GDPR and your data
How the Daily Rebuild app follows the General Data Protection Regulation, in plain words. The full detail is in the Privacy Policy.
Who is responsible
John Mitchell runs the app and is the data controller. Contact dailyrebuildguide@gmail.com.
Data protection by design
- Only what’s needed: your email, an optional first name, your timezone, your ticked steps and your reflections. No phone number, no address, no date of birth.
- Reflections encrypted: each one is encrypted before it’s saved, and nobody running the app can read it.
- No passwords to leak: you sign in with a one-time link or code.
- No tracking: no analytics, advertising or social-media pixels, and only cookies the app needs to work.
- Deleted on schedule: reflections are deleted after the time you choose, and accounts after 6 months unused (with a warning email first).
- Security: https throughout, limits on repeated attempts, and IP addresses only ever stored scrambled, for a day.
Who processes data for us
Our web host stores the app, its database and its email mailbox on our behalf, as a processor. Nobody else receives your data, and it is never sold or shared for marketing.
International transfers
None. The app’s servers are in Ireland, and your data never leaves the European Economic Area.
Your rights, and how to use them
- See or take your data: Settings → Download JSON or CSV.
- Correct it: Settings, or email us.
- Delete it: Settings → delete reflections, or Delete my account. It’s immediate.
- Withdraw consent: delete your reflections or turn off reminders in Settings.
- Restrict or object: email us.
Email dailyrebuildguide@gmail.com for anything the app can’t do for you. We reply within one month. You can also complain to the Data Protection Commission at dataprotection.ie.
If something goes wrong
If a data breach puts members’ rights at risk, we’ll report it to the Data Protection Commission within 72 hours and tell the members affected without delay.