Privacy Policy
Last updated: 28 September 2026
Short version: Tamoji has no user accounts, no servers, no analytics, no advertising and no tracking in the app. Everything you enter in the app stays on your device. We, the developer, never receive it.
1. Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Viktoriia Ponomarova
Grashofstraße 19
80995 München, Germany
Email: [email protected]
We are not required to appoint a data protection officer.
2. Data stored only on your device
To work, Tamoji saves the following information locally on your iPhone (in the app's private storage):
- the name you enter and the name you give your monster;
- your answers to the daily check-in and the resulting monster type;
- tasks and steps you create, their duration and completion status;
- session history, trust progress and streaks;
- your reflections after a session and your answer to the “what blocked you?” question;
- an optional profile photo you choose;
- app settings (reminder time, appearance, haptics).
This data is not transmitted to us or to any third party. We have no access to it. Some of it (for example check-in answers about tiredness or feeling overwhelmed, or diary reflections) may be personal to you — which is exactly why it never leaves your device through Tamoji.
Deleting your data: you can delete everything at any time via Profile → Reset all data, or by deleting the app.
Device backups: if you have enabled iCloud Backup or back up your iPhone to a computer, iOS may include the app's data in that backup. This is a function of your device, controlled by you and provided by Apple under Apple's privacy policy; we have no access to these backups.
Storing information on your device is strictly necessary to provide the service you requested (§ 25(2) no. 2 German TDDDG). Legal basis for any processing is Art. 6(1)(b) GDPR (providing the app you use).
3. Photos
If you choose a profile photo, iOS shows you the system photo picker. Tamoji only receives the single photo you select — not your photo library. The photo is stored locally in the app and is deleted when you remove it, use “Reset all data”, or delete the app.
4. Notifications
If you turn on the daily reminder, Tamoji schedules a local notification on your device. No push server is used and no device token is sent to us. You can turn reminders off in the app or in iOS Settings at any time.
5. Purchases and subscriptions
Tamoji Pro (monthly, yearly or lifetime) is sold exclusively through Apple's App Store. Payment, billing and your Apple ID are handled by Apple. We do not receive your name, email address or payment details. The app checks on your device, via Apple's StoreKit, whether a valid purchase exists in order to unlock Pro features. Apple provides us with anonymous, aggregated sales reports only.
For Apple's processing, see the Apple Privacy Policy.
6. App Store, downloads and crash reports
When you download the app, Apple processes data (e.g. your Apple ID and device information) as an independent controller. If you have agreed in iOS to “Share with App Developers”, Apple may give us anonymous crash reports and usage statistics. These do not allow us to identify you. You can change this in iOS Settings → Privacy & Security → Analytics & Improvements.
7. Contacting us
If you email us, we process your email address and the content of your message to answer your request (Art. 6(1)(b) or (f) GDPR). We delete the correspondence once your request is resolved, unless statutory retention obligations apply.
8. This website
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When you visit it, the host automatically processes technical data such as your IP address, date and time of access, the requested page and your browser type in server log files. This is necessary to deliver the website securely (Art. 6(1)(f) GDPR, our legitimate interest in a secure and stable website). Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). See cloudflare.com/privacypolicy.
Cloudflare Web Analytics: to understand how many people visit this website and which pages are used, we use Cloudflare Web Analytics, a privacy-first statistics service by Cloudflare. It loads a small script from static.cloudflareinsights.com that reports page views, referrer, browser, device type, country and page-load performance. It sets no cookies, does not use local storage, does not fingerprint you and does not track you across websites; we only see aggregated statistics, never individual visitors. Legal basis is Art. 6(1)(f) GDPR (our legitimate interest in understanding and improving our website). The Tamoji app itself does not use Cloudflare Web Analytics.
This website uses no advertising and no external fonts. Cloudflare may set strictly necessary security cookies (e.g. __cf_bm, expires after 30 minutes) for bot protection (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR).
9. No tracking, no advertising, no profiling
Tamoji contains no third-party SDKs, no advertising and no tracking, and does not track you across apps or websites. The “monster type” is calculated locally from your check-in answers purely to adapt tips inside the app; it has no legal or similarly significant effect on you (no automated decision-making within the meaning of Art. 22 GDPR).
10. Children
Tamoji is not directed at children under 16. Because we do not collect personal data, we also do not knowingly collect data from children.
11. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Because app data is stored only on your device, you can view, change and delete it yourself at any time. For any data we do hold (e.g. emails), contact us at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
12. U.S. residents (CCPA / state privacy laws)
We do not sell or share personal information, do not use it for targeted advertising and do not profile you. Because Tamoji does not collect personal information from the app, there is nothing for us to disclose, correct or delete on our side; you can delete all app data yourself at any time. To exercise any right, contact us at the email address above — we will not discriminate against you for doing so. We do not respond to “Do Not Track” signals because we do not track you across websites or apps.
13. Changes
We may update this policy if the app or legal requirements change. The current version is always available on this page.