic.day over HTTPS. Hetzner provides the origin server; Cloudflare provides worldwide delivery and attack protection. This processes IP address, time, requested resource, response status and technical connection data such as app/OS information in the user agent. Cloudflare can infer an approximate country from the IP address and retain security events. The app does not request location access. Logs serve delivery, diagnostics, availability and protection, not advertising tracking. Resource requests are not an uploaded listening history, but can show which files were requested.
Retention
Server logs rotate daily, keeping 14 daily archives alongside the current log, normally about 15 days. Cloudflare’s current documentation provides security events for up to 31 days in its dashboard. Further provider processing and retention depend on its published purposes, security needs and legal obligations. Local content stays until cache eviction, app removal or deletion of your backup.
Legal basis and recipients
Necessary technical processing provides and secures the service on the basis of legitimate interests (GDPR Article 6(1)(f)). If you contact support voluntarily, we process the contact details and information you send to resolve your request on the basis of our legitimate interest in answering it (GDPR Article 6(1)(f)), deleting it once resolved when no further retention is necessary. Hosting/CDN providers receive data needed for delivery and protection. Cloudflare’s international infrastructure may process data outside the EEA; its privacy policy explains transfer safeguards.
No advertising or live AI
There is no app account, advertising, analytics or tracking SDK. The app does not access microphone, contacts or location. Recordings and content are produced before publication; reading and listening do not send user text or recordings to AI or speech services. Source, help and privacy links open a browser, where the relevant website’s rules apply.
Your rights
Where applicable you have rights of access, correction, erasure, restriction, portability and objection to processing based on legitimate interests. Contact [email protected]. You may complain to a supervisory authority, including Norway’s Datatilsynet. There is no app account requiring an account-deletion request. Changes in processing will be published here with a new effective date.