Privacy policy

As of 13 November 2026

In short

Succedo keeps your tasks, progress and profile photo on your phone. To use the app you need an account with an e-mail address (if you choose to sign in with Google, your Google address is used). With it, this is kept on our server: your e-mail address, your username, a few numbers about your progress, your profile photo if you chose one, what you share with friends, and a copy of your progress for another phone (cloud save); see “Account”. There are no analytics tools. Crash reports go to Sentry without your name or tasks; see “Crash reports”. Without Succedo Plus the app shows a few ads; see “Ads”.

Who is responsible

The controller under the GDPR is Fabian Hufnagl (sole proprietorship), Hauptstraße 38/10, 2000 Stockerau, Austria. Email: succedoapp@gmail.com.

What the app keeps on your phone

The name you enter, your tasks and when you did them, your XP, streak, rewards and settings. Optionally a profile picture, which is cropped and stored only on your phone.

You can delete all of it at any time by deleting the app.

Account

To use the app you create an account with an e-mail address and a password when you first start it; we confirm the address with a code sent to it. If you choose to sign in with Google instead, see “Signing in with Google”. The account keeps the leaderboards fair, lets you play with friends and brings your progress back on another phone (cloud save). Without an account the app cannot be used. You must be 14 or older.

Kept on our server: the username you choose, your friend ID, whether anyone can find you, your level, total XP, XP this week, your streak, the looks you wear (frame, title, avatar colour, Bizzy, pinned trophies), whether you share your activity and whether you use a test version, your weekly scores and the weeks you won on a world leaderboard; also your friends and friend requests, who you blocked, and reports you send. Your e-mail address and password; the password only in scrambled form (hashed), so nobody can read it. The cloud save: a copy of your whole progress (your tasks and when you did them, XP, rewards and settings, but not your profile photo), replaced by each new save. Your profile photo, if you chose one: other players who can see your profile see it too; removing it in the app or deleting the account deletes it. Before other players see a new photo, it is checked automatically for unsuitable content by Claude, an AI by Anthropic PBC (USA); only the photo is sent, and Anthropic does not use it to train its AI. Never your real name, your contacts or health data; your tasks only in the cloud save and as described next. To keep the account signed in, the server also handles a sign-in token and, for security, your IP address in short-lived logs.

Sharing with friends (only if you turn on “Share my activity with friends”): the names of the tasks you finish each day and how often, that day’s XP, levels you reach, streak milestones, challenges you finish and a weekly summary. Only your friends see them, in the Moments feed. They can react with an emoji, comment on them and like comments; you see who did. Moments are deleted after 35 days, with their reactions and comments; the notices about them and about friend requests after 90 days. Turning sharing off stops new moments at once.

Who sees it: with “Anyone can find me” on, other players can find your username, level, XP, streak and looks, and you appear in the world leaderboards; friends of your friends may also see you under “People you may know”. If you finish a week as #1 of a world leaderboard, your username, looks and score are shown there as last week’s winner. With it off, only your friends can, and people you gave your friend ID can send you a request. Your friends always see your weekly XP and place on their friends leaderboard. Your QR code is made on your phone and only holds your friend ID. If you report someone, we see your report; the reported player is not told who sent it.

Playing together: when you cheer a friend on, they see it was you and get a push. In a Faulpelz team the members see each other and the Motivation each one gave; the server keeps the teams, invitations, the Motivation given each week and the Pollen paid out. For the monthly goal it keeps how much XP you gave each day. For team tasks and gifts from the Succedo team it keeps which ones you were sent and whether you took them.

E-mail: to confirm your address and to reset your password, we send you a code through Brevo (Sendinblue SAS, France), our processor in the EU. We use your address only for signing in and for messages about your account, never for advertising.

Pushes (only if you allow them on your phone): a push address for your phone (push token), your app language and time zone are kept with the account, so friends’ hearts, comments, requests and cheers and the Faulpelz reminders reach you in your language at a sensible time. You can turn kinds of pushes off in Settings. They are sent through Expo (650 Industries Inc., USA) and Google’s or Apple’s push service; the transfer to the USA is covered by the EU Standard Contractual Clauses. Signing out or deleting the account removes the push address.

Why: to provide the features you ask for (Art. 6(1)(b) GDPR). The server is run for us by Supabase Inc. as our processor, in Frankfurt (EU). Supabase is a US company; any access from outside the EU is covered by the EU Standard Contractual Clauses.

