Last updated: May 29, 2026
This Privacy Policy explains how AffirmateMe (the "App") processes personal data and other information in connection with the App and related services.
AffirmateMe is a wellness and motivational content app. The App does not require account registration, and it does not ask users to submit their name, email address, phone number, postal address, contacts, camera data, microphone recordings, precise location, or photo library content in order to use its core features.
This Privacy Policy is intended to satisfy the transparency requirements that apply under the General Data Protection Regulation ("GDPR") and other applicable privacy laws. It describes:
Unless another controller is clearly identified for a specific service, the controller for personal data processed through the App is:
We have not publicly identified a separate data protection officer for the App. If that changes, we will update this Privacy Policy.
If you have questions about this Privacy Policy or want to exercise privacy rights, please contact the controller using the details above.
We process different categories of data depending on how you use the App.
The App stores your settings and preferences locally on your device, including:
When App features are used, the App may transmit data to our backend, including:
Our backend keeps a device-level record associated with the pseudonymous app token so that it can deliver content, reminders, and device authentication. The specific data fields held in that record may change as the App evolves; the categories of data and the purposes for which they are used are described in this Privacy Policy, and the current set of recipients and processing locations is published on the providers and recipients page referenced in Section 10.
The App uses third-party SDKs and platform services that may process data such as:
The specific service providers and other recipients involved, their roles, the categories of data each receives, the location of processing, and the transfer mechanism that applies are listed on the providers and recipients page referenced in Section 10.
Some topic selections may relate to personal interests or preferences, including themes such as well-being, relationships, faith, or health-oriented content. We use these selections only to return the content you request and to personalize your App experience.
We do not use the App to create a medical record, diagnose medical conditions, or make decisions producing legal or similarly significant effects. We do not intentionally use topic selections to infer sensitive-category facts beyond what is necessary to deliver the content you choose to receive.
We collect personal data:
Where the GDPR applies, we rely on one or more of the following legal bases under Article 6 GDPR:
We generally use the data described above for the following purposes:
Where we rely on legitimate interests, those interests generally include operating, securing, maintaining, and improving the App and defending legal claims.
You do not need an account to use the App, and most of the data described above is generated automatically as you use the App rather than actively submitted by you. Some features, however, only work if the data they depend on is available:
If the data a feature depends on is not available — for example, because you decline a permission or choice, or do not complete a purchase — that feature may not work, or may work only in a limited way.
The App uses Google AdMob and Google's User Messaging Platform ("UMP") to help present and manage certain advertising-related privacy notices, consent prompts, and privacy options.
Whether such notices, prompts, or options are shown may depend on your region, applicable law, and the configuration of the privacy messages used in the App.
Your privacy choices may affect whether certain ads can be requested or shown. Some free features of the App depend on ad-supported flows, so declining or changing certain advertising-related choices may affect access to those free features.
You can review or update your advertising-related privacy choices from within the App through the privacy options flow. This flow is available to users shown the European regulations consent message (typically users in the EEA, the United Kingdom, or Switzerland), where applicable law requires it; in other regions it may not be shown. You may also be able to use device-level controls provided by Android or Google.
The UMP consent message also governs crash reporting in the App. For users shown the European regulations consent message (typically users in the EEA, the United Kingdom, or Switzerland), Google Firebase Crashlytics is used only after you give consent for the "Develop and improve services" purpose in that message. Crash reporting is disabled by default for those users and is enabled only after consent is granted. You can change this choice at any time through the privacy options entry point in the App; if you revoke consent, crash reporting stops and any locally stored pending crash reports are discarded. For users outside those regions, crash reporting is enabled by default in line with the legitimate interests basis described in Section 5.
The UMP consent message also governs analytics collection in the App. The App uses Google Consent Mode to gate Google Firebase Analytics on a per-purpose basis covering analytics storage, advertising storage, ad user data, and ad personalization. For users shown the European regulations consent message, these purposes default to denied; analytics and related advertising data are processed only after you accept the corresponding purposes in that message, and the choice is communicated to Google's services through the IAB Transparency and Consent Framework. You can change these choices at any time through the privacy options entry point in the App; if you revoke a purpose, processing tied to that purpose stops. For users outside those regions, the analytics and advertising storage purposes are granted by default in line with the legitimate interests basis described in Section 5; ad user data and ad personalization remain governed by Google's region-based consent policy.
The UMP consent message also governs first-party usage measurement processed on our own backend infrastructure. For users shown the European regulations consent message, this measurement is disabled by default and is enabled only after you give consent for the "Measure content performance" purpose in that message. You can change this choice at any time through the privacy options entry point in the App; if you revoke consent, first-party usage measurement on our backend stops for the App on that device. For users outside those regions, this measurement is enabled by default in line with the legitimate interests basis described in Section 5.
If processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before withdrawal.
If you enable reminders or notifications, the App may use your notification permission together with your push-notification registration data, reminder time, and timezone to support notification delivery and reminder scheduling.
If you do not want to receive notifications, you can disable them in your device settings.
Premium purchases and subscription payments are processed through Google Play, not directly by us.
