Privacy Policy
Privacy Policy for Ladna
Effective date: 27 September 2026
Last updated: 27 September 2026
This Privacy Policy explains how Ladna (“Ladna”, “the App”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you use our iOS application, the related web application (where available), our website and associated services.
Ladna is a personal self-management and life planning application. It helps you organize goals, tasks, habits, moods, health-related lifestyle entries, expenses and budgets, hobbies and shared spaces, and offers optional AI features such as a weekly review and the import of handwritten planner pages.
Ladna is not a medical, psychological, therapeutic, financial, legal or other professional advice service. Content, plans, suggestions or reviews provided by the App, including AI-generated content, are for personal organization and informational purposes only.
1. Controller
The controller responsible for the processing of your personal data is:
Viktor Nazilin
Franklin-D.-Roosevelt-Straße 104
68309 Mannheim
Germany
Email: viktor.nazilin@icloud.com
If you have any questions about this Privacy Policy or how your personal data is processed, you can contact us at the email address above. We have not appointed a data protection officer because we are not legally required to do so.
2. Scope of this Privacy Policy
This Privacy Policy applies to:
- the Ladna iOS application;
- the related web application, where available;
- the Ladna website and landing pages, including the waitlist form;
- account registration and sign-in (email and password, Sign in with Apple, Sign in with Google);
- the Ladna Premium subscription and free trial;
- reminders and push notifications;
- shared spaces and invitations;
- the AI weekly review;
- the import of photographed planner, diary or notebook pages (OCR);
- support and communication with us.
This Privacy Policy does not apply to third-party websites, platforms or services that we do not control, such as the Apple App Store.
3. Summary
The following summary is provided for convenience. The full Privacy Policy below remains authoritative.
- We do not sell your personal data and do not use it for advertising or cross-app tracking.
- We do not use any analytics or advertising SDKs in the App.
- Your data is stored with Supabase in the EU (Stockholm, eu-north-1).
- Selected text you enter (for example task titles, notes and mood notes) is encrypted on your device before it is stored.
- Payments for Ladna Premium are processed exclusively by Apple. We never see your payment card details. We use RevenueCat to check your subscription status.
- AI features are optional. The AI weekly review is only created after you give your consent. Mood notes, well-being answers and financial data are not sent to the AI provider.
- Photos of planner pages are deleted from our storage immediately after text recognition.
- You can export your data and delete your account directly in the App.
4. Data We Process
Depending on which features you use, we process the following categories of personal data.
4.1 Account and profile data
- email address;
- user ID;
- name, if you provide it or if it is shared by Apple or Google when you sign in;
- the sign-in method you use (email, Apple or Google);
- authentication and session data;
- preferred language and app settings, including notification settings;
- onboarding answers and selected life areas.
4.2 Sign in with Apple and Sign in with Google
If you sign in with Apple, Apple provides us with a unique user identifier, an identity token and, if you choose to share them, your name and email address. You can use Apple’s “Hide My Email” option, in which case we receive a relay address. When you delete your Ladna account, we revoke the connection between your Apple ID and Ladna via Apple’s token revocation interface.
If you sign in with Google, Google provides us with a unique user identifier, an identity token, your name and your email address. We do not receive your Google password. Sign-in via Google does not give Ladna access to your Google Calendar or other Google data.
4.3 Goals, tasks and productivity data
- goals, long-term goals and daily tasks;
- task titles, descriptions and notes;
- life areas, categories, priorities and importance values;
- planned date, start time, duration and completion status;
- links between tasks and larger goals.
4.4 Habits
- habit names and notes;
- daily habit entries and completion records.
4.5 Mood, reflection and self-assessment data
- mood entries and emotional state values;
- mood notes and daily check-in reflections;
- answers to self-assessment questions;
- related dates and timestamps.
These features are intended for self-organization and self-reflection only. They do not provide medical, psychological or therapeutic assessment, diagnosis or treatment.
4.6 Health-related lifestyle data
- daily calorie targets;
- meal entries and meal descriptions;
- water intake entries;
- calories burned and related notes.
4.7 Financial planning and expense data
- income and expense entries you enter manually, including future-dated entries;
- amounts, dates, categories and transaction notes;
- budget jars and allocations;
- shopping list and wishlist items, including titles, descriptions and store names.
Ladna does not connect to your bank and does not receive any data from financial institutions.
4.8 Hobbies
- hobby titles and weekly time goals;
- time entries and notes.
4.9 Shared spaces
- space name, description, icon, color and validity period;
- members, their roles (owner, admin, member, viewer) and your membership;
- email addresses of people you invite, and the status of invitations;
- tasks and other content that members add to the space.
