Loggi is made by Moritz Wolf (“we”). This policy explains what happens to what you log. In short: there is no account, no advertising, no analytics and no tracking, and we never see your data.
What stays on your iPhone
Everything you create in Loggi — categories, entries, photos, goals and the display name you choose — is stored on your device. If iCloud is turned on for Loggi, it is also kept in your own iCloud account (Apple’s CloudKit private database) so it survives a new phone and reaches your other devices. That copy is protected by your Apple Account and governed by Apple’s privacy policy. We cannot read it.
What leaves it when you share a category
Sharing is off until you turn it on, one category at a time. When you share a category, or join one with a code, Loggi stores the following in the app’s own CloudKit public database:
- the category’s definition: its name, colour, questions, pictures and shared goals;
- the entries you log in it, including any photos attached to them;
- your display name, and an anonymous identifier that Apple provides for this app.
All of it except the anonymous identifier is end-to-end encrypted on your iPhone before it is stored, with a key that belongs to that one shared category. Only the people in the share hold that key, so they are the only ones who can read it — we, the developer, cannot, and neither can Apple. Anyone joining needs the share’s code and the owner’s approval: the owner’s iPhone hands them the key only once the owner agrees, and when somebody leaves or is removed, the share moves to a new key they do not get. What stays readable is what CloudKit needs to deliver it: the anonymous identifiers of who is in a share, and when things were written.
Entries and categories you never share are never stored there.
Notifications
In a shared category you can ask to be notified when someone asks to join, or when someone else adds an entry. Alerts for new entries are off until you turn them on; alerts for join requests are on for categories you own, and you can switch either off per category. Loggi asks for permission to show notifications first. They are delivered by Apple’s push service and carry no content: the message that travels is a fixed, generic sentence plus the anonymous identifier of who did it. Your iPhone fills in the category and the person’s name itself, from what it already holds.
Create with AI
A new category can be filled in from a sentence you type. This uses Apple’s on-device model only — not Private Cloud Compute and not any server — so what you type never leaves your iPhone. Nothing is saved until you save the category.
What we do not do
- We do not collect analytics or usage data. If you have chosen in your iPhone’s settings to share analytics with app developers, Apple may pass us anonymous crash reports.
- We do not use advertising or tracking, and Loggi contains no third-party SDKs.
- We do not sell or pass on any data.
Camera and photos
Loggi asks for the camera or photo library only when you add a photo to an entry or choose a picture for a question. Pictures are stored as described above. Loggi does not use your location, contacts, microphone or Apple Health.
Deleting your data
- Delete an entry, a goal or a category in the app and it is removed from your device and your iCloud.
- Leaving a shared category withdraws everything you wrote to it from the share; you keep your own copy on your iPhone. You can also delete your own shared entries at any time, and they disappear for everyone.
- When the owner stops sharing a category, everything they wrote to it is withdrawn from the share, and everyone keeps a private copy.
- Deleting the app removes the local copy; to remove the iCloud copy, go to Settings → [your name] → iCloud → Manage Storage → Loggi.
Children
Loggi is not directed at children under 13 and does not knowingly collect personal information from them.
Changes and contact
If this policy changes, the new version will be posted here with a new date.
Questions: apps@moritzwolf.com