Daily Outdoor Missions Privacy Policy

Effective date and last updated: October 2, 2026

This Privacy Policy explains how personal data is handled when you use the Daily Outdoor Missions mobile application for Android (the "App") and the website dailyoutdoormissions.balsdigital.com (the "Site"). It is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).

At a glance

No account, no ads, no analytics, no tracking across apps or websites.
Your name, city, preferences, missions, streak and journal (including mood ratings) are stored only on your device. We have no servers that receive them and no access to them.
Location is optional and approximate (rounded to about 1 km), used only when you choose to set your city, and saved only on your device. Turning it into a city name uses the Android platform geocoder on your phone, a Google service.
Reminders are scheduled locally on your phone.
If you buy Daily Outdoor Missions Pro, Google Play handles the payment, and RevenueCat checks your purchase using an anonymous ID. We never see your name, email address or card details.
This website uses no cookies and no analytics.

1. Who is responsible for your data

The controller of the personal data described in this policy is:

BALS DIGITAL SRL, a Romanian limited liability company
Registered office: Oradea, Bihor County, Romania
Trade Register no.: J5/16/2024 · Fiscal code (CUI): 49356591
Email: contact@balsdigital.com · Website: https://balsdigital.com

We have not appointed a Data Protection Officer, as this is not required for our activities under Article 37 GDPR. For any privacy question or request, write to contact@balsdigital.com.

2. Scope

This policy covers the Daily Outdoor Missions app for Android and this Site. Google and other providers that you use independently (for example Google Play, your device's backup service or your email provider) process data under their own privacy policies as independent controllers.

3. What data is processed

3.1 Data stored only on your device

The App keeps the following in its private storage on your device:

the name you enter (optional; any nickname works);
your city name and approximate coordinates (rounded to about 1 km), if you set them (see 3.2);
your preferences: time you can spare, when you are usually free, whether missions may cost money, mission types, weekend adventures and reminder settings;
your mission plan and history: missions assigned, completions and their times, mood ratings, swaps, streak freezes, streak, XP and level;
whether Pro is active (a cached flag) and a random installation code used only on the device to vary missions;
the version of the Terms of Use you accepted in the App and when you accepted it, so the App knows whether to ask again after a material change.

This data is not sent to us or to anyone else by the App, and we cannot access, export, recover or delete it. It may be included in your device's own backups (for example Google backup) if you have enabled them; those backups are governed by Google's terms. Mood ratings and activity history could reveal something about your wellbeing; they never leave your device through the App, and we do not process health data.

3.2 Location (optional permission)

If you tap to use your location when setting your city (during setup or in Settings), the App asks for permission to read your approximate location once, while the App is open. It has only the approximate-location permission. It is used to find your city name, your hemisphere (for the season) and your local sunset time (for golden-hour reminders). The App rounds the coordinates to about 1 km before using them and saves only the rounded coordinates, on your device. The App never uses precise or background location.

To turn the rounded coordinates into a city name, your phone's operating system sends them to Google's geocoding service (the Android platform geocoder). If you type a city instead, the typed name is sent to the same service to find its coordinates, which the App rounds the same way. Google processes this under its own privacy policy; we do not receive it. Location is optional: if you decline, you can type a city or skip this step. You can withdraw permission at any time in your device settings.

3.3 Notifications (optional permission)

If you allow notifications, reminders (your mission of the day, a reminder timed to the mission and a streak saver, at most three a day) are scheduled locally on your device using your device's time zone. No push service is used and no notification data is sent to us or to third parties. You can turn reminders off in the App or withdraw permission in your device settings.

3.4 Purchases (Daily Outdoor Missions Pro)

Purchases are made through Google Play. Google processes your payment details, billing information and Google Play account as an independent controller. We never receive your name, email address, phone number or payment card details.

