Privacy policy

Controller

Tobias Wissmüller
Groschenweg 41g
81825 München
Germany
Email: hello+mokuso@ramuslabs.com
More details: Imprint

In short

Your diary stays yours. Mokuso needs no account and shows no ads. Your entries live in a folder you choose, on your device or in your own iCloud Drive, and never reach us. Mokuso sends anonymous usage statistics to our own server; a random install ID is added only if you allow it.

Your diary

Handwriting, transcripts and canvases are saved as open files in the folder you pick on first launch. If that folder is in iCloud Drive, Apple stores and syncs it under your iCloud account. We have no access. Handwriting is transcribed on your device with Apple’s Vision framework; nothing is sent anywhere for that.

Location

If you allow it, Mokuso uses your location while the app is open to put the name of your town in the page header. The location is resolved on the device, and only the town name is saved with the day. You can turn this off in Settings at any time.

Face ID

Face ID or Touch ID can lock the app. Your device does the check; Mokuso only learns whether it succeeded.

Usage statistics

Your diary never reaches us. Handwriting, transcripts, canvases, the dates of your entries, search terms and questions you ask your diary stay on your device and in the folder you chose. Mokuso never sends them anywhere.

To see which features are used, Mokuso sends usage events to our own server (api.mokuso.ramuslabs.com, hosted by Hetzner Online GmbH in Germany). An event says what happened (for example “a day was opened” or “the paywall was shown”), when, the app version and the platform (iOS/iPadOS or macOS), and for a few events whether a day was opened for writing or reading, or where the paywall was opened from. These events are anonymous: they carry no name, account, location or content. The connection to our server that delivers settings to the app carries no identifier of your device.

Install ID (only with your consent). Mokuso asks once whether usage events may also carry a random install ID. It is created on your device and lets us recognise the same installation over time (for example, how many installations are active and whether people keep using the app). It is not linked to your name, an account or your Apple Account. If you say no, nothing changes in the app and no install ID exists. You can withdraw your consent at any time in Mokuso’s Settings (“Share usage statistics with an install ID”); the install ID is then deleted on your device and no event leaves your device with it any more, including events that were not yet sent. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

We do not sell this data, do not use it for advertising and do not share it with third parties apart from our hosting provider as processor.

Retention. Usage events wait on your device until they can be sent; events that could not be sent within 30 days are deleted there. On our server each event is kept only until it has been counted, and is deleted at the latest 30 days after it arrived (usually after 3 days). If you allowed it, an event carries a random installation ID, which is deleted together with the event. We keep only daily counts per event and app version, which do not relate to any installation or person; we keep them without a time limit. Our server does not store or log your IP address: the web server writes no access logs, and the app server neither stores nor logs IP addresses, and does not log installation IDs. The app sends no device identifier, so our server stores nothing that identifies your device. Technical error logs are limited in size, older entries are overwritten, and they are deleted with every update of the server software. Our hosting provider makes daily backups of the server, each kept for 7 days, so deleted data can remain in a backup for up to 7 more days.

Subscription

The subscription is bought and billed through the App Store. We never see payment details.

Purchases are validated by RevenueCat, Inc. (USA). To check what you have bought, the app sends RevenueCat a randomly generated app user ID, technical device and app information (such as the operating system version) and the store transaction. RevenueCat creates the ID; it is not linked to your name, your store account or any other identity. The legal basis is the performance of the purchase contract and our legitimate interest in verifying purchases reliably (Art. 6(1)(b) and (f) GDPR). Data is transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses. See revenuecat.com/privacy.

Tracking

No ads, no tracking, no advertising identifier. The usage statistics described above are not used for tracking.

App downloads

When you download or update the app, the App Store or Google Play processes data under their own privacy policies. We only receive aggregated, anonymous statistics such as download counts.

Contacting us

If you write to us, for example with “Contact support” in the app, we process your email address and message only to answer you (Art. 6(1)(b) and (f) GDPR). The app may pre-fill app version, platform and OS version; you can edit the mail before sending it.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Write to hello+mokuso@ramuslabs.com.

Most data never reaches us. It stays on your device or in your own iCloud account, and you can delete it yourself at any time by removing the app or its files.

Right to lodge a complaint

You can complain to a data protection supervisory authority, in particular in the member state where you live. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Children

Our apps work without an account and do not ask for your age. We do not knowingly collect personal data from children under 16.

Changes

When the app or the law changes, we update this policy. The version published here applies.