Privacy Policy

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Information Sharing and Disclosure
4. Data Security
5. Your Rights and Choices
6. International Data Transfers
7. Children's Privacy
8. Changes to This Policy
9. Contact Us

Introduction

Welcome to WristLog, your personal watch collection companion. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

1. Information We Collect

We collect information about you in various ways when you use our WristLog application. The information we collect includes:

1.1 Personal Information

Account Information:

• Email address (through Google OAuth)
• Full name (through Google OAuth)
• Google profile photo (through Google OAuth)
• Google account identifier

Profile Information:

• Display name
• Profile avatar/photo
• Timezone settings
• Notification preferences and timing

1.2 Device Information

Device Identifiers:

• Device type and model
• Operating system and version (iOS/Android)
• App version information
• Unique device identifiers for push notifications

Push Notification Data:

• Device notification tokens
• Notification preferences and delivery status

1.3 User Content and Collection Data

Collection Information:

• Item details, specifications, and descriptions you provide
• Purchase and service information
• Photos and images you upload
• Personal notes, preferences, and organizational data

Usage Logs:

• Activity records and usage patterns
• Personal notes and observations
• Optional photos you choose to capture

1.4 Usage and Analytics Data

App Usage Information:

• Features used and frequency of use
• Screen views and navigation patterns
• Search queries within the app
• Time spent in different sections
• User interaction patterns

Technical Data:

• App crash reports and error logs
• Performance metrics
• Device performance data
• Network connectivity information

1.5 Communication Data

Support Communications:

• Messages sent through our contact form
• Email communications with support
• Feedback and suggestions submitted
• Bug reports and feature requests

Automatically Collected Information:
We automatically collect certain information when you use our app, including device information, usage patterns, and technical data necessary for app functionality and improvement.

2. How We Use Your Information

We use the information we collect about you for various purposes, including:

2.1 Authentication and Account Management

User Authentication:

• Verify your identity through Google OAuth
• Create and maintain your user account
• Manage login sessions and security
• Provide secure access to your personal data

Account Services:

• Maintain your profile information
• Sync data across your devices
• Manage account preferences and settings
• Handle account deletion requests

2.2 Core Application Functionality

Collection Management:

• Store and organize your personal collection data
• Provide search and organization tools
• Maintain your preferences and settings

Activity Tracking:

• Record your usage patterns and history
• Enable historical data viewing and navigation
• Optimize app performance based on your usage

Content Management:

• Store and display your uploaded content
• Process and optimize media for app performance
• Manage secure access to your data

2.3 Analytics and Insights

Personal Analytics:

• Generate usage statistics and insights
• Provide personalized analytics based on your data
• Calculate metrics relevant to your collection

App Analytics:

• Monitor app performance and stability
• Improve user experience and functionality
• Identify and resolve technical issues

2.4 Notifications and Communications

Push Notifications:

• Send reminders and notifications based on your preferences
• Deliver app updates and important announcements
• Provide system notifications about app functionality

Notification Management:

• Store your notification preferences and settings
• Manage notification delivery and opt-out requests
• Track delivery status for service improvement

2.5 Customer Support and Communication

Support Services:

• Respond to your inquiries and support requests
• Troubleshoot technical issues
• Provide assistance with app functionality
• Handle feedback and feature requests

Service Communications:

• Send important updates about the service
• Notify you of privacy policy or terms changes
• Communicate about account-related matters
• Provide information about new features

2.6 Legal and Security Purposes

Legal Compliance:

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Protect our legal rights and interests
• Enforce our Terms of Service

Security and Fraud Prevention:

• Detect and prevent fraudulent activities
• Protect against security threats
• Monitor for suspicious account activity
• Maintain the integrity of our services

2.7 Service Improvement

Product Development:

• Analyze usage patterns to improve features
• Develop new functionality based on user needs
• Test and optimize app performance
• Enhance user interface and experience

2.8 AI Photo Fill (Optional)

If you turn it on, WristLog can fill in a watch's details (such as brand, model and specifications) from the photos you add, so you don't have to type them.

• Your choice: We ask before the first photo is analysed. You can turn it off at any time in Profile > Settings; this doesn't affect photos analysed before.
• What is sent: Only the watch photos you add while the feature is on, plus any brand, model or reference you've already entered, to help recognise the watch.
• Who processes it: Google's Gemini AI service, acting as our processor. Google does not use these photos to train its AI models and keeps them only briefly to detect abuse.
• Your control: Filled-in details are suggestions. You can review, change or undo them before saving.
• Legal basis: Your consent.