Usage and items (with an account only): which looks, bag items and combs you own, and for each day you open the app: the date, the app language, Android or iPhone, which tabs and parts of the app you used (for example the Faulpelz, Moments, photo proof, health or screen time, never what was in them) and how many tasks you ticked (never their names), and once each when you finished the setup, ticked your first task and your third; and which connections to other apps you tapped “Want it” on. We use this to see which features are used and wanted, to count who owns which item and to spot cheating (Art. 6(1)(f) GDPR, our legitimate interest in running and improving the app fairly). The server compares your looks with your level, streak, photo proofs and wins; a frame, title or flame it can’t match isn’t shown to other players. Only the Succedo team sees it. The daily rows are kept 90 days, then only totals without any player remain; the rest is deleted with your account.

How long: until you delete the account in the menu under Account → Delete account. That deletes the data above from the server straight away, the cloud save included; your progress on the phone stays.

Signing in with Google (optional)

If you choose to sign in with Google, Google Ireland Ltd. confirms who you are and gives us your e-mail address, your name and a link to your Google profile picture (the scopes “openid”, “email” and “profile”). We use the e-mail address to create your account and sign you in. Your Google name and picture are kept with the sign-in data on our server (Supabase, Frankfurt), but they are not used and not shown to other players: in the app you choose your own username and photo. We never receive your Google password, your contacts or any other Google data.

We never sell this data, never use it for ads and share it only with the processors named in this policy, as far as needed to run the app. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can remove the app’s access in your Google account (myaccount.google.com/permissions); deleting your account deletes this data from our server.

Why: to provide the sign-in you choose (Art. 6(1)(b) GDPR).

Checking your own tasks

When you type in a task that is not in the library, only its title (for example “Fix the bike chain”) is sent through our server to Anthropic PBC (USA), whose AI model Claude estimates how long it takes and checks that it is a real task. Nothing that identifies you is sent with it. Our server keeps the title with its rating, without any link to you, so the same title doesn’t need to be checked again, and counts how many new titles you had checked today (deleted the next day). Anthropic does not use it to train its models and deletes it after at most 30 days. Please don’t put names or health details in task titles.

Why: to give fair XP and keep nonsense tasks out (Art. 6(1)(b) GDPR). Anthropic acts as our processor; the transfer to the USA is covered by the EU Standard Contractual Clauses.

Importing a list (optional)

If you import tasks from a photo, screenshot or text, that picture or text is sent through our server to Anthropic PBC (USA), whose AI model Claude finds the tasks in it. You then pick which tasks to add. Neither we nor Anthropic keep the picture or text for this: our server stores only how many imports you used today (deleted the next day), and Anthropic does not use it to train its models and deletes it after at most 30 days. Please don’t import pictures of other people or of sensitive documents.

Why: to provide the import you ask for (Art. 6(1)(b) GDPR). Anthropic acts as our processor; the transfer to the USA is covered by the EU Standard Contractual Clauses.

Photo proof (optional)

Some tasks can be proven with a photo for more XP. Only when you tap “Yes” is a photo taken with the camera, made smaller and sent through our server to Anthropic PBC (USA), whose AI checks whether it shows the task. The photo is not stored, neither on our server nor kept by us; Anthropic does not use it to train its AI and deletes it within 30 days. Please don’t photograph other people or private documents.

Kept on our server: when you used a check and whether it passed (to allow 5 checks a day), and, if you have an account, the XP of passed checks for the “Verified” leaderboard and your Faulpelz team. Deleted with your account.

For drawing, painting, colouring, calligraphy, craft and mood board tasks the AI also says where your work is in the photo, and the server keeps a print of each photo that passed: about 200 small spots of the work, each with its place and the pattern of light and dark around it. Not the photo itself and no preview; the photo can’t be made back from it. With it the server sees whether a new photo shows a picture you already showed, so the same picture doesn’t earn XP twice (Art. 6(1)(f) GDPR, our legitimate interest in fair leaderboards). Deleted after 30 days, or earlier with your account.

Why: to provide the feature you ask for (Art. 6(1)(b) GDPR). Anthropic is our processor; the transfer to the USA is covered by the EU Standard Contractual Clauses.

Apple Health and Health Connect (optional)

If you allow it, the app reads your steps of the day and last night’s sleep from Apple Health (iPhone) or Health Connect (Android), so tasks such as “Walk 8,000 steps” or “Sleep 7 hours” tick themselves. While such a task is on your list, it also reads today’s recorded workouts (their kind, length and the distance of walks and runs), floors climbed, whether a scale recorded a weight or a monitor a blood pressure (the values themselves are not used) and mindful minutes. Nothing is written. Values typed in by hand are left out, and only data from your phone, your watch and known health apps counts (for example Apple, Google, Samsung, Garmin, Fitbit, Withings, Oura, Strava); each record’s app name is used for this. With an account, the app also tells our server once a day which apps your steps and last night’s sleep came from and whether some values were typed in by hand (app names only, never a number), so the Succedo team can see which apps players connect; only totals over all players are shown. It is kept as one entry, replaced by the next, deleted 30 days after the last one or with your account.

