Legal
Privacy policy
This notice explains how Prodify processes personal data. It is not legal advice.
1. Controller
Eric Huber (Egg bei Zürich, Switzerland) is the controller for personal data processed in connection with Prodify. Contact: prodify@gmx.net. See also the Imprint.
2. Data we process
We process account data (email, username, optional profile picture), authentication data when you use Sign in with Apple or Google, technical data needed to operate and secure the service, studio-session content you create (times, types, optional notes, mood and tags), streak and friendship data, comments and social activity, reports and blocks, subscription and entitlement status, push tokens when notifications are enabled, and crash/performance diagnostics.
3. Purposes and legal bases
We use this data to provide the service, authenticate you, maintain account security, prevent abuse, moderate community content, process subscriptions, deliver notifications you have enabled, and keep the app reliable. Processing is necessary to perform the contract (GDPR Art. 6(1)(b)), to protect security and prevent abuse (legitimate interests, Art. 6(1)(f)), and — where you consented — for push messages (Art. 6(1)(a)).
4. Sign-in providers
If you choose Sign in with Apple or Google, the provider verifies your identity and shares an identifier and, depending on your settings, your email address with Prodify so we can create or sign into your account. Apple and Google process data under their own privacy policies.
5. Personalised reminders
Prodify uses your activity patterns to personalize reminders and help you maintain your production routine. For this we only use first-party data from your use of Prodify: when and how long you produce, your streaks, challenges and friend activity on Prodify, and whether a reminder was opened or followed by a session. We do not use your location, WiFi, contacts or data from other apps, and we do not fingerprint your device. You can turn smart notifications or single categories off at any time in the notification settings.
6. Safety and moderation
When you report or block someone, we store the report (reason, optional note, the reported user or comment, and your account) and the block. Moderators use reports and blocks only to review reports, remove violating content and suspend accounts. The reported user is never told who reported them.
7. Service providers
We use specialized processors only as needed to operate Prodify: Render (hosting and PostgreSQL database, Frankfurt, EU), Cloudflare R2 (profile picture storage), RevenueCat (subscription status and App Store purchase receipt validation), Apple and Google (sign-in and in-app purchases), Sentry (crash and performance diagnostics, with sensitive fields scrubbed), and Expo Push / platform push services (delivery of notifications you enable). These providers process data only on our instructions and only for the stated purposes, and they are contractually bound to protect personal data with the same or an equal level of protection as described in this policy. Some of them process data outside Switzerland and the EU, in particular in the USA. For such transfers we rely on adequacy decisions, such as the Swiss-U.S. and EU-U.S. Data Privacy Framework, or on the Standard Contractual Clauses. This legal website is hosted by Vercel Inc. on behalf of Klarwerk.
8. Retention
We store data while your account exists. You can permanently delete your account in the app (Profile → Settings → Delete account). After deletion, we remove associated personal data unless a legal retention obligation applies.
9. Your rights
You have the right to access, rectification, erasure, restriction, portability, and objection where processing relies on legitimate interests. You may withdraw consent at any time with future effect. You may lodge a complaint with a supervisory authority.
10. Contact
To exercise your rights or ask questions, email prodify@gmx.net.