2.9 Shared Watch Specifications

To suggest accurate specifications to all collectors, we combine the technical specifications (for example case size or water resistance) that several users have recorded for the same watch reference into anonymous reference data.

• Only specifications of the watch model are used, and only when several collectors agree. Your name, account, photos, notes, purchase details and serial numbers are never included.
• The result is shown to other users as a suggestion and cannot be traced back to you.
• Legal basis: Our legitimate interest in providing accurate information to all users. You can object by contacting us.

We process your personal information based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities, such as AI Photo Fill
• Contract Performance: When processing is necessary to provide our services
• Legitimate Interests: When we have legitimate business interests that don't override your privacy rights, such as shared watch specifications
• Legal Compliance: When required by applicable laws and regulations

3. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this Privacy Policy. We may share your information in the following circumstances:

3.1 Third-Party Service Providers

We work with trusted third-party service providers to operate our application and provide services to you:

3.2 Legal Requirements and Protection

We may disclose your information when required by law or to protect our rights:

Legal Compliance:

• In response to subpoenas, court orders, or legal processes
• To comply with applicable laws and regulations
• When required by government authorities or law enforcement
• To meet national security or law enforcement requirements

Rights Protection:

• To protect and defend our rights and property
• To protect the personal safety of users or the public
• To protect against legal liability and fraud
• To enforce our Terms of Service and other agreements

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Your information may be transferred to the acquiring entity
• You will be notified via email and/or prominent notice in the app
• The acquiring entity will be bound by this Privacy Policy
• You will have the option to delete your account before any transfer

3.4 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you:

• Usage statistics and trends (without personal identifiers)
• App performance metrics
• General demographic information
• Industry research and analysis

3.5 With Your Consent

We may share your information for other purposes with your explicit consent:

• When you authorize specific data sharing
• For features that require third-party integration
• When you participate in surveys or research studies
• For promotional activities you choose to participate in

3.6 Data Processing Locations

Your information may be processed in:

• United States: Primary data processing location
• European Union: For EU users, with appropriate safeguards
• Other jurisdictions: Only with adequate data protection measures

3.7 No Sale of Personal Information

Important: We do not sell your personal information to third parties for monetary consideration. We do not share your personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide you with appropriate choices.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4.1 Technical Security Measures

Encryption:

• All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols
• Sensitive data is encrypted at rest in our databases
• Authentication tokens and session data are encrypted and securely managed

Access Controls:

• Multi-factor authentication for administrative access
• Role-based access controls limiting data access to authorized personnel only
• Regular access reviews and permission audits
• Secure API endpoints with authentication and authorization checks

Infrastructure Security:

• Secure cloud hosting with enterprise-grade security measures
• Regular security updates and patches
• Network security monitoring and intrusion detection
• Automated backup systems with encryption

4.2 Organizational Security Measures

Data Handling Policies:

• Strict data handling and processing procedures
• Employee training on data protection and privacy
• Confidentiality agreements for all personnel with data access
• Regular security awareness training and updates

Incident Response:

• Comprehensive incident response plan for security breaches
• Rapid response team for security incidents
• Notification procedures for affected users
• Coordination with relevant authorities when required

4.3 Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:

Data Anonymization:

When you delete your account, we anonymize your data by removing personal identifiers (name, email, etc.) while retaining anonymized usage patterns, statistics, and content that cannot be traced back to you. This allows us to improve our service while protecting your privacy.

Account Data:

• Retained while your account is active
• Personal identifiers removed and data anonymized within 30 days of account deletion request
• Anonymized data may be retained for analytics and service improvement
• Some data may be retained longer for legal compliance

Collection Data:

• Collection information retained while account is active
• Usage logs retained for historical analysis and statistics
• Photos and content may be retained in anonymized form after account closure

Technical Data:

• App usage analytics retained for service improvement and analysis
• Crash reports and error logs retained for troubleshooting and development
• Push notification tokens deleted when notifications are disabled

AI Photo Fill:

• We keep a record of your consent choice, and a usage log of AI Photo Fill requests (when, and whether they succeeded, never the photos), for up to 13 months, to apply usage limits, prevent abuse and manage costs
• Network identifiers in that log are stored in pseudonymised form and removed after 7 days
• When you delete your account, your consent record is deleted and the usage log is kept in anonymized form for analytics

Communication Data:

• Support communications retained for customer service and quality purposes
• Contact form submissions retained for response and follow-up
• Legal communications retained as required by law

4.4 Data Backup and Recovery

Backup Procedures:

• Regular automated backups of all user data
• Encrypted backup storage in multiple geographic locations
• Tested recovery procedures to ensure data integrity
• Point-in-time recovery capabilities for data restoration

