Privacy Notice

As of 9 October 2026 (version 1, draft)

In short

• Sgully stores only what it needs. No ads, no tracking, no analytics tools from other companies. We analyse how Sgully is used ourselves; you can object.
• Which apps you lock stays in Apple's Screen Time on your iPhone. Sgully never sees app names.
• Your account and a backup of your game state are stored on our server at Hetzner in Germany (Nuremberg data centre).

Controller

FLB.CO.AT - Mag. Florian Bieche, Diefenbachgasse 52, 1150 Wien, Austria. Email: support@sgully.app

What we store and why

• Account: how you sign in (Apple, Google or email), an identifier from that provider and your email address. With Apple we receive the address you share; if you choose "Hide My Email", it is a relay address from Apple. We do not receive your name from Apple or Google. Purpose: signing in and important notices about your account (for example changed terms, outages, deletion).
• Display name: chosen by you. Your crew can see it.
• Game backup: Sgully's needs, charges and timers. Purpose: Sgully survives a change of device.
• Crew: memberships and role, invitations (only as a check value, never in plain text), crew timers with join time and reported minutes, the crew gull's mood.
• Timers: for every finished timer its start, planned and completed minutes, lock level, whether you held out and whether it belonged to a crew timer. Never which apps were locked. Purpose: analysis (see below).
• News by email: whether and since when you consented; if you withdraw it, we delete that time. Purpose: newsletter and proof of consent.
• Subscription: tier, expiry date and Apple's transaction number. Apple notifies us directly of purchase, renewal, expiry and refund. Purchases go through Apple; we never see payment details.
• Consent: version and time of your consent to these texts, as proof.
• Email sign-in codes: only as a check value, valid for 10 minutes.
• Device sign-in keys: only as a check value, at most 90 days; expired ones are deleted daily.
• Technical logs: the web server logs requests with IP address, time, path and browser identifier and deletes them after 14 days. Requests to confirmation, leave, invitation, crew timer and unsubscribe links are not logged.

Legal bases: performance of the contract for using Sgully (Art. 6(1)(b) GDPR), which includes notices about your account; for News by email your consent (Art. 6(1)(a) GDPR); for analysis and logs our legitimate interest in improving Sgully and running it securely (Art. 6(1)(f) GDPR); for consent to these texts the duty to demonstrate it (Art. 7(1) GDPR).

Do you have to provide data?

You are not obliged to by law or contract. Sgully does need an account, though: without signing in with Apple, Google or email you cannot use the app. You choose your display name freely; it does not have to be your real name.

Analysis

We analyse how Sgully is used, including per account: when and how long timers run, which level, how often you held out, crews, invitations, subscription tier, your total offline minutes according to the backup and when you were last active (time of the last backup or the last timer). We do this ourselves on our server, without tools from other companies and without passing anything on. Purpose: improving Sgully, for example seeing whether crews help people stay offline. We also store daily figures as totals only, not linked to any person.

Objection: you can object to the analysis at any time under Profile > Email and usage (turn off "Allow usage analysis") or by email. We then delete your stored timers, store no new ones and leave your account out of the analysis. We store when you objected; if you withdraw the objection, we delete that time.

News by email

Only with your consent (Profile > Email and usage > "News by email"). We store when you consented. You can withdraw your consent at any time: with the switch or the unsubscribe link in every email. Notices about your account reach you without consent too.

Website sgully.app

The web server logs requests to sgully.app with IP address, time, path and browser identifier and deletes them after 14 days. Requests to confirmation, leave, invitation, crew timer and unsubscribe links are not logged. The website sets no cookies, has no tracking and uses no third-party services. Legal basis: our legitimate interest in running the website securely (Art. 6(1)(f) GDPR).

Waitlist

On sgully.app you can join the waitlist, for the iPhone test (TestFlight) or the Android version.

• What we store: your email address, the platform (iPhone or Android), the language and the times of sign-up and confirmation. We store the key for the links in the email only as a check value.
• Purpose: to let you know when the test or the Android version starts.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You confirm it with the link in an email to your address (double opt-in).
• How long: unconfirmed entries are deleted after 7 days. Confirmed ones are kept until you leave (link in every email) or until we have informed you and you then sign up; after 12 months at the latest.
• Withdrawal: you can withdraw at any time, with the leave link in every email or by writing to us. We then delete your entry immediately.

What stays on your iPhone

• Screen Time: which apps you lock and the overview of your most used apps are processed by Apple's Screen Time directly on your iPhone. Screen Time data never leaves your iPhone, not even to us.
• Camera and photos: Sgully reads the QR code of an invitation or a crew timer on your iPhone, with the camera or from a photo you choose. Camera images and photos do not leave the device; only the recognised Sgully link or code is sent to our server.
• Reminders and Dynamic Island: your iPhone schedules reminders itself; the timer in the Dynamic Island is also created only there.

We do not store location data, contacts, photos or advertising identifiers.

Recipients

• Hetzner Online GmbH (Germany) runs our server (data processor), location: Germany (Nuremberg data centre).
• Hetzner Online GmbH (Germany) also sends sign-in codes, account notices, news and waitlist emails and receives your email address and the content of the email for that (data processor).
• Apple for Sign in with Apple and subscriptions through the App Store, Google for Sign in with Google. Their privacy policies apply as well.

We do not share data for advertising and we do not sell data. Anyone who processes data for us or receives it from us must protect it in a way equivalent to this privacy notice.

Transfers to the USA

If you sign in with Apple or Google or subscribe in the App Store, Apple or Google also process data in the USA. Apple and Google are certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR).

No automated decision-making

We make no decisions based solely on automated processing (Art. 22 GDPR). The per-account analysis only serves to improve Sgully; nothing follows from it for you.

How long

As long as your account exists, with two exceptions: individual timers (crew timers too) are deleted after 12 months; daily figures without reference to persons remain. If you delete your account (Profile > Delete account), we immediately delete your account, email address, backup, timers, memberships, subscription details, consents and agreement. Your crew stays for the others; your name disappears from it. Server backups are deleted after 14 days.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (for analysis see above). You can get a copy of your data at any time under Profile > My data. Write to us for anything else. You can also complain to the Austrian Data Protection Authority: dsb.gv.at.

Age

You must be at least 14 years old to have your own account.

Changes

If these texts change in substance, the app asks for your consent again the next time you open it.