To enable and validate premium access, the App and our backend may process purchase-related identifiers and subscription metadata, including subscription purchase identifiers and status information. This processing is used to confirm entitlement, manage premium access, and support subscription-related functionality.
We process this data only to the extent needed to confirm and manage your entitlement, and retain it as described in Section 12 (Data Retention).
Google Play and related Google services process data under their own terms and privacy documentation.
We may share personal data with recipients or categories of recipients such as:
We share data only to the extent reasonably necessary for the purposes described in this Privacy Policy.
A current list of the specific service providers and other recipients used in connection with the App, including their roles, the categories of data each receives, the location of processing, and the transfer mechanism that applies, is published at Processors and Recipients page, We update that page when material providers or recipients are added, replaced, or removed.
The App and its service providers may process personal data in countries other than the country where you are located, including outside the European Economic Area ("EEA"). In particular, some of our analytics, advertising, content delivery, and infrastructure providers process data in the United States.
Processing personal data outside the EEA is permitted under the GDPR when the data is protected by appropriate safeguards; what matters is not the location itself, but whether your data keeps a level of protection essentially equivalent to that guaranteed within the EEA. Where required by applicable law, we rely on one or more of the following safeguards for such transfers:
So where your data is processed outside the EEA, including in the United States, it is handled under one of these recognized safeguards rather than without protection.
The specific transfer mechanism that applies to each listed provider or recipient is shown on the published providers and recipients page referenced in Section 10.
You may contact us if you want more information about, or a copy of, the safeguards used for a particular transfer.
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy.
In practice, this generally means:
We may retain certain information longer where required by law, needed for legal claims, or kept in backups and disaster-recovery systems for a limited period.
The App provides a privacy center within the App settings for all users.
Through that privacy center, you can:
Because the App does not use accounts and your data is associated only with a pseudonymous on-device identifier, deletion is provided as a self-service action within the App. When you delete your data, the App removes the backend device-level record associated with the App and clears the App data stored locally on your device in a single step, and this takes effect immediately.
Data export provides the data held in the backend device-level record associated with the App.
Some information may nevertheless be retained where required by law, necessary for fraud prevention or security, needed to establish, exercise, or defend legal claims, or retained for limited backup and disaster-recovery purposes.
Step-by-step instructions for deleting your data are also published at Data deletion page.
We use technical and organizational measures designed to protect data processed through the App. These measures may include encrypted communications, access controls, logging, monitoring, and other security safeguards.
No method of transmission, storage, or security control is guaranteed to be completely secure, and we cannot guarantee absolute security.
The App uses automated logic to personalize content based on your selected topics and settings, and to operate advertising and subscription flows (for example, ad selection and subscription validation). Where advertising involves profiling, it is governed by your consent and privacy choices as described in Section 7.
We do not carry out solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
Depending on your location and applicable law, you may have rights regarding your personal data, including the right to:
Because the controller is established in Poland, you may lodge a complaint with the President of the Personal Data Protection Office (UODO). You may also lodge a complaint with the supervisory authority in the EU/EEA country where you live or work, or where the alleged infringement took place.
You can exercise available controls by:
The App provides self-service access (data export) and erasure (data deletion) tools, which you can use directly from the privacy center in the App settings. You can also correct or update much of your data — such as your selected topics, reminder settings, theme, and other preferences — by editing it directly in the App.
For rights that do not have a dedicated in-App control — including restriction of processing, objection to processing based on legitimate interests, and rectification of data you cannot edit yourself — you can contact us at kluj.napoku@gmail.com, and we will act on your request in accordance with applicable law. Contact-based requests also remain available for any other privacy questions or complaints.
We may need to verify your identity before acting on a request. Because the App does not use accounts, your data is identified by a pseudonymous device token. When you use the in-App "contact us" option to send a privacy request by email, the App automatically includes this token in your message, which lets us locate the corresponding device record. If you contact us by other means, we may ask you to provide this token. As permitted under Article 11(2) GDPR, where we cannot identify your data using the information provided, some rights may not apply unless you give us additional information that enables identification.
Where the GDPR applies, we generally respond without undue delay and within one month of receiving a valid request, subject to extensions permitted by law.
The App is intended for adult users and is not directed to individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18.
If we become aware that personal data has been collected from an individual under 18, we will take reasonable steps to delete that data and to stop any associated processing. Because the App does not use accounts and data is associated only with a pseudonymous on-device identifier (see Section 13), such data is deleted using the same installation-level deletion mechanism, which removes the backend device-level record and clears the data stored on that device.
If you are a parent or legal guardian and believe that a minor has provided personal data through the App, you can delete that data directly using the in-App deletion option on the child's device, or contact kluj.napoku@gmail.com so that we can investigate and assist. Because the data is pseudonymous and is not linked to identity, we may need information that helps identify the relevant app installation in order to act on a request sent by email.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Material changes may also be communicated through the App or by other appropriate means where required.
For privacy questions, requests, or complaints, please contact us at kluj.napoku@gmail.com. The full identity and address of the controller are set out in Section 2 (Data Controller).