Data Integrity:

• Regular data integrity checks and validation
• Checksums and verification for data accuracy
• Monitoring for data corruption or loss
• Redundant storage systems for high availability

4.5 Breach Notification

In the event of a data breach that may affect your personal information:

Immediate Response:

• We will investigate and contain the breach within 24 hours
• Assess the scope and impact of the incident
• Take immediate steps to prevent further unauthorized access
• Document the incident for regulatory reporting

User Notification:

• Notify affected users within 72 hours of discovery
• Provide clear information about what data was involved
• Explain steps we are taking to address the breach
• Offer guidance on protective measures you can take

Regulatory Compliance:

• Report breaches to relevant authorities as required by law
• Cooperate with regulatory investigations
• Implement additional safeguards to prevent future incidents
• Provide regular updates on remediation efforts

4.6 Third-Party Security

Service Provider Requirements:

• All third-party service providers must meet our security standards
• Regular security assessments of service providers
• Contractual obligations for data protection and security
• Monitoring of third-party security practices and compliance

4.7 Limitations

Security Disclaimer:
While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information, but we are committed to protecting your data using industry best practices and continuously improving our security measures.

5. Your Rights and Choices

You have several rights regarding your personal information and how we use it. The availability of these rights may depend on your location and applicable laws.

5.1 Access and Portability Rights

Right to Access:

• Request a copy of the personal information we hold about you
• Receive information about how your data is processed
• Get details about data sharing and retention periods
• Access your data in a structured, commonly used format

Data Portability:

• Export your watch and strap collection data
• Download your daily wear logs and statistics
• Receive your photos and uploaded content
• Transfer your data to another service (where technically feasible)

How to Exercise: Contact us at info@wristlog.app with your access request. We will respond within 30 days and may require identity verification.

5.2 Correction and Update Rights

Right to Rectification:

• Correct inaccurate personal information
• Update outdated information in your profile
• Modify your collection data and descriptions
• Update your notification preferences and settings

Self-Service Options:

• Update your profile information directly in the app
• Edit watch and strap details in your collection
• Modify daily wear logs and notes
• Change notification settings and preferences

Assistance: If you cannot make changes directly in the app, contact us for assistance.

5.3 Deletion Rights

Right to Erasure (Right to be Forgotten):

• Delete your account and your personally identifiable information; the rest of your data is kept in anonymized form for analytics purposes (see 4.3)
• Remove specific pieces of information from your profile
• Delete individual watches, straps, or wear logs
• Remove uploaded photos and images

Account Deletion Process:

1. Go to the Profile tab in the app
2. Tap "Delete account"
3. Confirm your decision
4. Your personally identifiable information is deleted and the rest of your data anonymized immediately in the app, or within 30 days for requests made by email

No longer have the app? You can also request deletion by email. See wristlog.app/delete-account.

Limitations: After anonymization, aggregated and de-identified data may be retained for analytics, service improvement, legal compliance, fraud prevention, or other legitimate business purposes as permitted by law. This anonymized data cannot be used to identify you personally.

5.4 Restriction and Objection Rights

Right to Restrict Processing:

• Limit how we use your personal information
• Suspend processing while disputes are resolved
• Restrict use for specific purposes (e.g., marketing)
• Maintain data without active processing

Right to Object:

• Object to processing based on legitimate interests
• Opt out of analytics and usage tracking
• Refuse direct marketing communications
• Object to automated decision-making (if applicable)

5.5 Notification and Communication Preferences

Push Notifications:

• Enable or disable daily logging reminders
• Set custom notification times
• Turn off all push notifications
• Manage notification categories and types

Email Communications:

• Opt out of promotional emails
• Receive only essential service communications
• Update email preferences
• Unsubscribe from all non-essential communications

In-App Controls:

• Access notification settings in the Profile section
• Toggle specific notification types
• Adjust reminder frequency and timing
• Manage device-level notification permissions

5.6 Analytics and Tracking Opt-Out

Usage Analytics:

• Opt out of app usage tracking
• Disable performance analytics
• Turn off crash reporting (may affect support quality)
• Limit data collection for app improvement

Third-Party Analytics:

• Opt out of Firebase Analytics
• Disable Google Analytics tracking
• Limit data sharing with analytics providers
• Use device-level privacy controls

5.7 Regional Privacy Rights

For European Union Residents (GDPR):

• All rights listed above under GDPR framework
• Right to lodge complaints with supervisory authorities
• Right to withdraw consent at any time
• Enhanced protections for sensitive data

For California Residents (CCPA/CPRA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights

