Privacy Policy

Last updated: October 2026

1. Data controller

Stephan Hussong
c/o Impressumservice Dein-Impressum, Stettiner Str. 41, 35410 Hungen, Germany
E-Mail: info@ign8.de

2. Scope of this policy

This privacy policy applies to the watchOS app "touchiNG" and its associated server at touching.ign8.de. The app allows two people to send each other haptic touches, emojis, and heartbeats.

3. What data we collect

At registration (automatically on first app launch):

• A randomly generated device ID (UUID)
• Optional display name
• Preferred language (locale)
• APNs push token (for notifications)
• Optional CloudKit identifier, used to link multiple devices to the same user

During use:

• Pairing information (which two users are connected)
• Messages (type, content as JSON, timestamps for sent/delivered/read)
• Shared per-pairing settings (e.g. pet names, countdowns, emoji shortcuts)
• Current heart rate (bpm), if you actively share it with your partner — only cached briefly for delivery (see section 7)

We do not collect:

• Real names (the display name is freely chosen)
• E-mail addresses or phone numbers
• Location data
• Contacts or address book data

4. Legal basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) — the data is required to provide the service. Push notifications are based on Art. 6(1)(a) GDPR (consent granted via the operating system permission).

5. Push notifications

Push notifications are delivered using the FLARE service (operated by ign8 Studio, same data controller) as a technical processor. FLARE forwards notifications to your device via the Apple Push Notification Service (APNs). The following is transmitted to FLARE:

• An internal user identifier (not the Apple device ID)
• Push token
• Notification content (title and text; not the actual message content)

6. Data transmission

All communication between the app and the server is exclusively encrypted (TLS/HTTPS). The app fetches new messages from the server at regular intervals; delivery is additionally handled via push notifications (see section 5).

7. Retention period

• Messages: Delivered messages are automatically deleted after 365 days at the latest; messages already marked as read may be removed earlier, configurable per pairing.
• Technical delivery signals (e.g. for push delivery and shared heart rate): automatically deleted after 5 minutes at the latest.
• User account and devices: Stored for as long as the app is in use.
• Pairings: Pending invitation codes are automatically deactivated after 24 hours.

8. Hosting and data location

The server is operated in Finland (Helsinki). All data is stored and processed exclusively within the EU.

9. Your rights

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Please contact info@ign8.de for any of the above.

10. Account deletion

You can delete your account directly in the app (Settings → Delete Account). This removes your device, push token, and your own per-pairing settings (e.g. pet name, emoji shortcuts) from the server, and erases all data stored locally on the watch. An existing pairing is ended; messages already exchanged remain, for technical reasons, on your partner's side until they are regularly deleted per section 7. For questions, reach us at info@ign8.de .

11. Changes

We reserve the right to amend this privacy policy as needed. The current version is always available at this address.