Privacy

The essentials first

Health Island is designed so that as little data as possible leaves your device. We process data only when it is needed for a feature you use, operating the service or limited product analytics.

• Steps and active energy are processed on your iPhone. Their raw or exact values are not sent to Mixpanel, the feedback system or iCloud.
• We do not sell data, use it for advertising or track you across other apps or websites.
• Your island state stays on your devices and, if you use iCloud, in the private iCloud area of your Apple Account.
• App analytics contains only the coarse usage, app and device data named below. It does not contain Health data, island contents, names, screenshots or precise location data.
• When you share something, send feedback or help with translations, we explain which data is needed and what may become public.

Controller and contact

The controller is Manuel Raimund, Lippertskirchen 22, 83075 Bad Feilnbach, Deutschland. For access, correction or deletion requests, email [email protected].

Apple Health

With your explicit permission, Health Island reads only selected Apple Health data: currently steps and active energy. It writes nothing to Apple Health. Access is optional and the app remains usable without it.

Health data is not used for advertising, marketing, profiling or data trading. Raw HealthKit samples are never sent to feedback services or stored in iCloud or CloudKit. If data is missing, see Apple Health support. On iOS 27 you may limit the readable history for each data type; that boundary and all related queries remain local to your iPhone.

Local island state and private iCloud sync

Your island and app state is stored in a protected, versioned store on your device. It may include discovered items and arrival dates, placements, object states, showcase choices, world effects, avatar name and appearance, profile information and selected settings. A local backup of the previous store may be retained for safe migration.

If an Apple Account is available, the approved semantic island state is stored in that account’s private CloudKit database so it can be restored and kept current across your devices. It is not public. Without iCloud, the local island remains usable and changes sync when a connection returns.

The privately synced island state also includes verified island days, compact action evidence, and saved arcade run counts and personal bests. Names in local top-ten lists and individual arcade runs remain on the respective device. This private summary is not sent to Mixpanel, contains no exact Health values and does not fill gaps for older days without evidence.

CloudKit also processes pseudonymous account, device-instance, transfer and operation references, sync timestamps, app version and build. Health Island does not store or display your Apple Account email address. If an account change is detected, sync pauses to avoid uploading a local island to the wrong account.

Raw HealthKit samples, steps, active energy, daily series, queries, calibration values and numeric health totals never enter CloudKit. iPad does not read or evaluate Apple Health. New movement finds originate only on iPhone and reach iPad solely as derived island state.

Island Post widget

The Island Post widget is available only on iPhone. It receives only the find information and rendered previews required for display through a local App Group. It has no Apple Health access and receives no raw HealthKit data. The companion app on iPad remains available; its private island sync through iCloud requires no additional widget data.

Notifications

Health Island has no custom push backend and never places health values in notifications. The app requests notification permission separately from Apple Health. If allowed, iOS may wake the app when new movement data is available. A local notification is scheduled only when normal on-device processing creates a new find. Its title, text and optional local preview contain no steps, active energy or raw HealthKit values. Delivery timing is controlled by iOS and is not guaranteed.

If notifications are already allowed, Health Island may occasionally remind you, entirely on-device, about a known open construction project or an unfinished fishing-log chapter. Tapping opens the island. The iPad companion does not schedule these reminders, and no Health values are transmitted.

Sharing the island pass

When you explicitly choose Share island pass, the app creates an image locally and opens the system share sheet. Health Island does not upload it to its own sharing service. The image may show your avatar name and look, island rank, island days, broad collection counts and selected showcase finds. It does not contain steps, active energy, workouts, daily activity, exact island points or raw HealthKit records.

App analytics

TestFlight and App Store builds use Mixpanel with EU data residency. A random local installation ID automatically records sessions, first app open and app updates, plus use of Share island pass. It also records the start and completion of an arcade run and, for fishing, the start and completion with a coarse fishing-log chapter, caught or escaped, and a standardized escape reason where applicable. The profile linked to this installation ID contains the current notification, widget and feedback-bubble states plus device class, app version, build and channel. These states are recorded with their current value even before you change them. We also collect coarse ranges for game results and for how often and how regularly the app and games are used.

Opens from widgets or notifications are not recorded, and Session Replay is disabled. Mixpanel processes the sending IP address only to derive approximate country, region and city, and, according to Mixpanel, discards it before the data is added to the EU project. GPS, Core Location and precise location data are not sent. Neither are Health data, island contents, find, object or fish IDs, catch counts, exact arcade scores or exact usage counts, avatar name, feedback content, screenshots, IDFA or IDFV. We process this data only to understand product use and technical reach, based on our legitimate interest under Article 6(1)(f) GDPR. Without a shorter project setting, Mixpanel states a retention period of up to five years. You can request deletion through our contact address.

In-app feedback

In the Logbook, you can voluntarily turn the floating in-app feedback button on or off. Regular App Store builds start with the button off; it remains on by default for existing testers in Debug and TestFlight builds. This setting stays local and is not included in private iCloud sync. Turning the button on does not send any data.

Only when you deliberately submit a report does the feedback service process your text, local avatar name, a pseudonymous reporter ID, technical app and device context and, if local capture succeeds, the currently visible app screen. The report text, attached screen, avatar name, status and team replies are visible only to you and the Health Island team. Other users cannot access them. My Reports opens your personal history using the local reporter credential.

Technical context, reporter linkage and access data remain internal. Feedback screenshots are removed after no more than 90 days. Original text, title, reporter linkage, technical context, read receipts and internal triage are removed or anonymized twelve months after closure and no later than 24 months after receipt; the remaining row is hidden. Rate-limit data is removed after 24 hours. Individual deletion requests remain possible.

Helping with translations

If you apply to help, we store your name, email address, listed languages and optional message solely to review the application, contact you and, if appropriate, create personal access. Applications that are not accepted are deleted within six months.

For approved contributors we also store language assignment, access details, drafts, proposals, confirmations and last work position. Contributions may be edited and used in Health Island. Contact and access data is deleted or anonymized within twelve months after participation ends; contributions may remain without a direct contact link. The legal basis is the voluntary application and collaboration under Article 6(1)(b) GDPR.

Website

When you select German, English, Spanish, French or Italian in the language switcher, we store that choice for up to twelve months in a functional cookie. It contains only the language code de, en, es, fr or it and ensures that a language-neutral entry opens in your chosen language. Without a stored choice, we use the language preference sent by your browser for that entry; unsupported languages fall back to German. Direct addresses in all five supported languages remain unaffected.

We use Cloudflare Web Analytics to understand reach and technical quality in a data-minimizing way. Aggregated data can include page views, paths, referring sites, country, device type, browser, operating system and performance. It uses no cookies, local storage, advertising pixels, session replay or cross-site user profile. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Service providers

• Cloudflare for domain, DNS, the static website and privacy-focused analytics
• Apple iCloud and CloudKit for optional private device synchronization
• Apple iCloud Mail for email
• Mixpanel for limited app analytics in the EU project
• OpenAI Sites with separate D1/R2 storage for feedback and the translation tool

Deletion

Deleting the app removes its local store from that device. A private iCloud island may remain so it can be restored elsewhere. You can view and delete Health Island’s iCloud data in your Apple Account storage settings. If another device still has a local copy and opens the app again, it may sync that state back to iCloud; remove unwanted local copies as well for complete deletion.

For questions or deletion requests, email [email protected].