NerveLog
NerveLog (“the app”, “we”) is provided by Softgrove, an independent developer based in Japan. Contact: softgrove@duck.com.
You may record flare-ups (severity, itch, symptoms, affected areas), suspected triggers, daily factors, notes, and photos of affected skin areas (“your entries”). Your entries and photos are stored only locally on your device using Apple’s on-device database and the app’s protected file container. We never receive this data.
We do not collect your entries, photos, notes, health or other user content, name, email address, account credentials (the app has no account), location, contacts, or advertising identifiers through the app. The limited usage events described below are the only data sent to us.
NerveLog sends a small set of funnel events. An event name describes an internal action such as using a core feature, viewing a result or Pro offer, starting or completing a purchase, restoring a purchase, or interacting with a reminder. Not every version sends every event.
Each request contains the app identifier (a), app version (v), a random
installation identifier (d), event name (e), timestamp (t), and
a small properties object (p). Current properties are limited to fixed internal screen or
flow names, an App Store product identifier, subscription plan, and trial-eligibility flag where relevant.
They do not contain your entries, health information, photos, notes, or other free-form content.
The installation identifier is a random UUID generated on your device. It is not your Apple advertising identifier (IDFA), Apple vendor identifier (IDFV), name, email address, or account ID. We use these events only to understand aggregate feature use and funnel completion and to improve NerveLog; never for advertising or cross-app or cross-website tracking.
Cloudflare, Inc. hosts the endpoint as our infrastructure processor. Our Worker does not store source IP addresses, User-Agent headers, raw event bodies, raw timestamps, or raw installation identifiers. It stores daily aggregate counts and, for this app, a per-day HMAC-SHA-256 hash of the random identifier. The hash is salted with the day and app identifier, so it changes each day. Cloudflare may process network metadata to deliver and secure its service under its data-processing terms.
Photos you attach are saved only in the app’s on-device container with file protection. They are never uploaded, synced, shared, or analyzed by us, and the app performs no automated diagnosis on them. You can delete any photo or all data at any time.
Your entries may relate to your health. Because this information never leaves your device through us, we are not in a position to use it for any purpose. For Washington State residents (My Health My Data Act): we do not collect, process, share, or sell “consumer health data.” Your entries are stored solely on your device.
Premium subscriptions are sold and processed by Apple through the App Store. We do not receive or store your payment information.
If you enable reminders, the app schedules local notifications on your device. No notification data is sent to us or any third party.
NerveLog is not directed to children under 13 (or the minimum age in your region) and collects no information from anyone.
NerveLog has no third-party analytics or advertising SDKs. We use Cloudflare, Inc. only to host the anonymous event endpoint and aggregated database described above. We do not sell these events, provide them to third parties for their own purposes, use them for advertising, or use them to track you across apps or websites.
Controller postal address. Ryosuke Igarashi (Softgrove), Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan.
Controller. The controller for the limited usage analytics is Ryosuke Igarashi (Softgrove), Japan. Contact: softgrove@duck.com.
Purposes and legal bases. We process the limited usage events to understand aggregate feature use and improve the app, based on our legitimate interests under Article 6(1)(f) GDPR. Your on-device content is not sent to or processed by us. Purchases are processed by Apple; see Apple’s Privacy Policy. If you contact us, we process the information you send to answer your request, also based on our legitimate interests.
Recipients and international transfers. Cloudflare, Inc. processes the usage events for us as hosting provider on its global network. This may involve transfers outside the EU/EEA or UK, including to the United States, using safeguards such as the European Commission’s Standard Contractual Clauses and the UK transfer addendum where applicable.
Retention. We do not retain raw events or raw installation identifiers. Daily aggregate counts and per-day HMAC hashes are retained in a form not designed to identify a person. The current server code has no automatic deletion period for those aggregate records. On-device content remains until you delete it or the app. Correspondence is kept only as long as reasonably needed to answer and document the request.
Your rights. Subject to applicable law, you may request access, rectification, erasure, restriction, objection, and data portability by emailing softgrove@duck.com. Because the random installation identifier is not linked to your identity and the server does not retain the raw identifier, we may be unable to identify records as relating to you. You may also lodge a complaint with the data-protection supervisory authority in your country of residence or work, or where you believe an infringement occurred.
Providing usage events is not a contractual or statutory requirement; the app’s core operation does not depend on a successful telemetry request. We do not use automated decision-making or profiling that produces legal or similarly significant effects.
We may update this policy. Material changes will be reflected here with a new “Last updated” date.
Questions: softgrove@duck.com.
NerveLog is a personal wellness journaling tool and does not provide medical advice, diagnosis, or treatment. See the in-app disclaimer and the Terms of Use.