Privacy Policy

1. Who we are

The controller of your personal data is Kiryl Anokhin, sole proprietor (jednoosobowa działalność gospodarcza) established in Wrocław, Poland, operating the App under the name first thing. Our registered address is ul. Chorwacka 41B-13, 51-107 Wrocław; NIP 8982272619, REGON 521004109. You can reach us at support@first-thing.app or through first-thing.app/support.

2. What we process, and why

The App needs no account and no sign-in, and we keep the personal data we process to a minimum. We process the following:

• ·Support correspondence — if you write to us through the contact form, we process your name, email address, and the content of your message in order to reply. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR); where your message concerns the App, performance of our contract with you (Art. 6(1)(b)).
• ·Subscription data — when you subscribe, our processor RevenueCat records the purchase and an anonymous app-user identifier so the subscription can be verified and restored across your devices. We do not receive your name or payment-card details. Legal basis: performance of the contract (Art. 6(1)(b)).
• ·Anonymous usage statistics — the App can send anonymous, aggregate signals about how it is used (for example, that a session started or ended, or which exercise ran). They contain no identifier and nothing you write, and cannot be linked to you or your device; they are therefore not personal data. You can switch them off at any time in the App's settings.
• ·Website statistics — we measure visits to the website with a cookieless tool that builds no profile of you and does not track you across sites.

3. Data kept only on your device

Your settings, your morning history, the wake time you choose, and anything you write in the App (such as your “first thing”) are stored only in the App's own storage on your device. In this version there is no account and no cloud, so this information is not transmitted to us, and deleting the App deletes it.

4. Device permissions

The App may ask permission to send you notifications or to sound an alarm, so it can wake you at the time you choose; you can decline and still use the App. Some exercises read your device's motion sensor while you use them, on the device and in the moment only — nothing from the sensor is recorded or transmitted. The weather feature, on by default and switchable off in the App's settings, fetches the day's weather once a day through our own server, which derives an approximate location — the city, never a reading from your device — from the connection's IP address, passes it to the weather provider, keeps no record of you or your connection, and caches only the day's weather for a short time. The App never asks for or reads your device's location, and does not access your microphone, camera, contacts, or photos.

5. Who we share data with

We do not sell your personal data and do not use it for advertising. We share it only with service providers acting on our behalf, and with the app stores:

• ·RevenueCat, Inc. (United States) — subscription management.
• ·Aptabase — anonymous product analytics (processed on servers in the European Union).
• ·WeatherAPI.com — while the weather feature is on, an approximate location derived from your connection (city level) is sent once a day, through our own server at first-thing.app, which keeps no record beyond a short cache of the weather itself, to WeatherAPI.com to fetch the day's weather. See their privacy policy at https://www.weatherapi.com/privacy.aspx.
• ·Resend — delivery of the emails you send through the contact form.
• ·Cloudflare — website hosting, cookieless spam protection of the contact form (Turnstile), cookieless website statistics, and the server-side proxy that derives an approximate location from your connection and forwards it to WeatherAPI.com.
• ·Apple and Google — distribution of the App and processing of payments; for payments they act as independent controllers under their own privacy policies.

6. International transfers

Some providers are located outside the European Economic Area, in particular in the United States. Where personal data is transferred there, the transfer is covered by appropriate safeguards under the GDPR — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. You may request further information using the contact details above.

7. How long we keep it

We keep the content of your support messages only as long as needed to handle your request and for a reasonable period afterwards, then delete it. Subscription records are kept for the duration of the subscription and any period required by law. Anonymous statistics are retained only in aggregate and cannot be tied to you.

8. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format; where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at support@first-thing.app. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), or with the authority in your country of residence.

9. Children

The App is not directed to children. We do not knowingly process the personal data of children under 16 (or under the age of digital consent where you live, and under 13 in the United States). If you believe a child has sent us personal data through the contact form, contact us and we will delete it.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) connections for all data in transit.

11. Changes

We may update this Privacy Policy from time to time. The date above shows the current version, and we will indicate any significant change. Continued use of the App or the website after a change means the updated policy applies.

12. Contact

Questions about this policy or your personal data: support@first-thing.app or first-thing.app/support. Postal mail: Kiryl Anokhin, ul. Chorwacka 41B-13, 51-107 Wrocław, Poland.