4.10 AI weekly reviews
- your AI consent status, the consent version and the time of consent;
- the generated weekly review (what went well, what got in the way, focus and suggested tasks), stored encrypted;
- technical records of review generations (user ID, week, time, AI model) used to enforce the limit of three generations per week.
4.11 Journal photos and recognized text
- photos of planner, diary or notebook pages that you choose to import (stored only temporarily);
- the recognized text and the task suggestions derived from it (not stored on our servers unless you save tasks).
4.12 Subscription and purchase data
- your subscription status (for example trial, active, expired, cancelled);
- the product purchased, purchase and expiry dates, renewal status, trial status;
- App Store transaction identifiers, price, currency and storefront country;
- your Ladna user ID, which is used as the customer identifier at RevenueCat;
- whether your account has been granted free access (for example as an early user).
We do not receive or store your payment card details, bank details or Apple ID password. Payment is handled entirely by Apple.
4.13 Notification data
- your notification settings (for example reminder lead time, evening check-in time, daily overview time);
- a push token for your device, the platform (for example iOS) and your app language, so that push messages reach your device in the right language.
4.14 Technical and device data
- device type, operating system and app version;
- browser information, if you use the web application or website;
- IP address;
- timestamps, server logs, error logs, security and authentication logs.
4.15 Apple diagnostics
If you have enabled sharing with app developers on your device, Apple may provide us with anonymized crash reports and performance information. This is handled according to your Apple privacy settings.
4.16 Website waitlist
If you join the waitlist on our website, we store the email address you enter and the time of registration.
5. Local Encryption
Ladna encrypts selected user-generated text on your device (AES-256) before it is stored in our database. The encrypted content is stored in fields such asencrypted_payload, and the original text columns contain only a placeholder such as[encrypted].
This currently includes, for example:
- titles, descriptions and notes of goals and tasks;
- mood notes and self-assessment answers;
- habit names and notes;
- transaction notes;
- shopping item titles, descriptions and store names;
- hobby titles and notes;
- meal descriptions and calorie burn notes;
- AI weekly reviews.
Not all data is encrypted. Metadata that the App needs for synchronization, filtering and statistics remains unencrypted, for example dates, completion status, life areas, categories, amounts, calorie values, minutes, water quantity, importance values, IDs and timestamps. Account data, subscription data, push tokens and shared-space membership data are also not encrypted on the device. Local encryption reduces the amount of readable content in our backend but does not make the data anonymous.
6. Purposes of Processing
- to create and manage your account and let you sign in;
- to provide the App’s features and store, sync and display your content;
- to provide and manage your Ladna Premium subscription and free trial;
- to send reminders and notifications you have enabled;
- to enable shared spaces and invitations;
- to create AI weekly reviews if you have consented;
- to recognize text on planner pages you import and suggest tasks;
- to provide data export and account deletion;
- to keep the service secure and stable and prevent misuse;
- to answer support requests;
- to comply with legal obligations.
7. Legal Bases
| Processing activity | Legal basis (GDPR) |
|---|---|
| Account, sign-in (including Apple and Google), core App features, storage and sync of your content | Performance of a contract, Art. 6(1)(b) |
| Ladna Premium subscription, trial and access check via RevenueCat | Performance of a contract, Art. 6(1)(b) |
| Retention of purchase-related records | Legal obligation, Art. 6(1)(c), where applicable |
| Reminders and push notifications | Performance of a contract, Art. 6(1)(b); your permission in iOS settings is required |
| Shared spaces and invitations, including the invitee’s email address | Performance of a contract towards the inviting user, Art. 6(1)(b); legitimate interest in enabling collaboration, Art. 6(1)(f) |
| AI weekly review (transfer to OpenAI) | Consent, Art. 6(1)(a) |
| Journal photo import (Google Cloud Vision, OpenAI) | Performance of a contract, Art. 6(1)(b) — you actively start the import |
| Mood and health-related lifestyle entries | Explicit consent, Art. 9(2)(a), where such data qualifies as special category data |
| Security, abuse prevention, technical logs | Legitimate interests, Art. 6(1)(f) |
| Support communication | Art. 6(1)(b) or Art. 6(1)(f) |
| Website waitlist | Consent, Art. 6(1)(a) |
Where we rely on consent, you can withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal.
8. AI Weekly Review
The AI weekly review summarizes your week (what went well, what got in the way, a focus for next week) and suggests tasks. It is optional and is only created after you have given your consent in the App.
The weekly statistics are calculated on your device. To create the review, the App decrypts the relevant content locally and sends the following data via our server function to OpenAI:
- aggregated weekly statistics (for example completed and open tasks, time per life area, active days);
- titles of your goals and tasks for the relevant period;
- your app language.
