Privacy policy

01Data controller and contact

The controller of personal data processed to provide Feature Creep Studio services is Michał Filip, a private individual at ul. Centralna 55, Kraków, Poland. For privacy, data access or account deletion requests, use the contact address below.

This policy covers the studio website, Spendwise, Timefold, Fitness, Chlapp and Ciapp. Information shown for a particular feature supplements it with details relevant to that use. Data kept solely on your device is not, by that fact alone, shared with the studio.

02Data that may be processed

For accounts and online features: account or session identifiers, email address, profile, settings, authentication information and sharing permissions. For enquiries: sender address and correspondence. Technical data may include IP address, device and software type, requests, errors and sync information.

Spendwise: expenses, income, budgets, goals, bills, notes and uploaded receipts. Timefold: calendars, shifts, events, availability, participant information and uploaded schedule photos.

Fitness: plans, exercises, sets, weights, history, measurements, goals and information you provide about limitations. Some of this information may reveal health data.

Chlapp: starter information, baking schedules and records, photos, notes, and content and a nickname selected for publication. Ciapp: recipes, variations, baking progress, timers, journal entries and photos saved through the features you use.

We receive data from you, files and integrations you choose, your sign-in provider, and people sharing a calendar or other content with you. Providing data is voluntary, but a feature may not work without the information necessary to provide it.

03Purposes and legal grounds

Account management, storage, sync and delivering requested features are necessary for performance of a contract (GDPR Article 6(1)(b)). Security, preventing abuse, necessary diagnostics, handling general enquiries and protecting legal claims rely on the controller’s legitimate interests (Article 6(1)(f)). Statutory obligations rely on Article 6(1)(c).

Where a feature requires consent, the basis is Article 6(1)(a). Processing health information by the provider also requires an appropriate Article 9 condition; for voluntary Fitness features this is separate, explicit consent under Article 9(2)(a). Using an app, granting a system permission or accepting the terms does not replace that consent.

You can withdraw consent at any time using the contact address below or the relevant app control. Withdrawal does not affect the lawfulness of earlier processing, but may prevent further use of a consent-based feature.

04On-device and server data

Apps use device storage for content and preferences. Account, sync, sharing, community and AI features require the data needed to deliver them to leave the device. The scope depends on the feature; not every entry is automatically public or synced.

Private journal entries and material selected for publication are separate scopes. In Chlapp, community publication includes the chosen public caption, photos and nickname. People you share with may retain copies. Revoking access does not automatically delete those copies.

You can also control selected-photo, notification and alarm permissions in your operating system settings. Device backups made by Apple or another provider are also subject to that provider’s rules and your settings.

05AI and external sign-in

Using AI may send the provider your request, attachments such as a receipt or schedule, and context needed to respond. In Fitness this may include profile, plan and training context. Current AI features in Spendwise, Timefold and Fitness use OpenAI services. Do not assume requests remain solely on your device or the app server.

Processing by the provider depends on the service and account configuration, including retention rules. We do not claim that every submitted item is immediately deleted or can never be used by the provider. Avoid submitting unnecessary personal information. AI outputs are suggestions, not solely automated decisions with legal or similarly significant effects.

If you choose Apple or Google sign-in, we receive information needed to identify your account, such as an identifier and the email address shared with us. We do not receive your provider password. Passkeys do not share the face image or fingerprint used to unlock your device with us.

06Recipients and international processing

As needed for a feature, recipients may include hosting and backup providers, website delivery and connection protection providers, transactional email, sign-in, notification and AI providers. Depending on the app, current online services use VPS infrastructure, Cloudflare, Mailtrap, Apple, Google and OpenAI. Not every provider receives data from every app.

Recipients may also include people you share with, trainers and integrations you authorise, audiences of public posts, and authorised people maintaining the service or handling support. Data may be disclosed to authorities where the law requires it.

Providers may process data outside the European Economic Area, including in the US. The transfer basis depends on the recipient and service: an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses may apply. Contact the controller for the recipient, country and safeguards relevant to a feature and a copy of those safeguards. Using a provider does not itself establish a particular transfer mechanism.

07Retention and deletion

Local-only data remains until deleted from the device or app, subject to device backups. Account data and synced content are kept while the relevant service is provided, until the content or account is deleted, unless the law requires further retention or it is necessary to establish or defend legal claims.

Correspondence retention depends on resolving the enquiry and relevant legal periods. Technical logs are retained based on the time needed for diagnostics and investigating incidents. Backups have a separate rotation cycle; deletion from the active database does not immediately remove every backup. Providers also apply retention rules specific to their services.

Request account or server-data deletion through available app settings or the address below. Uninstalling alone does not delete a server account, and deleting an app account does not delete your Apple or Google account. Before clearing local data, check for needed entries that have not been synced.

08Browser storage and security

The studio website stores your theme choice in localStorage under fcs-theme until you change it or clear site data. Language follows the page address; an initial visit without a language uses your browser preference. Fonts are served locally with the site. The website contains no advertising or analytics scripts.

Web apps may additionally use local storage and cookies for sign-in, offline use and sync. These are separate features from the studio website. External links take you to services with their own privacy rules.

We use access controls and safeguards appropriate to the services involved. Do not assume synced data or AI submissions are end-to-end encrypted and inaccessible to the server. Secure your device, and sign out and remove local copies when you stop using a shared device.

09Your rights and policy updates

Within the scope of the GDPR, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent. You may complain to Poland’s President of the Personal Data Protection Office (UODO) or the competent supervisory authority in your country.

Send requests to the address below and identify the app. We may ask for information necessary to confirm your identity. We normally respond within one month; if a statutory extension is needed, we explain the reason within that period.

The date above identifies the current version. We will notify you before material processing changes affecting a service you use take effect. Updating this policy does not replace a new consent where one is required.