Privacy Policy of the Organizr Website
This section describes the processing of personal data related to browsing the organizr.it website.
Data controller
The data controller is Allpromotion di Massimo Policano, Via Bruno Bottau 4, Castenaso (BO), Italy. Email: [email protected].
Data processed by the website
The website may process technical browsing data, IP address, browser information, cookie preferences and data collected by analytics tools only if the user gives consent.
Purposes
Data is used to display the website, protect its operation, save cookie preferences, and measure visits and page usage when the user enables analytics.
Cookies and third-party tools
Necessary cookies are used for the website to function and to save preferences. Analytics remain disabled until the user accepts them. More details are available in the Cookie Policy.
Payments and downloads
Purchase buttons may redirect to Stripe or other external payment services. Data processing on third-party platforms is governed by their respective privacy notices.
Support requests
When a user submits the support form, the website processes the information provided: full name, email address, optional phone number, support topic, platform or device, optional app version, optional order or invoice reference, subject, and message. This data is used exclusively to manage and reply to the support request and is retained only for as long as necessary to handle it and meet applicable legal obligations. The form is delivered through FormGate, the technical form handling service used by WonderWeb on behalf of the data controller. Users must not include passwords, payment card numbers, or recovery codes in their message.
Privacy Policy of the Organizr App
1. Data controller
The data controller is Allpromotion di Massimo Policano, Via Bruno Bottau 4, Castenaso (BO), Italy. Email: [email protected].
2. Type of application
Organizr is available as a native iOS app, with an Apple Watch companion, and as a desktop app. It is local-first: core data entered by the user is stored on the user's device. An optional Sync feature is available: if explicitly activated by the user, data is backed up to our secure server located in the European Union. Sync is disabled by default and must be enabled manually.
3. Data processed
3.1 Locally stored data (default mode)
By default, the app stores its main content on the user's device, including tasks and activities, subscriptions, wallet data, tracker and measurements, nutrition, recipes, workouts, reading, goals, wardrobe data, local images and app preferences.
In offline mode, this data is not transmitted to the controller or synchronized to an external server. When the user deliberately activates a cloud feature such as Organizr AI, Sync, Community, account or online lookup, only the data described for that feature is transmitted.
Photos stored in Tracker, Recipes or Wardrobe remain local and are intentionally excluded from Sync. This is separate from a photo that the user deliberately attaches to an Organizr AI message.
3.2 Cloud sync data (optional)
If the user explicitly activates the Sync feature, the data listed in section 3.1 is encrypted end-to-end and transmitted to our server located in the European Union (EU). Data is stored in encrypted form and is not accessible in plain text by the controller or any third party.
The legal basis for this processing is the user's explicit consent, given at the time of activating the Sync feature. The user can disable Sync at any time from the app settings, which stops any further transmission and allows requesting deletion of cloud data by contacting us at [email protected].
3.3 Technical connection data
The app may make limited network connections to check for updates. During this operation, IP address, technical device information and app version may be processed. Such data is used solely to provide updates and ensure the security and correct operation of the app.
Google Fonts: the app uses fonts provided by Google. This may involve a connection to Google's servers, with possible transmission of IP address and browser/webview information.
External API integrations (FatSecret, Hevy): the app allows the user to manually enter API credentials for third-party services such as FatSecret and Hevy. For FatSecret, the user may authenticate via an external browser.
Data imported through integrations such as Hevy or FatSecret becomes local app data and is not automatically sent to Organizr servers. Data processing performed directly by those services is governed by their respective privacy policies.
3.4 Photos and files sent to Organizr AI
Organizr does not automatically inspect or upload the user's photo library, camera roll or device files. Only a photo or file that the user deliberately selects and sends in an AI chat is transmitted over HTTPS to the Organizr backend and then to OpenAI. It is used to interpret visible or textual content and generate the response requested by the user. It is not automatically added to Tracker, Recipes, Wardrobe, Sync, Community, advertising profiles or other app sections.
The Organizr backend does not create a persistent copy of the attachment or store its binary content in server-side chat history. Local AI chat history stores the written message and attachment name, not the attached binary; the model cannot access it again in a later request unless the user attaches it again. Depending on the selected file and platform, embedded metadata may be included in the bytes sent.
OpenAI states that API inputs and outputs are not used to train its models by default unless the API account explicitly opts in. Under OpenAI's standard API data controls, inputs and outputs may be retained in abuse-monitoring logs for up to 30 days, or longer when required by law or reasonably necessary to protect the service or third parties. Image and file inputs are scanned for potential child sexual abuse material (CSAM) and may be retained for manual review if flagged by the relevant classifier. Users should not attach sensitive content or third-party personal data unless they have the right and an appropriate legal basis to do so.
4. Purposes of processing
Data is processed to enable the app features requested by the user, manage accounts and entitlements, generate Organizr AI responses, provide optional Sync and Community features, allow update checks, process purchases, protect the service and integrate external services at the user's request.
5. Legal basis
Processing is based on: performance of a service requested by the user, legitimate interest (security, fraud prevention and updates), and consent or the user's explicit action for optional cloud functions and external integrations, where applicable.
6. Data retention
In offline mode, user data is stored exclusively on the local device with no automatic backups on the controller's servers. The user can manually export/import data.
If Sync is enabled, data is retained on the EU server in encrypted form until the user disables Sync or requests deletion. The user can request complete removal of cloud data by writing to [email protected].
AI prompts, context, photos, files and conversations are not kept by Organizr as server-side chat history. Local AI chat history remains on the device until deleted locally and contains only the attachment name, not its binary content. OpenAI may retain API inputs and outputs in abuse-monitoring logs for up to 30 days under its standard data controls, subject to the exceptions described above and future changes to OpenAI's policies.
7. Data sharing
Data is not sold. It may be processed by service providers needed to deliver requested functions, including hosting and security providers, OpenAI for Organizr AI, Stripe or Apple for purchases, Google for fonts or sign-in, and FatSecret, Hevy or Open Food Facts when those integrations are used. If Sync is enabled, app rows are encrypted before upload and stored encrypted on the controller's EU server.
8. User rights
The user can delete data by uninstalling the app or removing local files, export data through the app's features, and request information from the controller via email.
9. Security
The user is responsible for the security of their device and local backups. The controller is not responsible for data loss or unauthorized access to the user's device.
When Sync is active, data is encrypted end-to-end before transmission and stored encrypted on our EU server. The controller cannot read the content of synced data in plain text.
10. Changes
This policy may be updated. Changes will be made available through app updates.
11. Contacts
For any request: [email protected].