Not sent: mood notes, well-being or self-assessment answers, health-related entries and financial data. Your email address and name are also not sent.
The data is processed by OpenAI in the USA via the OpenAI API. According to OpenAI’s terms for API customers, data sent via the API is not used to train OpenAI’s models; OpenAI may retain it for up to 30 days to detect abuse. Our server function does not store the decrypted input. The finished review is encrypted and stored in our database. You can generate or refresh a review up to three times per week.
AI-generated content may be inaccurate or incomplete. It does not constitute professional advice. The AI weekly review does not make decisions with legal or similarly significant effects on you (Art. 22 GDPR). You can use Ladna without AI features. To withdraw your consent, contact us by email; we will then stop creating reviews for you.
9. Journal Photo Import (OCR)
You can photograph a page of a paper planner, diary or notebook to turn handwritten entries into tasks. When you start an import:
- the photo is uploaded to a private (non-public) storage area in our Supabase project;
- our server function sends the photo to Google Cloud Vision to recognize the text;
- the photo is deleted from our storage immediately after recognition;
- the recognized text is sent via our server function to OpenAI to clean it up and suggest structured tasks;
- the suggestions are shown to you for review — tasks are only saved when you confirm them.
Please only photograph pages that you need for the import and avoid pages containing information about other people, health information, payment card details or identity documents.
10. Ladna Premium Subscription and Payments
Ladna is offered as an auto-renewable subscription (“Ladna Premium”) with a free trial for eligible new subscribers. Purchases are made via Apple’s In-App Purchase system. Apple processes the payment as the seller and handles billing, renewals, cancellations and refunds. The processing of your data by Apple is governed by Apple’s privacy policy (apple.com/legal/privacy).
We use RevenueCat (RevenueCat, Inc., USA) to validate purchases and determine whether your account has access to Ladna Premium. For this purpose, RevenueCat receives your Ladna user ID, App Store transaction and subscription data, the storefront country and basic device information (for example platform, operating system and app version) and IP address. RevenueCat acts as our processor. More information: revenuecat.com/privacy.
Some accounts may be granted free access (for example early users). This is stored as a flag on your account.
Important: deleting your Ladna account does not cancel your subscription. Please cancel it in your Apple ID settings (Settings → [your name] → Subscriptions).
11. Reminders and Push Notifications
Ladna asks for your permission before sending notifications. You can change this at any time in iOS settings and adjust individual reminders in your Ladna profile.
- Local notifications (task reminders, evening check-in, habit reminders, daily overview) are scheduled on your device. Their content is not sent to our servers for this purpose.
- Push notifications (for example about activity or invitations in shared spaces) are sent via Firebase Cloud Messaging (Google). For this we store your device’s push token, platform and app language. The notification content passes through Apple Push Notification service and Google.
We use Firebase exclusively for push delivery. We do not use Firebase Analytics or any other Firebase tracking features. Push tokens are deleted when you delete your account or when they become invalid.
12. Shared Spaces
You can create shared spaces (for example for your household, family or a trip) and invite other Ladna users by email. Content that you add to a shared space — such as tasks — is visible to all members of that space according to their role. Your name or email address may be visible to other members. Please only invite people who agree to it and only share content in a space that you want its members to see.
If you invite someone, we process their email address to deliver and display the invitation. If they do not accept, the invitation can be declined or deleted.
13. Mood, Well-being and Health-Related Data
Mood entries, reflections, self-assessment answers and health-related lifestyle entries (meals, water intake, calories) can be sensitive. We use them only to provide the features you choose to use, such as tracking, progress views and reports. Notes and answers are encrypted on your device; numeric values and dates remain unencrypted because the features need them.
This data is not sent to AI providers. Ladna does not diagnose, treat, prevent or monitor diseases and is not a medical device, therapy or counselling service. If you have medical or psychological concerns, please consult a qualified professional.
14. Financial Entries
Expense, income and budget entries are entered manually by you and serve personal organization only. Transaction notes and shopping item texts are encrypted on your device; amounts, dates and categories remain unencrypted because they are needed for statistics. Please do not enter payment card details, bank credentials or identification numbers. Ladna does not provide financial, tax or legal advice.
15. Google Calendar Integration
The Google Calendar integration is not available in the current version of the App. If we enable it in a future version, the following applies:
- the connection is established only at your explicit request, and Google asks you to grant access;
- Ladna reads calendar events only to import them as tasks you select, and writes events only to export tasks you select;
- access tokens remain on your device; we do not store your calendar data on our servers except for the tasks you choose to import;
- you can revoke access at any time in your Google account settings.
Ladna’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google APIs is not used for advertising, not sold, not transferred to third parties except as necessary to provide the feature, not used to train AI models and not read by humans except with your consent, for security purposes or where required by law.
