Privacy Policy — Groundwork
1. The short version
In short: what you enter in Groundwork stays on your device. We cannot see it. We only see e-mails you choose to send us.
- Groundwork has no accounts, no analytics, no advertising and no tracking.
- Everything you enter stays on your device. The app does not send it to us or to anyone else. We cannot see it, and we cannot access, recover or delete it for you.
- The app connects to the internet only for Apple's in-app purchase system, and when you tap a phone number, link or e-mail address.
- The only personal data we handle is what you send us yourself, for example a support e-mail.
2. Who is responsible
In short: an individual trading as Steadwright, for support e-mails only.
- Publisher: an individual trading as "Steadwright" (not a company)
- E-mail: support@steadwright.net
- Support page: https://steadwright.net/legal/support
For e-mails you send us, we are the "controller" (the person who decides how that data is used). For the data inside the app, we do not receive it or have access to it; you keep control of it on your device.
3. What the app keeps on your device
In short: your entries, in the app's private storage on your phone. Not in iCloud, not on a server.
Groundwork stores the following only on your device, in the app's private storage area:
- your goal (stopping or cutting down) and its start date;
- check-ins and urge logs, including any notes you type;
- your if-then plans and their reminder settings;
- "Imagine your future" entries you write;
- the patterns the app shows you, which it works out on your device from the above;
- milestone medals you have earned;
- your settings (for example App Lock on or off) and the date you accepted the terms.
This storage is excluded from iCloud and computer backups, so it stays on this device. Nothing in it is sent to us or to anyone else.
Safety questions. The answers to the short questions shown before a stop-now plan are used on that screen to decide what to show next. They are not saved.
Reminders. If you turn on a reminder for a plan, iOS schedules it on your device. The notification shows only "Groundwork" and "You have a reminder." It never shows a plan, a situation or anything about alcohol. We do not use push notifications.
Widget. The optional home-screen widget shows your day count. It reads it from a private storage area on your device that only Groundwork and its own widget can use (an Apple "App Group").
App Lock. If you turn on Face ID, Touch ID or passcode lock, iOS handles the check. The app only stores whether the lock is on. It never sees or stores biometric data.
4. Export and restore: files you control
In short: an export is an encrypted file that you create, keep and share yourself. We never get it.
Export your data creates an encrypted file on your device and shows you a one-time recovery key. You decide where the file goes (for example AirDrop, Files or your own cloud storage). Wherever you put it, that service's own terms and privacy policy apply. We never receive the file or the key, and we cannot recover a lost key. Keep the key separate from the file.
Restore from backup reads such a file, on your device, after you enter its key and confirm. It replaces what is currently in the app. The file is checked first: if the file or key is wrong, or the restore fails, your current data is left as it was. Nothing is sent anywhere.
5. When something leaves the app because you tapped it
In short: calls, websites, e-mails and shares happen only when you tap, and then the other service's rules apply.
- Phone numbers open your phone app. Links open your web browser. From then on, the call or website is between you and that service, under its own privacy policy. The app does not record which numbers or links you looked at or tapped.
- "Tell us about a resource" in Help opens your own Mail app with our address and a subject filled in. You decide what to write and whether to send it.
- Share sheet: anything you share goes where you choose, under that service's rules.
6. In-app purchase (Apple)
In short: Apple processes your purchase. We only learn whether the upgrade is unlocked on your device.
Purchases are handled by Apple through its in-app purchase system. Apple processes your Apple Account, payment and billing details as an independent controller under Apple's Privacy Policy (https://www.apple.com/legal/privacy/). The app receives only whether the upgrade is unlocked. We never see your name, payment details or billing address.
Apple also gives every developer sales reports and app statistics. If you agreed in iOS settings to share analytics with app developers, Apple may give us aggregated usage statistics and crash reports. Crash reports describe the technical fault (for example device model, iOS version and app version). We use them only to find and fix bugs, and we do not try to identify anyone from them.
7. E-mails you send us
In short: we use your e-mail only to answer you and fix problems, then delete it.
If you write to support@steadwright.net, including through "Tell us about a resource", we receive your e-mail address, your message and anything you attach.
- Why: to answer you, fix problems in the app, and correct help-line information you report.
- Legal basis (EU/UK-style): our legitimate interest in answering messages you chose to send, and taking the steps you ask for.
- Health information: please do not include health details we do not need. If you choose to include them, we use them only to answer you.
- Who else sees it: our e-mail is received through Cloudflare (Cloudflare Email Routing, which forwards messages) and stored in a Google (Gmail) mailbox, so Cloudflare, Inc. and Google LLC process it on our behalf. We do not share, sell or use your e-mail for marketing.
- How long: we delete support e-mails 12 months after the conversation ends, or sooner if you ask.
8. How long data is kept, and how to delete it
In short: you delete the app's data yourself; we delete e-mails on request.
- Data in the app: kept on your device until you delete it. Use Settings → Delete all data, or delete the app. Deleting the app removes its data from the device.
- Export files: files you created stay wherever you saved them. Delete them there.
- E-mails to us: see section 7. Ask us at any time to delete them.
9. Your rights
In short: you can ask us about any e-mails we hold. For in-app data, you have full control yourself.
Wherever you live, we offer these rights for the data we hold (your e-mails): to know what we hold, to get a copy, to correct it, to delete it, to restrict or object to its use, and to withdraw any consent. E-mail support@steadwright.net. We aim to reply within 30 days.
For data inside the app, you exercise these rights yourself: you can see, change, export and delete everything on your device. We cannot do it for you, because we do not have it.
You can also complain to a data-protection authority, for example in the country where you live or work. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.
10. Consumer health data (United States)
In short: we do not collect, share or sell consumer health data through the app.
Some US state laws (for example Washington's My Health My Data Act) protect "consumer health data". Here is how they relate to Groundwork:
- Categories collected through the app: none. Your entries stay on your device.
- Sources and purposes: the only health-related data we may receive is what you write in an e-mail to us. We use it only to answer you.
- Sharing and selling: we do not share or sell consumer health data. Our e-mail provider stores our mailbox for us (section 7).
- Your rights: you can ask us to confirm whether we hold any of your consumer health data, to see it, and to delete it, by e-mailing support@steadwright.net. If we refuse a request, you can appeal by replying to our answer.
- Location: the app does not use your location and we do not use geofencing.
11. Age
In short: 18+ only.
Groundwork is for adults aged 18 or over. It is not directed at children, and we do not knowingly receive data from anyone under 18.
12. International users
In short: we are based in Ukraine; the app's data never leaves your device.
We are based in Ukraine. The app's data never leaves your device, so it is not transferred anywhere. E-mails you send us are handled in Ukraine and by our e-mail provider (section 7).
We have not appointed a representative in the EU or the UK. Our only processing of personal data is occasional support e-mail, which we consider occasional and unlikely to result in a risk to people's rights.
13. Security
In short: your data stays in the app's private storage on your device, protected by iOS and optionally by App Lock.
The app keeps your data in its private storage area, which iOS protects. You can add App Lock. Exports are encrypted with a key only you hold. No method of storage is perfectly secure; keep your device passcode private. To report a security problem, see https://steadwright.net/legal/support
14. Changes to this policy
In short: we will update the date, and tell you in the app about important changes.
If Groundwork starts handling data differently, we will update this policy before that version is released, change the "Last updated" date, mention it in the release notes, and, for a material change, ask you in the app.
15. Contact
support@steadwright.net · Terms: https://steadwright.net/legal/groundwork/terms