Privacy policy

Otterlume stores your personal entries on your device and does not require an account. Some features send the data described below to service providers, particularly when you use the chat. The app is also known as Ruhepol.

Data controller

Melvin Morina
Johann-Konrad-Vogel-Straße 4a, 4020 Linz, Österreich
melv00705@gmail.com

Data stored on your device

The app stores your mood, feelings, sleep duration and quality, notes, gratitudes, onboarding answers, topics, goals, first name, otter's name, reminder time, calm points, level, streak, and completed exercises locally. If an older version allowed you to enter an email address, it remains on your device and is not currently sent anywhere.

These entries remain until you delete them or remove the app. Chat history is also stored on your device. iCloud backups are subject to Apple's terms. Feature-specific data transfers are described below.

Notifications

Reminders are scheduled locally on your device. There is no push notification server. iOS asks for your permission, which you can withdraw in Settings.

Purchases and subscriptions

Apple processes purchases. We do not receive your payment details. RevenueCat, Inc., in the United States, manages subscription status using an installation identifier and purchase, renewal, and cancellation events. It does not receive your name, email address, or personal entries. The legal basis is Article 6(1)(b) GDPR, performance of the contract. US transfers rely on standard contractual clauses. RevenueCat privacy policy.

Superwall, Inc., in the United States, lets us manage subscription screens. It receives the same identifier, language, app version, subscription status, your first name if provided, your otter's name, and your chosen topic to personalize the screen. It does not receive your other answers, notes, or mood entries. Purchases still go through Apple and RevenueCat. The same legal basis applies. Superwall privacy policy.

Usage data

We use PostHog, provided by PostHog Inc., in its EU cloud with servers in Frankfurt, to understand which screens and features are used and identify errors. It receives installation and session identifiers, the step taken, onboarding answers as categories, app and iOS versions, device model, and language. Only the decade of your birth year is sent. We do not send your first name, email address, individual mood or sleep entries, notes, or gratitudes. IP-based geolocation is disabled, and no advertising identifier is used.

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in improving the app. You can object at any time by turning off Profile → Anonymous usage data. This takes effect immediately and discards the local identifier.

Where installations come from

Postback helps us understand which ads lead to installations. It receives the installation identifier, attribution data supplied by Apple, technical device information, and events such as onboarding screens visited, subscription screen views, completed sessions, and purchases with price and currency. It does not receive onboarding answers, only which steps were visited.

No IDFA advertising identifier is read, and the app does not request cross-app tracking permission. The legal basis is Article 6(1)(f) GDPR. The same Anonymous usage data switch disables both PostHog and Postback. Postback privacy policy.

Chat with your otter

When you use chat, your message passes through our service to OpenAI, L.L.C., in the United States, to generate a reply. It includes recent messages and brief context: your otter's name and pronouns, your first name if provided, topic, streak, level, points, completed activities, recent mood scores, last sleep duration, challenge, date and time, and language. The service uses an installation identifier for the daily usage limit.

We do not store the conversation on our service. History remains on your device. OpenAI does not use API data to train its models; abuse monitoring logs may be retained for up to 30 days, or longer if legally required or necessary to prevent harm. The legal basis is Article 6(1)(b) GDPR. Transfers rely on standard contractual clauses and the EU-US Data Privacy Framework. OpenAI privacy policy.

If the local check detects signs of crisis, that message is not sent and support information is shown. The service also checks for signs the app may not have detected.

This website

Cloudflare serves these pages and processes necessary connection data, such as IP address, time, and requested URL. We do not analyze this data. This website does not set cookies or include tracking.

Advertising and personal data

The app contains no ads, does not build advertising profiles, and does not sell data. We do not share data beyond the cases described here.

Health-related information

The app does not request or make diagnoses. Mood and sleep records are stored locally; when you use chat, the recent values described above are sent. Otterlume is not a medical device and does not replace treatment.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing by contacting melv00705@gmail.com. While personal entries are stored locally, providers may process the data described in this policy. You may complain to a data protection authority, including the Austrian Data Protection Authority.

Delete local data

Use Profile → Delete all data or remove the app. This deletes the app's data on your device. It does not cancel your subscription or automatically delete providers' records.

Updated: September 22, 2026