Privacy Policy for “Dial”
Last updated: October 2026 · Deutsche Fassung
Controller
Birkan Sahin
Westfälische Str. 27
59269 Beckum, Germany
Email: support@get-dial.com
In short
Dial stores everything you enter on your device. There is no advertising, no third-party tracking and no third-party analytics. Only if you explicitly agree does Dial count, on our own server, when and how you use the app – never what you enter (see “Usage statistics”). An account is optional. If you sign in, our own server stores your email address and a backup of your data (readable only by you). The app loads things from the internet only for: the map while running or cycling, and – only if you set them up – club fixtures, calendar links, school timetables and book search (see below). Nothing is sent about you except the request itself.
Data the app stores
On your device, in the app’s database:
- events and todos
- activities with stopwatch and measurements (e.g. pages read, sets, kilometers)
- for runs, rides and hikes: the route with time, elevation and (if a chest strap is connected) heart rate, shown as a chart, in the summary and as a GPX file
- books (title, author, length, ISBN, cover address, status, rating, review) and quotes
- your body weight over time (manual, or from Apple Health / Health Connect)
- your settings, favorite activities, name and profile picture (name and picture optional)
- workout templates
- optionally your wake-up and bedtime
- cached fixtures and calendar links (so they work offline)
This data does not leave your device (exception: account and backup, see below). If you delete the app, it is gone.
Permissions and what they are for
| Permission | Purpose | What happens with the data |
|---|---|---|
| Notifications | Reminders shortly before an event, activities that start automatically, workout prompts, timetable alerts for cancellations, room changes or new exams | Reminders are scheduled by the device from data on the device, without a server. For timetable alerts Dial fetches your timetable directly from WebUntis in the background and compares it on the device with the last state. |
| Location | Counting kilometers while running, cycling and hiking, route and elevation profile | Only while such an activity is running. Exact route points stay on this device; the activity contains a thinned-out route and goes into backup and sync between your own devices. It leaves them only if you share it or switch on Apple Health, intervals.icu or Runalyze. |
| Map (internet) | Map while running, cycling and hiking, optionally with relief and saved offline | Map data comes from OpenFreeMap (tiles.openfreemap.org; © OpenMapTiles and OpenStreetMap contributors), relief (only if you enable it) from “Terrain Tiles” on Amazon Web Services (s3.amazonaws.com). These providers learn your IP address and the map area you view, so roughly where you are. Your route itself is not sent. |
| Photos and camera | Choosing or taking a profile picture, scanning a book barcode (ISBN) or a WebUntis QR code, photographing a quote from a book page | Recognition happens only on the device (Apple Vision, or Google ML Kit on Android). No camera image is stored, only the recognized text or code. |
| Motion and fitness (sports only) | Detecting whether you are moving: auto-pause, steps and distance on a treadmill, whether you are really working out | Read only while such an activity runs. Motion data stays on the device and is not stored or sent; only the counted activity time is stored. |
| Bluetooth (only if you connect a chest strap) | Heart rate, heart rate zones and training load | Heart rate is a health value. It is stored with the activity and goes only where your activities go: backup, sync between your own devices and, if you enable it, the GPX file for intervals.icu or Runalyze. |
| Apple Health / Health Connect (only if you enable it) | Saving runs, rides, hikes and workouts with route and calories; reading body weight | Dial writes only activities recorded on this device and reads only body weight. The data is never used for advertising and not given to third parties. Use of Health Connect follows Google’s Health Connect policies, including the Limited Use requirements. |
| intervals.icu and Runalyze (only if you connect them) | Automatic upload of runs, rides and hikes | After each recorded activity with a route the app sends a GPX file directly to the service. You create the key or token there yourself; it is stored only in this device’s keychain. |
| Book search (internet, only when you search or scan) | Finding title, author, page count and cover | Your search term or ISBN goes to Open Library (openlibrary.org) and, if nothing is found, to Google Books (googleapis.com). These providers learn your IP address. |
| Files (only when you import or export) | Importing workouts from Strong/Hevy, books from Goodreads/StoryGraph, Kindle highlights and routes (GPX); sharing workouts as CSV and runs as GPX | The file is read only on the device. What you share goes where you share it. |
| Calendar (read and write) | Showing events from the iPhone calendars you select on the wheel; writing your Dial events into your own calendar “Dial” (can be switched off) | Only the calendars you select are read; Dial does not store these events permanently or send them anywhere. Writing happens only in the “Dial” calendar the app creates itself; other calendars are never changed. |
| Club fixtures (internet, only when you add or search a club) | Showing match times, results and club crests | Fixtures come from OpenLigaDB (api.openligadb.de) and TheSportsDB (thesportsdb.com), crests from there or from Wikimedia (upload.wikimedia.org). These providers learn your IP address and which club you query or search. Club names and crests are trademarks of the clubs; Dial is not affiliated with them. |
| WebUntis timetable (internet, only if you connect it) | Your lessons, cancellations and substitutions on the wheel and in the calendar | The app signs in directly to your school’s WebUntis server (Untis GmbH) and fetches your timetable and exams. Your password or key is stored only on this device (on iPhone in the keychain), not on our server, not in the backup and not in sync. In the web version WebUntis does not allow direct calls from the browser: requests then pass through our server, which only forwards them and stores or logs nothing. |
| Prayer times (location only if you choose “My location”) | Prayer times for your place on the wheel and in the calendar | The app calculates the times itself on the device. The location is determined only roughly (rounded to about 1 km) and stays on this device. If you search for a city not in the built-in list, only your search term goes to Open-Meteo (geocoding-api.open-meteo.com). |
| Calendar links (internet, only if you add one) | E.g. club fixtures, waste collection, school holidays | The app loads the link you enter from the provider behind it. That provider learns your IP address. |
| Alarm (only if you enable it) | Waking you at your wake-up time | The alarm is set only on the device (AlarmKit on iOS 26 and later, otherwise as a notification; on Android with “Alarms and reminders”). |
| Live Activity and widget | Showing events on the lock and home screen | Data is handed to the widget on the device, not over the internet. |
| Rating prompt | After you have completed your day on three different days, Dial asks once for an App Store review (at most every four months) | This uses the system dialog of Apple or Google. Dial only remembers on the device on which days you finished and when it last asked. Nothing is sent to us. |
| Microphone (voice input only) | Dictating an event or todo instead of typing | Dial records nothing and stores no audio; only the recognized text reaches the app. Speech recognition is done by your phone’s service (Apple on iPhone, Google on Android). Depending on device and language it may send what you say to its servers; Apple’s or Google’s privacy terms apply. Nothing goes to our server. |
You can withdraw any permission at any time in your phone’s settings. The app keeps working, just without that feature.
