Privacy

1. Who is responsible

Lanti is an app for iPhone, iPhone Duo, iPad and Apple TV, published by Stefano Carbone, Switzerland (“we”), who can be reached at contact@getlanti.com. This policy covers the Lanti app and the getlanti.com website.

For any question about your data: contact@getlanti.com.

2. On your device and in your iCloud

Lanti works without an account and without a server of ours. The personal content you enter stays on your device or is synced to your private iCloud database (section 5). When you make a purchase, a separate random StoreKit token is sent to Apple, as explained in section 4. Its content (suggested small steps, walk memories, journal questions, help lines) ships inside the app: nothing is downloaded.

Here is what the app stores on your device, in its protected space:

Data stored by Lanti

Data	What it is for
Your Lanti: name, pronouns, bud color, hatching date	Bringing your Lanti to life the way you chose.
Your first name, if you give it	Greeting you. It is shared with no one.
What brings you here (0 to 3 optional choices at setup)	Keeping your choice. These choices can say something about your mood, so they stay on your device (and in your iCloud if you have turned it on); we never receive them.
Inner weather: date, level (storm to sun), optional feeling words	Knitting the scarf and showing your mood history.
Journal: your entries and the question they answer	Letting you read your journal again.
Small steps: titles, frequencies, days completed	Tracking your steps and lighting the bud.
Walks, memories, treasures and seeds	Your collection and the in-game currency (never for sale).
Settings: end of day, hemisphere, calmer tone, animations, gentle reminder time, journal lock, country chosen for help lines	Fitting Lanti to you.
Calm moment choices: last sound, durations, volume tip already seen and day of the latest suggestion	Restoring your choices on this device and avoiding a repeated tip or suggestion.
Bookmark for the latest interrupted story: story, language, passage and text fingerprint	Offering to resume at the right passage only if the text has not changed.
Widget snapshot: Lanti’s name, day, inner weather, small steps, bud and season settings	Showing the widgets from the local App Group shared with their extension.
A pseudonymous identifier for each device	Assigning each device its own share of seeds. It comes from Apple’s identifierForVendor or, if unavailable, a UUID created by the app (see section 5).
A random StoreKit token for each installation	Accompanying your purchases with Apple (see section 4).
The start and end time of an SOS, breathing, calm or story session, kept for at least three days after the session ends, then erased the next time the app launches or another session begins	Never showing you an offer during or right after a hard moment.
Trial-end reminders already shown	Not showing you the same reminder twice.

If iCloud is on, your Lanti’s data (your Lanti, your first name, what brings you here, inner weather, journal, small steps, walks, seeds, wardrobe and Lanti’s settings) is also copied to your private iCloud database. The device’s pseudonymous identifier comes from Apple’s identifierForVendor or, if it is unavailable, a UUID created by the app. It is used only to assign each device its share of seeds and is synced only to this private iCloud database. Only these stay on the device: calm moment choices, the bookmark for a story, traces of SOS, breathing, calm or story sessions, the snapshot shared with the widgets, free-trial reminders already shown and the country chosen for help lines. The random StoreKit token is separate: it is not copied to iCloud and leaves the device only with each purchase sent to Apple (see section 4).

Your inner weather and your journal can say a lot about what you are going through. That is why they never reach us: they stay on your device and, for syncing, in your private iCloud database, which we cannot read. If you back up your iPhone (to iCloud or to a computer), this data is also part of the device backup, which you manage with Apple.

3. Face ID, Touch ID and passcode

You can lock your journal (off by default). Lanti then asks your device to check that it is really you, and your device only answers “yes” or “no”. Your biometric data stays in the device’s secure chip: Lanti never sees it, never stores it and never transmits it.

4. Purchases and subscriptions

Lanti Plus, the lifetime purchase and the collections are sold through the App Store. Apple processes the payment and your Apple Account under its own privacy policy. We receive neither your name, nor your email address, nor your payment details.

To know what you have bought, the app reads the purchase receipts signed by Apple on your device. Each purchase also carries a random StoreKit token created by the app, unrelated to your identity: Apple attaches it to the transaction information. This token is separate from the per-device pseudonymous identifier used for its share of seeds and synced only to your private CloudKit database. Today, we run no server that receives this information.

Apple provides us with aggregated sales and download reports (for example by country and by product), which cannot identify you.

5. iCloud sync

If your device is signed in to iCloud, Lanti copies its data to your private iCloud database (CloudKit), linked to your Apple Account. You find the same Lanti on your iPhone, your iPhone Duo, your iPad and your Apple TV, and on a new device. We can neither read nor change this private database. Apple hosts it under its iCloud terms. Without Advanced Data Protection for iCloud, Apple can access it, including in response to a lawful request.

Your mood and journal are synced there, encrypted: the text of your journal, your inner weather level, the emotion words you chose and the journal question you answered are stored in encrypted fields. They are end-to-end encrypted only if Advanced Data Protection is turned on for your iCloud account.