We use RevenueCat to validate purchases and unlock Pro. Each time the App starts with an internet connection (and when you open the Pro screen, buy or restore), the RevenueCat component in the App contacts RevenueCat to check whether Pro is active and to load current prices, whether or not you have bought anything. RevenueCat processes on our behalf:

an anonymous app user ID generated on your device by RevenueCat;
purchase data received from the store: the product bought, purchase, renewal and expiry dates, trial status, price, currency, store country and transaction identifiers;
technical data needed for the connection: IP address, device model, operating system and version, app and SDK version, and language/region settings.

We can see this pseudonymous purchase information in RevenueCat and aggregated sales reports from Google. We do not use it to identify you.

3.5 Emails you send us

If you email us (for support, a privacy request or to be notified when the App launches on Google Play), we process your email address, your name if you include it, and the content of your message and any attachments, in order to reply or send the requested launch notification. Emails sent to contact@balsdigital.com are forwarded by Cloudflare Email Routing to our Gmail mailbox, provided by Google, where they are stored (see section 5).

3.6 What we do not collect

no account, sign-in or profile on our servers;
no analytics, crash-reporting or advertising SDKs, and no ads;
no advertising identifiers (such as the Android Advertising ID) and no tracking across other companies' apps or websites;
no access to your photos, camera, microphone, contacts, health or motion data. Photo missions use your own camera app, and step missions rely on your phone's own step counter, which the App does not read;
no precise or background location;
no artificial intelligence: missions are selected on your device from a pre-written catalogue;
we do not sell or rent personal data.

4. Purposes and legal bases

Purpose	Legal basis (GDPR)
Validating, unlocking and restoring Daily Outdoor Missions Pro; managing subscriptions	Performance of a contract, Art. 6(1)(b)
Preventing fraud and misuse of purchases; aggregated sales statistics	Legitimate interest in protecting the App and our revenue, Art. 6(1)(f)
Approximate location for your city, season and sunset time	Consent, given through the device permission, Art. 6(1)(a); withdrawable at any time
Local reminders	Consent, given through the device permission, Art. 6(1)(a); withdrawable at any time
Answering support and other emails	Performance of a contract, Art. 6(1)(b), for questions about the App or your purchase; otherwise legitimate interest in answering messages, Art. 6(1)(f)
Launch notification emails you ask for	Consent, Art. 6(1)(a); withdrawable at any time
Handling privacy requests; accounting and tax records; responding to authorities	Legal obligation, Art. 6(1)(c)
Delivering and securing this Site	Legitimate interest in a working, secure website, Art. 6(1)(f)
Establishing, exercising or defending legal claims	Legitimate interest, Art. 6(1)(f)

Data stored only on your device (section 3.1) is processed by the App on your device, under your control, to provide the features you use. We make no decisions based solely on automated processing that have legal or similarly significant effects on you.

5. Who receives data

RevenueCat, Inc. (USA), our processor for purchase validation and subscription management — https://www.revenuecat.com/privacy
Google (Google Play distribution and billing; Android location and geocoding services), independent controller — https://policies.google.com/privacy
Cloudflare, Inc. (USA), our processor for DNS, content delivery (CDN), hosting and protection of this Site, and for routing emails sent to our address to our mailbox (Cloudflare Email Routing) — https://www.cloudflare.com/privacypolicy/
Google (Google Ireland Limited, Ireland, and Google LLC, USA), our processor for the Gmail mailbox in which the emails you send us are received and stored — https://policies.google.com/privacy
accountants, lawyers and other advisers bound by confidentiality, where needed;
public authorities and courts, when we are legally required to disclose data;
a successor or acquirer, if our business or the App is merged, reorganised or sold, subject to this policy.

We do not sell or rent your personal data.

6. International transfers

Some recipients process data outside the European Economic Area, including in the United States: RevenueCat (purchase validation), Cloudflare (Site hosting and email routing) and Google (Gmail mailbox, via Google LLC; and Google Play). Where this happens, transfers rely on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework, for recipients certified under it) and/or the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can ask us for more information.