For Other Jurisdictions:

• Rights may vary based on local privacy laws
• We will honor applicable legal requirements
• Contact us for information about your specific rights
• We may update this policy to reflect new legal requirements

5.8 How to Exercise Your Rights

Contact Methods:

• Email: info@wristlog.app
• Subject Line: Include "Privacy Rights Request"
• Information Required: Your name, email address, and specific request

Response Timeline:

• We will acknowledge your request within 5 business days
• Most requests will be completed within 30 days
• Complex requests may take up to 60 days with notification
• We may request additional information to verify your identity

Identity Verification:

• We may require verification of your identity before processing requests
• Verification methods may include email confirmation or account authentication
• This protects your privacy and prevents unauthorized access to your data

No Cost:

• Exercising your privacy rights is generally free of charge
• We may charge a reasonable fee for excessive or repetitive requests
• We will inform you of any fees before processing your request

5.9 Automated Decision-Making

Currently, WristLog does not use automated decision-making or profiling that produces legal effects or significantly affects you. If this changes in the future, we will update this policy and provide appropriate information and controls.

6. International Data Transfers

Your personal data is stored and processed within the European Union to ensure strong privacy protections.

6.1 Data Storage and Processing

Primary Processing Location:

• Your personal data is stored and processed within the European Union
• Our main servers and databases are located in EU data centers
• This ensures compliance with European data protection standards

Content Delivery:

• Photos and media files may be served through global content delivery networks (CDNs)
• CDNs help improve app performance by serving content from locations closer to you
• CDN providers are required to implement appropriate data protection safeguards

Service Provider Safeguards:

• All service providers must comply with European data protection standards
• Appropriate technical and organizational measures are implemented
• Regular assessments ensure continued compliance with privacy requirements

AI Photo Fill:

• If you turn on AI Photo Fill, the photos you add are processed by Google, which may process them outside the European Union, including in the United States
• These transfers are covered by Google's data processing terms, including the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework, and equivalent safeguards under Brazil's LGPD

6.2 GDPR Compliance

European Data Protection:

• Your data remains within the EU for primary processing and storage
• Any limited transfers (such as CDN delivery, or AI Photo Fill if you turn it on) include appropriate safeguards
• We maintain compliance with all European data protection requirements
• Regular monitoring ensures continued adherence to privacy standards

Your Rights:

• Right to be informed about any data transfers
• Right to object to transfers in certain circumstances
• Right to receive information about safeguards in place
• Right to lodge complaints with supervisory authorities

6.3 International Users

Users from outside the EU benefit from the same high level of data protection, as all data is processed according to European privacy standards regardless of your location.

7. Children's Privacy

7.1 Age Restrictions

Minimum Age Requirement:

• WristLog is intended for adults and is not directed at anyone under 18 years of age
• We do not knowingly collect personal information from anyone under 18
• Users must be at least 18 years old to use our service

7.2 Accounts of Minors

If We Learn a User Is Under 18:

• We will close the account and delete the associated personal information
• This includes information about children under 13 covered by the US Children's Online Privacy Protection Act (COPPA)
• If you believe someone under 18 is using WristLog, please contact us at info@wristlog.app

7.3 Age Confirmation

User Responsibility:

• By creating an account, you confirm that you are at least 18 years old
• We do not actively verify user ages during account creation

8. Changes to This Policy

8.1 Policy Updates

When We May Update:

• To reflect changes in our data practices
• To comply with new legal requirements
• To improve clarity and transparency
• To address new features or services

Types of Changes:

• Minor Changes: Clarifications, formatting, or non-material updates
• Material Changes: Significant changes to data collection, use, or sharing practices
• Legal Changes: Updates required by new laws or regulations

8.2 Notification Process

How We Notify You:

• Email Notification: Sent to your registered email address
• In-App Notification: Prominent notice when you open the app
• Website Notice: Posted on our website (when available)
• Updated Date: The "Last Updated" date at the top of this policy will be changed

Advance Notice:

• Material changes will be communicated at least 30 days in advance
• You will have time to review changes before they take effect
• You may delete your account if you disagree with material changes
• Continued use of the app after changes take effect constitutes acceptance

8.3 Your Choices

If You Disagree with Changes:

• You may delete your account before changes take effect
• You may contact us with questions or concerns
• You may exercise your data rights (access, deletion, etc.)
• You may file complaints with relevant authorities if applicable

8.4 Version Control

• We maintain records of previous versions of this policy
• Previous versions are available upon request
• Changes are tracked and documented for transparency
• Legal requirements for record-keeping are followed

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Email: info@wristlog.app