You can turn off syncing for Lanti at any time in your device’s iCloud settings (Settings › your name › iCloud). Without iCloud, Lanti works entirely on your device, as before.

6. Reminders, help lines and widgets

Notifications

The daily gentle reminder (if you choose a time), the notice that Lanti is back from a walk (if you accepted it; silent at night) and the notification scheduled two days before a free trial ends (only if you have already allowed notifications and that time has not passed) are local notifications, scheduled on your device. If you open the app during the final two days of an active trial, a reminder also appears there. No developer server is used for these reminders; CloudKit may still use the Apple Push Notification service (APNs) in the background to signal an update to sync. You can turn the reminders off in the app or in your device settings.

Help lines (SOS)

The country for help lines comes from your device’s region setting, or you choose it yourself: Lanti does not use your location. When you tap a number, Lanti opens the Phone, Messages or WhatsApp app. What happens next is between you and the help service, under their own rules. Lanti does not know whether you called and records neither the call nor the message. “Copy number” only places the number on the clipboard.

Apple TV and widgets

On Apple TV, Lanti shows the data received from your private iCloud database (never your journal) and keeps it on the device in the same way. On iPhone and iPad, the widgets show a snapshot prepared by the app and kept in its local App Group shared with their extension; nothing is sent elsewhere.

7. What Lanti doesn’t do

• No account, no sign-up.
• No ads, no analytics or audience measurement, no third-party SDKs.
• No tracking across apps and websites: Lanti doesn’t track you, which is why the app never asks for permission to track.
• No selling or sharing of data, no profiling.
• No access to your location, contacts, microphone, camera or the Health app.
• No reading of your photos: Lanti can only add your season card to them, if you ask.

Reports from Apple

If you agreed, in your device settings, to share analytics with app developers, Apple may send us crash reports and anonymized usage statistics. You can change this choice in Settings › Privacy & Security › Analytics & Improvements.

Future features

Outside the Apple services and SOS actions described above, Lanti currently sends no app data to a developer server. If a future feature ever needs to (for example illustrated postcards), this policy will be updated before that feature goes live, the feature will stay optional, and we will ask for your explicit consent before anything is sent, naming the providers involved.

8. The getlanti.com website and your messages

This website is made of static pages: no cookies, no trackers, no analytics, and nothing loaded from another website. It is hosted by Vercel Inc. (United States). Like any host, Vercel technically processes your IP address and connection information (browser, page requested, time) to serve the site and protect it from abuse.

If you write to us, we use your email address and your message only to reply and follow up on your request.

9. Legal framework, retention and transfers

We apply the revised Swiss Federal Act on Data Protection (FADP), the European Union’s General Data Protection Regulation (EU GDPR) and the UK GDPR where each applies.

The personal content you enter stays under your control, on your device and in your private iCloud database: we have no access to it. For the little data that does reach us, the legal bases are: your request, to answer your messages; our legitimate interest, to secure the website and fix errors; your consent, given to Apple, for crash reports.

Retention. The app’s personal content stays for as long as you keep the app, or until you delete it; its iCloud copy stays until you delete it from your iCloud settings. Calm moment choices and the widget snapshot stay only on the device until you change them or delete the app. A story bookmark is erased when you finish that story; traces of SOS, breathing, calm or story sessions are kept for at least three days after the session ends, then erased the next time the app launches or another session begins. Your messages are kept while we handle your request and its follow-up, then deleted.

Transfers. Apple and Vercel may process data outside Switzerland and the European Union, in particular in the United States, with the safeguards required by law (for example standard contractual clauses or the Swiss–EU–US data privacy frameworks).

Security. The app’s data benefits from your device’s protection: when your device has a passcode, iOS encrypts app files. In iCloud, your private database is protected by Apple’s security measures.

10. Your rights

You have the right to access your data, correct it, erase it, restrict its processing, object to it, receive it in a common format, and withdraw your consent at any time.

In practice, since your personal content and settings are on your device and in your private iCloud database:

• you can see your data in the app and change your settings at any time;
• you can delete a journal entry in the app;
• deleting the app erases all its data from your device (a copy may remain in an older device backup until it is replaced);
• the iCloud copy of Lanti’s data is deleted from iCloud storage management, in your device settings;
• for your purchases, the history is kept by Apple, at privacy.apple.com.

For any request, write to contact@getlanti.com: we reply within 30 days. Before acting on your request, we may ask for reasonable verification of your identity. If your request is complex, the deadline may be extended by up to two months; we will tell you within the first month. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), or the data protection authority of your country in the European Union.

Children and teenagers

Young people can use Lanti. Since the app sends us no personal content entered in Lanti, none of that content about a child reaches us. A minor’s purchases go through Apple’s parental controls (for example “Ask to Buy” in Family Sharing). If you are a parent and have a question, write to us.

11. Changes

If we change this policy, we publish the new version on this page with its effective date. If an important change affects your data (for example a feature that would send data to a server), we will let you know in the app before it applies.

Version in effect since October 26, 2026.