7. How long data is kept

Data on your device: until you delete it with "Reset all data", change it, or uninstall the App; copies in device backups follow your backup settings.
Purchase records at RevenueCat: for as long as needed to provide and restore your Pro access and while we use RevenueCat, unless you ask us to delete them earlier (section 10) and no legal obligation or legal claim requires us to keep them.
Store records: kept by Google under its own policies.
Emails: up to 3 years after our last exchange, unless needed longer for a legal claim. Launch-notification requests are deleted once we have sent the notification, or earlier if you ask.
Accounting records (store payout reports and invoices, which do not identify individual users): 10 years, as required by Romanian accounting law.
Site traffic data: we do not keep website logs; Cloudflare keeps technical logs for a short period under its own policies.

8. Security

The App's data stays in its private storage on your device, protected by your device's operating system. Connections to RevenueCat and Google Play are encrypted (HTTPS). We use reasonable technical and organisational measures to protect the data we handle, but no method of transmission or storage is completely secure. Keeping your device secure (screen lock, updates, backups) is your responsibility.

9. Your rights

Under the GDPR you have the right to:

access your personal data and receive a copy;
have inaccurate data rectified;
have your data erased;
restrict processing;
data portability;
object to processing based on legitimate interest;
withdraw consent at any time, without affecting processing carried out before withdrawal;
not be subject to decisions based solely on automated processing with legal or similarly significant effects (we make no such decisions).

To exercise your rights, email contact@balsdigital.com. We reply within one month, which may be extended by two further months for complex or numerous requests (Art. 12(3) GDPR). We may ask for information to verify your request. Because data on your device never reaches us, you can view, change and delete it yourself in the App. For purchase records, please include the order number from your Google Play receipt (it starts with "GPA."), as we cannot otherwise link the anonymous record to you.

You also have the right to lodge a complaint with the Romanian data protection authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, 010336 București, România, anspdcp@dataprotection.ro, https://www.dataprotection.ro — or with the supervisory authority of the EU member state where you live or work.

10. How to delete your data

The App has no accounts, so there is no account to delete. To delete your data:

In the App, open Settings → Reset all data and confirm. This deletes your name, city, preferences, missions, streak and journal from the device and cancels scheduled reminders.
Uninstalling the App deletes all of its data on the device, including the anonymous purchase ID stored by the RevenueCat component.
If you want, delete device backups that may contain App data, in your Google account settings.
Withdraw location or notification permission at any time in your device settings.
To delete purchase records held by RevenueCat on our behalf, email contact@balsdigital.com with your Google Play order number. We will delete them within one month. You can still restore a valid purchase later with "Restore purchases".

Deleting data or the App does not cancel a subscription. Cancel it in Google Play → Payments & subscriptions (see the Terms of Use, section 5). Records kept by Google must be requested from Google.

11. Children

The App is not directed to children under 13, and in the EU children under 16 (or the age of digital consent in their country) should use it only with a parent's or guardian's consent and supervision. The App does not collect children's data on our systems. If we learn that we have received personal data from a child without the required consent (for example by email), we will delete it.

12. This website

This Site does not set cookies and does not use analytics, advertising or tracking technologies. Fonts and images are served from the Site itself. The Site is hosted, delivered and protected by Cloudflare, which processes technical data such as your IP address, the page requested, the time, your browser type and the referring page in order to deliver the Site and protect it against abuse. A small Cloudflare script may run in your browser to protect our email address from spam bots; it does not set cookies. We may see aggregated, cookie-free traffic statistics that do not identify you. Store badges and email links take you to Google Play or your email app, which are governed by their own policies.

13. Additional information for U.S. residents

We do not sell personal information and do not share it for cross-context behavioural advertising. The only categories of personal information processed are those described in section 3: identifiers (an anonymous app user ID and IP address), commercial information (purchase history) and, if you email us, your contact details. Subject to applicable state laws (such as the California Consumer Privacy Act as amended by the CPRA), you may request to know, delete or correct personal information by emailing contact@balsdigital.com. We will not discriminate against you for exercising these rights.

14. Changes to this policy

We may update this policy when the App, the Site or the law changes. We will post the new version here with a new date and, for material changes, notify you in the App or on the Site.