Last updated: June 7, 2026
We take the protection of your personal data seriously. This privacy policy explains how the Gallus application collects, uses, shares, and protects information when you use it. It applies to all Gallus users, regardless of where you reside.
In short: Gallus runs mostly on your device. No user account, no advertising tracking. The only personal data we may collect is a phone number you can optionally provide during onboarding, so we can reach out for feedback while Gallus is young — you can skip it (see section 2.1). Otherwise, we only use an anonymous product analytics service (PostHog, hosted in Europe) to understand how the app is used — see section 2.4.
The data controller is Gallus, based in France. Contact: contact@gallus-app.com
Gallus provides no user account system. We do not ask for your name, email, or any identity data, and no such information is transmitted to any server.
During onboarding, we do ask — optionally — for your phone number. This is the only piece of personal data Gallus collects. You can skip this step and keep using the app normally. If you choose to provide it, we use it for a single purpose: to contact you (typically via WhatsApp) to gather feedback and help us improve Gallus during this early phase. We never sell it, never use it for advertising, and you can ask us to delete it or to stop contacting you at any time (see sections 9 and 15).
Apart from this optional phone number, the only data leaving your device is anonymous usage events sent to our product analytics service (see 2.4) and the information strictly required for in-app payments handled by Apple/Google and RevenueCat (see section 4).
The application stores the following data only on your device, in the application's private sandbox:
| Data | Purpose |
|---|---|
| Your alarms (time, days, label, sound) | Schedule alarm triggers |
| Your custom engagement phrases | Voice challenge to dismiss the alarm |
| Motivation photo (if you add one) | Personalized display during the challenge |
| Favorite quote (if you set one) | Personalized display during the challenge |
| Preferences (theme, language, vibration) | App personalization |
| Subscription state (RevenueCat local cache) | Verify access to features |
This data stays on your device. It is removed when you uninstall the application.
| Permission | Purpose | Required? |
|---|---|---|
| Microphone | Voice recognition for the challenge (speak the phrase to dismiss) | Yes (otherwise keyboard fallback) |
| Speech recognition | Verify that you correctly pronounce the phrase | Yes (otherwise keyboard fallback) |
| Notifications | Trigger alarms and chained reminders | Yes |
| Alarms (AlarmKit, iOS 26+) | Allow alarms to ring even in silent mode or Do Not Disturb | Yes (iOS only) |
| Photo library | Pick a motivation photo | No, optional |
Gallus uses PostHog (hosted in Europe, eu.i.posthog.com) to understand how the app is used and improve it. PostHog receives anonymous events tied to a random identifier generated locally on your device. By default this identifier is not linked to any identity information.
If you choose to provide your phone number (section 2.1), it is attached to your PostHog profile as a contact property so we can reach out for feedback. In that case, your analytics profile is no longer anonymous. If you skip that step, your profile stays anonymous.
| Data sent to PostHog | Data never sent |
|---|---|
|
|
This data is used solely for product analytics (e.g., identifying friction points in onboarding). It is never used for advertising or shared with third parties for commercial purposes. The app's privacy manifest (PrivacyInfo.xcprivacy) formally declares these analytics collections to Apple as Product Interaction, Other Usage Data, Purchase History, and User ID — all marked Linked to User = false and Used for Tracking = false. The optional phone number (section 2.1), when you provide it, is declared separately as Phone Number (Contact Info), Linked to User = true, used only to contact you and never for tracking.
PostHog's policy: posthog.com/privacy
The voice challenge relies on the operating system's speech recognition:
requiresOnDeviceRecognition = true). No audio or transcription is sent to Apple's servers. If the requested language is not available on-device, the challenge falls back to keyboard input.Gallus does not record your voice, does not store transcriptions, and does not send any audio to its own servers (we have none). Only the text result returned by the system is locally compared to your engagement phrase, then immediately removed from memory.
Apple's policy: apple.com/legal/privacy/ · Google's policy: policies.google.com/privacy
Access to Gallus is gated by a paid subscription (monthly or yearly with a free trial). Payments are handled by the app stores, not by Gallus:
RevenueCat's policy: revenuecat.com/privacy
Gallus shows no ads and performs no cross-app tracking. The app's PrivacyInfo.xcprivacy file formally declares to Apple: NSPrivacyTracking = false. The data types collected by PostHog and RevenueCat (see sections 2.4 and 4) are declared with NSPrivacyCollectedDataTypeTracking = false and NSPrivacyCollectedDataTypeLinked = false.
The advertising identifier (IDFA on iOS, AAID on Android) is never read or used. No App Tracking Transparency (ATT) prompt is shown, because no cross-app tracking is performed.
We share no personal data with third parties for commercial or advertising purposes. The only technical third parties involved are:
We never sell your data.
All your data is retained locally as long as the application is installed. To erase everything, uninstall Gallus: iOS and Android automatically wipe the app's private storage.
If you provided your phone number (section 2.1), it is kept on our PostHog profile until you ask us to delete it. Uninstalling the app does not automatically remove it — email us at contact@gallus-app.com and we will delete it.
Purchase history is kept by Apple or Google according to their respective policies, independently of Gallus.
Since we collect no data on the server side, most GDPR rights are exercised directly within the app:
| Right | How to exercise |
|---|---|
| Access | All your data is visible inside the application itself. |
| Rectification | Edit alarms, phrases, and preferences directly in the app. |
| Erasure | Uninstall the app: the OS wipes all local data. To request erasure of the events sent to PostHog associated with your local identifier — including your phone number if you provided one — contact us at contact@gallus-app.com. |
| Portability | Not applicable: no identity data is held by Gallus outside your device. |
| Objection / consent withdrawal | Revoke permissions (microphone, notifications) in system Settings. To opt out of analytics, or to stop us from contacting you on the number you provided, contact us at contact@gallus-app.com. |
For any further question, contact contact@gallus-app.com. Response time: 30 days.
Notifications are essential to Gallus: they trigger alarms and maintain the chained-alarm mechanism (which keeps reminding you until you complete the challenge). Disabling notifications means alarms cannot be reliably triggered.
Gallus is intended for users aged 13 or older, in line with app store terms. We do not knowingly collect data from minors. If you believe a minor has provided information, contact us at contact@gallus-app.com.
The anonymous product analytics (PostHog, see 2.4) are hosted in Europe (eu.i.posthog.com) — no transfer outside the EU occurs for this collection. Any transfers performed by Apple, Google, or RevenueCat as part of their own services are governed by their respective policies (EU Standard Contractual Clauses, EU-US Data Privacy Framework).
If we update this policy:
If you believe your rights are not being respected, you may file a complaint with:
For any question regarding this policy: contact@gallus-app.com
← Back to home