Sharing
When you use “Send as text”, your phone’s share sheet opens. What you send where is up to you; Dial transmits nothing by itself.
Account and server
An account is optional: Dial works without one, everything stays on your device and nothing goes to our server. If you want backup and sync between your devices, you create an account in the settings (email and password, Apple or Google). The server (PocketBase) runs at app.get-dial.com on a rented server of Contabo GmbH (data center in Nuremberg, Germany). It holds:
- your email address (for signing in)
- your name and, if you chose one, your profile picture; if you delete it in the app, it is also removed from the server
- the backup of your data
This version has no friends, groups, chats or shared plans. Earlier data on these, if any remains on the server, is removed when you delete your account.
The server does not store IP addresses in its logs. To protect against abuse, the number of sign-ins per IP address is briefly counted in memory. The server also remembers per account the day it was last connected (“last online”) and the time of the last request (“last active”, to the minute) – without history; both values are overwritten each time. They serve only operations (seeing which accounts are still in use and sizing the server); the legal basis is our legitimate interest in a working service (Art. 6(1)(f) GDPR). You can object (see “Your rights”). Every night a backup of the server is made on the same server; the last seven are kept.
Signing in and backup: When you sign in, the server stores your email address and your password only as a non-reversible hash (with Google or Apple, the address the provider gives us and an identifier from the provider). Emails (sign-in code, password reset) are sent on our behalf by our service provider Brevo (Sendinblue SAS, Paris, France), which receives your email address and the content of the email. We do not send you emails without reason. While you are signed in, the app saves a backup of all your data on the server (about two minutes after a change and when you leave the app) so that you get it back on a new device or after reinstalling. Only you can access your backups; the last three are kept. If you are signed in on several devices, the app also syncs your events, todos, projects, activities, notes and settings through the server. Legal basis is performance of the user contract (Art. 6(1)(b) GDPR). When you sign out, data is backed up first, then removed from the device and comes back at your next sign-in.
Deleting: Under Settings → “Delete account” you delete your account with everything attached to it – including backups and sync – from the server immediately. After that the device is empty if you were signed in. From the nightly backups it disappears after seven days at the latest.
Usage statistics (only with your consent)
After signing in, Dial asks once: “Share usage?” Only if you choose “Share” does the app count how it is used, so we can see what is needed and improve Dial. If you choose “Don’t share”, nothing is collected; the app works the same.
What is counted: when you open and leave the app (with duration), which pages you open (only their name, e.g. “Calendar”) and which functions you use (e.g. “event created” with its category, “todo done”, “activity started” with its kind such as “running”). Also, per event, the time, your device’s time zone, the platform (iPhone, Android, browser) and the app version. Everything is tied to your account. Never included: content – no titles, texts, messages, names, places or routes; no advertising or device ID.
Error reports: With the same consent the app sends a short report to our server on an error or crash: the kind of error, a shortened list of places in the program code, whether the app was terminated, how often it occurred, the app version and the platform. Never included: the error message itself, file paths on your device or anything you entered. No third party (such as Crashlytics or Sentry) is involved.
Experiments: Sometimes we try two variants of a small detail. With your consent the app asks our server at start which variant you get; the assignment is fixed and derived from your account ID. Results are evaluated only in aggregate per variant.
How and where: The app collects events briefly on your device and sends them in bundles, encrypted, to our own server app.get-dial.com – to nobody else, no third party, no advertising, no resale. There is no tracking across other apps or websites.
Legal basis: your consent (Art. 6(1)(a) GDPR; for the brief storage on your device § 25(1) TDDDG). The server remembers whether and when you agreed, to be able to prove it.
Withdrawal: at any time in the app under Settings → Privacy → “Share usage”. The app then collects nothing more and everything sent so far (including error reports) is deleted from the server immediately (or once the server is reachable). Processing before withdrawal remains lawful.
Retention: at most 180 days, then the server deletes events and error reports automatically; immediately on withdrawal or account deletion. They disappear from the nightly backups after seven days at the latest.
Children
Dial is not aimed at children under 16 and does not knowingly collect their data. If you are under 16, choose “Share” at “Share usage?” only if your parents agree (Art. 8 GDPR).
Your rights
What is on your device you can change in the app at any time or remove by deleting the app. For data on the server you have the right of access, rectification, erasure, restriction, data portability and objection. You can delete it yourself in the app; for anything else write to the email address above. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes
If something changes in the app that affects privacy, we will update this policy beforehand.