The numbers are read on your phone while the app is open and are forgotten again: they are not saved, not sent to our server or anyone else, not used for ads and not shown to friends. What is kept is only that the task was done, like any task you tick (with an account also in the cloud save). If you have an account, its XP counts for the “Verified” leaderboard and your Faulpelz team; friends see a steps or workout task as done, sleep, weight and blood pressure tasks not at all.

Why: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR), which you give on the app’s own screen before your phone asks. You can withdraw it any time: Menu → Health and apps, or in Health / Health Connect.

Permissions

Notifications: reminders are scheduled on your phone, and with an account pushes come from friends (see “Account”), both only if you allow them.

Photos and camera: only when you choose a profile picture, import a list from a photo, or take a photo for photo proof.

Files: only when you save or restore a backup. The backup file contains all the data above, including your photo, and goes wherever you choose to put it. Keep it private.

Phone check (Android)

If you have an account and a health task or your screen-time goal ticks itself, the app checks each time it sends the task’s XP for the “Verified” leaderboard and your Faulpelz team that it is Succedo as installed from Google Play on a real phone that isn’t rooted. For this, Google Play Integrity (Google Ireland Ltd.) on your phone signs what is sent (your account and which tasks with how much XP, never a number from Health and never minutes or apps): Google receives details about the app and your phone (such as whether it is unchanged and whether the app came from Google Play) and tells our server the result. Our server keeps only whether your phone passed, the reason if not, and when, until the next check or until you delete your account, and how many checks you had today (deleted the next day).

Why: fair leaderboards, so nobody gets health XP with a changed app or made-up data (Art. 6(1)(f) GDPR, our legitimate interest). Google LLC (USA) may also process the data in the USA, covered by the EU-US Data Privacy Framework. If a phone doesn’t pass, its health and screen-time tasks still tick themselves and earn XP in the app; they just may not count for the “Verified” leaderboard.

Crash reports

When the app breaks, it sends a crash report to Sentry (Functional Software Inc., USA), which stores it in the EU (Germany): the error, where in the app it happened and what the app did just before, the app version, your phone model and its system version. No name, username, tasks, e-mail or photo. Reports are deleted after 90 days at most.

Why: to find and fix errors (Art. 6(1)(f) GDPR, our legitimate interest in an app that works). Sentry is our processor; any access from outside the EU is covered by the EU Standard Contractual Clauses.

Ads

Without Succedo Plus, ads show as cards in the app’s style: a few between the moments on the Friends tab, never on Today, never full screen. In the Honey Rush you can choose to watch an ad for 2 combs a day. The ads come from Google AdMob (Google Ireland Ltd.), which receives your device’s advertising ID, IP address, rough location, device details and how you interact with the ads.

Personalised ads only with your consent (Art. 6(1)(a) GDPR), asked in Google’s window in the EU and, on iPhone, in Apple’s tracking question. Without consent you see non-personalised ads, which still use some data to count views and prevent fraud (Art. 6(1)(f) GDPR). If you tell the app you are under 14, only non-personalised ads are shown and no consent is asked. Change your choice at any time in Settings → Ads and privacy. Google’s privacy policy: policies.google.com/privacy.

Succedo Plus

Purchases are made in the App Store or on Google Play; we never see your payment details. RevenueCat Inc. (USA) checks for us whether your subscription is active. It receives a random app user ID, the purchase receipt, the store and your device type (Art. 6(1)(b) GDPR), covered by the EU Standard Contractual Clauses.

App stores

Apple (App Store) and Google (Google Play) handle the download and, later, any purchases, under their own privacy policies. They may give us anonymous figures such as installs or crash reports. When the app asks for a rating, the store’s own window is used; we never reward ratings.

Our website

The website succedo.app is hosted for us by Cloudflare, Inc. (USA) as our processor. When you open it, Cloudflare processes your IP address, the page you open, the time and your browser details to deliver the page and protect it from attacks. The website sets no cookies, has no analytics, tracking or ads, and loads its fonts from its own server; we only see total numbers such as how many pages were opened. It remembers the language you pick in your browser’s own storage, and nowhere else. Why: to show the website safely (Art. 6(1)(f) GDPR, our legitimate interest). Cloudflare is certified under the EU-US Data Privacy Framework.

When you e-mail us, we use your address and message only to answer you and keep them as long as that takes. Our mailbox is provided by Google (Gmail, Google Ireland Ltd.).

Age

Succedo is meant for people aged 14 and over.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its use, and to data portability. Most of it is on your phone, where you can see, change and delete it in the app yourself; a backup file (Settings → Backup) holds a copy of all of it. Deleting the account (menu → Account) deletes it from our server. Write to us for anything else.

You can complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at) or the authority where you live.

Changes

Before new features are added, we will update this policy and ask for your consent in the app wherever it is needed.