16. Service Providers
We use the following service providers. Where they act as processors, we have concluded data processing agreements with them.
| Provider | Purpose |
|---|---|
| Supabase (Supabase, Inc., USA; data hosted in the EU, Stockholm, eu-north-1) | Database, authentication, file storage, server functions |
| OpenAI (processing in the USA) | AI weekly review; structuring of recognized journal text into task suggestions |
| Google Cloud Vision (Google) | Text recognition on imported journal photos |
| Firebase Cloud Messaging (Google) | Delivery of push notifications |
| RevenueCat (RevenueCat, Inc., USA) | Purchase validation and subscription status for Ladna Premium |
| Apple (Apple Inc. / Apple Distribution International Ltd.) | App Store distribution, In-App Purchase and billing, Sign in with Apple, push notification delivery (APNs), diagnostics if enabled |
| Google (Google LLC / Google Ireland Ltd.) | Sign in with Google |
| Vercel (Vercel Inc., USA) | Hosting of the website and legal pages |
Apple acts as an independent controller for App Store purchases and Sign in with Apple; Google acts as an independent controller for Sign in with Google.
17. International Data Transfers
Some providers process data in the USA or grant access from there. Where the provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). Otherwise, we rely on Standard Contractual Clauses (Art. 46(2)(c) GDPR) and additional safeguards. For the AI weekly review, the transfer to OpenAI is additionally covered by your consent. You can contact us for more information.
18. Data Retention
| Data category | Retention period |
|---|---|
| Account and profile data | Until account deletion |
| Goals, tasks, habits, moods, health, finance and hobby entries | Until you delete them or your account |
| AI weekly reviews | Until you delete your account |
| Records of AI review generations | Until account deletion; used only for the weekly limit |
| Journal photos | Deleted immediately after text recognition |
| Recognized journal text and suggestions | Not stored on our servers; only tasks you confirm are saved |
| Push tokens | Until account deletion or until the token becomes invalid |
| Subscription data at RevenueCat | For the duration of the customer relationship and as required by statutory retention obligations; deletion on request |
| Shared space content | Until deleted by a member with permission or until the space is deleted |
| Technical logs | Usually up to 90 days, unless needed longer for security reasons |
| Support emails | Up to 12 months after the request is resolved |
| Waitlist email addresses | Until you unsubscribe or the waitlist is closed |
19. Account Deletion
You can delete your account at any time in the App (Profile → Delete account). This permanently deletes your account and the content associated with it, including encrypted content, weekly reviews and push tokens. If you signed in with Apple, we also revoke Ladna’s access to your Apple ID. Content you created in spaces owned by others may be removed or remain in the space without your association, depending on the space.
Deleting your account does not cancel an active Ladna Premium subscription — please cancel it in your Apple ID settings. Backups are overwritten according to our provider’s backup cycle.
20. Data Export
In your profile you can export a copy of your main data (goals, tasks, mood entries, expenses and weekly reviews) as a file. Encrypted content is decrypted on your device for the export. For a complete copy of all data we hold about you, contact us by email.
21. Your Rights
- right of access (Art. 15 GDPR);
- right to rectification (Art. 16 GDPR);
- right to erasure (Art. 17 GDPR);
- right to restriction of processing (Art. 18 GDPR);
- right to data portability (Art. 20 GDPR);
- right to object to processing based on legitimate interests (Art. 21 GDPR);
- right to withdraw consent at any time (Art. 7(3) GDPR);
- right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
To exercise your rights, contact us at viktor.nazilin@icloud.com. We may need to verify your identity. The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart
Germany
You may also contact the supervisory authority in your country of residence.
22. Children
Ladna is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us.
23. Security
- encrypted transmission (TLS);
- client-side encryption of selected content;
- Row Level Security in the database, so each account can access only its own data and the spaces it is a member of;
- API keys for AI and OCR providers are kept on the server only;
- private file storage with automatic deletion of journal photos;
- access to personal data limited to what is necessary.
No system is completely secure. Please keep your login credentials and your device secure.
24. Analytics and Tracking
The App does not use analytics, advertising or tracking SDKs and does not track you across apps or websites owned by other companies. Our website does not use cookies for tracking. If this changes, we will update this Privacy Policy and ask for your consent where required.
25. Changes to This Privacy Policy
We may update this Privacy Policy if we change features, providers or processing activities, or if the law changes. The current version is always available in the App and on our website. We may inform you in the App about material changes.
26. Contact
Viktor Nazilin
Franklin-D.-Roosevelt-Straße 104
68309 Mannheim
Germany
Email: viktor.nazilin@icloud.com