Privacy Policy

Last updated 23 October 2026

Who is responsible

Wholeness Board is made by one person. I, Philipp Dam, Germany, am responsible for your data (the “controller” under the EU General Data Protection Regulation, GDPR). For anything about this policy or your data, write to support@wholenessboard.com.

Your account

To use the app you sign in, either with Apple or with your email address.

• Sign in with Apple: Apple gives me an account ID, your email address (or a private relay address, if you choose to hide yours), and your name if you choose to share it.
• Email: I store your email address and send a one-time sign-in code to it.

I use these to sign you in, to keep your data apart from everyone else’s, to show your email on the Account screen, and to answer you if you write to me. I don’t send newsletters or marketing email.

What you plan and log

Everything you enter: items, categories and tags, your weekly template, what you logged each week, notes, routines and exercises, workouts and mobility sessions with their sets, weights, reps, times and rest, and your Silence sits.

It is saved on your device first, so the app works offline, and synced to my server, so it is backed up and the same on all your devices. On the server, database rules let each account read only its own data. I don’t look at it, except when you ask me to help with a problem.

Some entries, such as supplements or workouts, can say something about your health. Wholeness Board is not a medical app; it keeps your entries only to show them back to you and to sync them.

The Silence room

The Silence tab shows how many people are sitting right now. While you are in a sit, the app joins a live room on my server with your account ID, a random string of letters and numbers that is not your name or email, so that you are counted. The other apps in the room receive these IDs to count them; the app only ever shows the number. Nothing about the room is saved: you leave it when your sit ends or the app closes.

Crash reports

When the app crashes or hits an error, it sends a report to Sentry so I can fix it: what went wrong in the code and where in the app, the app version, your device model and its iOS version. Reports don’t contain your email, your name or anything you logged, aren’t linked to your account, and are stored without your IP address. Sentry deletes them after 90 days at the latest.

Server logs

Like any server, mine sees your IP address and basic device details when the app connects. The hosting provider keeps them in technical logs for a short time to run the service and keep it secure. I don’t use them for anything else.

Checking your connection

To know whether you are online, the app regularly sends an empty request to Google’s connection check (clients3.google.com). Google sees your IP address, as with any request, but no app data and nothing about you.

What I don’t do

• No ads.
• No tracking across other apps or websites, and no advertising ID.
• No analytics or usage statistics.
• No selling, renting or sharing your data with anyone for their own use.

Who processes data for me

• Supabase, Inc. runs the server: sign-in, the database and the Silence room. Your data is stored in the EU (Frankfurt, Germany).
• Resend, Inc. delivers the sign-in code emails, so it receives your email address and the code.
• Sentry (Functional Software, Inc.) stores crash reports in the EU.
• Apple handles Sign in with Apple under Apple’s privacy policy.
• GitHub, Inc. hosts these web pages. When you open them, GitHub receives your IP address and browser details to deliver and secure them (GitHub’s privacy statement). The pages set no cookies and load nothing from other sites.

Supabase, Resend and Sentry work only on my instructions, under data processing agreements. All three are US companies; if your data is processed or accessed outside the EU, the EU Standard Contractual Clauses in those agreements protect it.

Legal basis

• Your account, syncing and the Silence room: providing the app you signed up for (Art. 6(1)(b) GDPR).
• Crash reports, server logs and the connection check: my legitimate interest in keeping the app working and secure (Art. 6(1)(f) GDPR).
• Answering your emails: Art. 6(1)(b) or (f) GDPR, depending on what you ask.

How long data is kept

• Your account and your entries: as long as you have the account. When you delete an entry, it is marked as deleted so your other devices learn about it, and erased for good when you delete your account.
• Clear All Data (Account) removes everything you entered from the app on all your devices and keeps your account.
• Crash reports: 90 days at the latest.
• Your emails to me: as long as I need them to help you.

Deleting your account

In the app, go to Account → Delete Account. Your account and everything synced with it are deleted from the server straight away, then the app removes them from your device. Copies in the hosting provider’s routine backups disappear as those backups roll over.

Can’t use the app? Email support@wholenessboard.com from the address you sign in with (with Sign in with Apple, tell me that address), and I’ll delete your account within 30 days and confirm when it’s done.

Your rights

Under the GDPR you can ask me for a copy of your data, to correct it, to delete it, to restrict or object to how I use it, and to get it in a format you can take elsewhere. Write to support@wholenessboard.com. You can also complain to a data protection authority, for example the one where you live.

Changes

When this policy changes, this page changes with it, and so does the date at the top.