privacy policy

Louis Romao (Mineplot), Hamburger Chaussee 17, 24114 Kiel, germany. email: support@mineplot.com, phone: +49 152 55327872.

audit is an ai coach. so that eko can reply, your messages are sent to a language model and stored in your account. conversations can be very personal and may include information about your health or mental state. we only process this with your explicit consent. we don't sell data, show no ads and use no tracking or analytics tools.

this website is purely informational. there are no forms, no accounts, no cookies, no tracking and no analytics tools. fonts and images are served from our own domain; no content is loaded from third parties. the website is hosted by vercel inc. (usa). when you visit, vercel processes technically necessary data such as ip address, time, requested page and browser type to deliver the page and protect it from attacks (legitimate interest, art. 6(1)(f) gdpr). in our vercel account these logs are visible for one day at most; we don't analyse them. if you email us, we use your address and message only to reply, and delete them once your request is settled and no retention obligation applies.

• account: email or apple/google id, name. • conversations: your messages, eko's replies, insights, patterns, steps and goals derived from them. • memory (pro only): facts eko remembers about you. you can view and delete them at any time. • vision board: your boards, your own photos (stored privately) and ai images from your search terms. • subscription: only the status (active / trial / free). only apple sees payment data. • usage: number of conversations per week (for the free quota), level, experience and streak. • screen time (iphone, only with the app block and your permission): time in the blocked apps, your block times; in the eu with apple's data access also total screen time, unlocks and your most-used apps — never content. more under “app block & screen time”. • moments (iphone, only if you pick one): the description of the moment from apple's suggestions, e.g. title, date, place, type of workout, song title or a contact's name — as your message in the conversation. • technical: device type, app version, error messages in server logs (without conversation content). • device check (iphone): a key from apple's app attest — its public part, a counter and the time it was last used. with it we check that requests come from the real audit app. it says nothing about you and is deleted with your account.

• providing the app, account, subscription: contract (art. 6(1)(b) gdpr). • conversations containing health-related information: your explicit consent (art. 9(2)(a), art. 6(1)(a) gdpr). you can withdraw it at any time in settings → privacy. without consent, the coach can't be used. • security, abuse prevention (e.g. limits against mass requests, checking with apple's app attest that requests come from the real app): legitimate interest (art. 6(1)(f) gdpr). • moments from apple's suggestions: your choice to pick a moment and talk about it — like any message in a conversation (consent, see above). • screen time for eko: your consent (art. 6(1)(a) gdpr) — with “continue” in audit and apple's permission window. withdraw anytime: end the block or in your iphone settings under screen time.

• supabase (database, login, storage, server functions), server location: ireland (eu-west-1, eu). • vercel (hosting of this website; the ai gateway forwards the app's requests to the ai providers), usa. • anthropic (language model claude, writes eko's replies and summaries), usa. • openai / microsoft azure (via vercel: text vectors from a conversation's summary, so eko remembers matching topics; ai images for the vision board from your search term, without conversation content), usa. • apple or google: sign-in, in-app purchases, speech recognition (see below), on the iphone also the app attest device check. data processing agreements are in place with all providers. transfers to the usa are based on the eu-us data privacy framework or eu standard contractual clauses. according to their api terms, the ai providers don't use your data to train their models.

when you speak, your device's speech recognition (apple, on android google) turns your voice into text. depending on the device, this may happen on their servers. we don't store audio recordings, only the recognised text as a message.

“pick a moment” in the journal opens apple's own suggestions window (journaling suggestions). your iphone decides which moments appear there — audit sees none of them. only when you tap a moment does audit receive exactly that one: title, time range and a few keywords (e.g. place, type of workout, song title, a contact's name). audit sends this description as your first message to eko; it is processed and stored like any other message. photos and videos of the moment are not uploaded. you can turn the suggestions on or off in your iphone settings under privacy & security → journaling suggestions.

if you use the app block, audit uses apple's screen time (family controls) — only with your permission and only for yourself. you choose the apps in apple's own picker. your iphone applies the block at your times. for “your time”, your iphone reports when the selected apps have been used for 10, 20, 30 … minutes on a day. on iphones in the eu with ios 26.4 or later, apple also asks whether audit may see your screen time (data access). if you allow it, audit reads per day your total screen time, how often you unlock, the time in the blocked apps and your most-used apps (name and minutes) — never content. only one app at a time can have this data access on an iphone. the numbers stay on your iphone. so that eko can talk to you about them, audit sends a short summary with conversations and when building your paths (e.g. average minutes per day, your most-used apps, your block times) — via our servers to the ai provider (see “who processes data”). we don't store the summary separately; what eko says about it is in your history like any reply. never for ads. you can turn this off anytime in audit (end the block) or in your iphone settings under screen time.

some of your data is also stored locally on your device (for quick display and offline use). cutting out your own photos happens directly on the device. reminders are local notifications of your device — we don't send anything to a push service for them. widgets: the app stores your step for today, the name of your path, level, streak and a preview of your vision board in a protected area that only audit and its widgets can read. what the widget shows is visible to anyone who sees your phone — turn on “private widget” in the settings to hide content; on the lock screen ios hides it while your phone is locked. notifications contain nothing personal by default.

your data stays stored as long as you have your account. you can delete single memories, the whole memory or your entire account in the app at any time (settings → memory). when you delete your account, all related data is also removed from backups within 30 days. statutory retention obligations remain unaffected.

access, rectification, erasure, restriction, data portability (export in the app), objection and withdrawal of your consent — with effect for the future. write to us at support@mineplot.com. you can also lodge a complaint with a data protection supervisory authority.

audit is for people aged 16 and over. we don't knowingly collect data from younger people. if we learn of it, we delete the account.

eko spots patterns and suggests steps. these are prompts for self-reflection — not diagnoses and not decisions with legal effect (art. 22 gdpr).

version 2026-10-24.2.