Privacy policy

A plain-language explanation of how the 100 Yosh app (developer: ALLTEN) stores and protects your data.

In short

  • You sign in only with your Apple or Google account. Your identity is verified on our own server — no Firebase or other intermediaries.
  • Your data is stored on ALLTEN's server in Germany (Hetzner) and is only transferred over an encrypted connection (HTTPS).
  • No ads, no analytics, no tracking. Your data is never sold or used for advertising.
  • You can delete your account completely inside the app at any time.

What we store

DataWhy
Apple or Google account identifierTo recognise you and sign you in to the right account
Email (Apple may provide a private relay address) and nameTo identify your account and greet you by name in the app
Birth date and sexTo choose tasks and check-ups that fit your age and sex
Plan progress (completed tasks)Progress, streaks and syncing between devices
Check-up dates and hidden check-upsTo calculate when your next check-up is due
Language and reminder settingsTo run the app in your language and at your chosen time
Apple token (only if you sign in with Apple)Used only to revoke "Sign in with Apple" when you delete your account

The app does not access your location, contacts, photos, health sensors (HealthKit / Health Connect) or advertising identifiers.

How we use it

For one purpose only: syncing and backing up your plan and progress across your devices (iPhone, iPad, Mac, Android). The app also works offline; changes sync later.

Who we share it with

We do not sell or share your data. Only the technical providers needed to run the service are involved:

  • Hetzner Online GmbH (Germany) — hosting for our server and database;
  • Cloudflare — protected network for the website and API (TLS encryption);
  • Apple and Google — the sign-in method you choose (Sign in with Apple / Google Sign-In).

Security

  • All traffic is encrypted with HTTPS (TLS).
  • The server and database are closed to the outside network; sign-in tokens are stored on the server only as hashes.
  • Server logs never contain health data, email addresses or tokens.

How long we keep it

  • Your data is kept until you delete your account.
  • Deleted data disappears from encrypted backups within 14 days.
  • Technical server logs (IP address, request time; no health data) are kept for up to 14 days.

Deleting your account and data

  1. In the app, open Profile → Delete account and confirm. Your account and all data are deleted immediately and irreversibly. If you signed in with Apple, the "Sign in with Apple" authorisation is revoked as well.
  2. Or email [email protected] from your account's email address — requests are completed within 30 days.

More: Delete account.

Children

The app is intended for users aged 16 and over and does not knowingly collect data from children.

Not medical advice

100 Yosh provides general healthy-lifestyle guidance and does not replace a doctor's advice, diagnosis or treatment.

Changes and contact

If this policy changes, we will publish the new version with its date on this page. Questions: [email protected].

Developer: ALLTEN · Website: 100yosh.uz