Privacy Policy

1. Controller and contact

The controller responsible for Avilo is:

Simon Zeiler
Kreuzleite 24
85276 Pfaffenhofen an der Ilm
Germany
Email: mail@simon-zeiler.de

2. What Avilo does

Avilo helps you capture and organize tasks, thoughts, reminders, and conversations with the on-device assistant “Avi.” It is available for Apple platforms and includes an Apple Watch companion.

3. Data stored on your device

Depending on how you use Avilo, the app stores tasks, dates, reminders, chat threads, preferences, onboarding state, and related timestamps locally on your device. Your Sign in with Apple user identifier and the name supplied by Apple during the first authorization may be stored securely in the device Keychain. The name is used locally for personalization.

App updates normally preserve the app’s local data container. Removing the app may remove local data unless it remains available through iCloud or another Apple backup.

4. Apple Intelligence

Avi uses Apple’s on-device Foundation Models framework. Prompts and generated responses remain on your device. Avilo does not send Avi conversations, photos, tasks, or reminders to an Avilo-operated AI server or a third-party AI provider.

Availability and behavior of Apple Intelligence depend on your device, operating system, language, region, and Apple’s requirements.

5. iCloud and CloudKit

If iCloud sync is enabled, Avilo stores supported app content—such as tasks, reminders, settings, and Avi conversations—in the private CloudKit database of your Apple account. Sync can occur when you open or leave the app and after changes are made.

This data is handled by Apple under your Apple account and Apple’s terms and privacy practices. The developer does not receive direct access to your private CloudKit database through the Avilo operational server. You can disable iCloud sync in Avilo’s settings; content already stored in iCloud may remain there until deleted through the applicable Apple controls or by the app.

6. Sign in with Apple

Avilo requires Sign in with Apple. Apple provides a stable app-specific user identifier. Depending on your choice and what Apple makes available, Apple may initially provide a name and either your email address or an Apple private relay address. Avilo does not transmit your name or email address to its operational server.

Authentication is necessary to provide account-related app functionality and private cross-device synchronization. You can manage apps using Sign in with Apple in your Apple Account settings.

7. Communication with the Avilo operational server

Only after you accept this Privacy Policy during setup, Avilo may contact simon-zeiler.de over HTTPS to receive operational notices and signed version policies. The request may contain:

• a randomly generated installation identifier;
• a pseudonymous account reference derived one-way from the app-specific Sign in with Apple identifier;
• app version and build number;
• platform, operating-system version, and supported capability flags;
• technical timestamps and basic request metadata such as the IP address necessarily processed during network communication.

The server can use these values to count active installations, group devices belonging to the same pseudonymous app account, deliver announcements, and enforce minimum supported app versions. It does not receive task text, reminders, chat content, your name, your email address, or your private CloudKit content. You can withdraw this permission at any time in Avilo’s Settings. Withdrawal stops future operational-server requests; previously received records are retained only as described in section 10.

Legal basis: your consent for this operational connection; where applicable, the performance of the app service and the developer’s legitimate interests in secure operation, reliability, version management, and aggregate usage measurement (Art. 6(1)(a), (b) and/or (f) GDPR).

8. Notifications and Apple Watch

If you grant permission, Avilo schedules local notifications for reminders and optional check-ins. Delivery is handled by the operating system and may also appear on a paired Apple Watch according to your Apple notification settings. The Watch companion exchanges relevant content with the iPhone using Apple’s WatchConnectivity framework.

9. Data sharing, advertising, and tracking

Avilo contains no advertising SDK and does not track you across apps or websites. Personal app content is not sold. Data is shared only with service providers required to operate the selected Apple features (notably Apple for Sign in with Apple, iCloud/CloudKit, notifications, and platform services) and with infrastructure providers necessary to operate the Avilo server, subject to applicable safeguards.

10. Retention and security

Local and CloudKit content remains until you delete it, disable and clean up the relevant service, remove the app, or delete it using available controls, subject to Apple backup and retention behavior. Operational server records are retained only as long as reasonably necessary for security, diagnostics, active-device measurement, and version management, then deleted or aggregated.

Avilo uses HTTPS for server communication, Apple platform security for local and iCloud data, Keychain storage for sensitive account references, and signed server policies. No system can guarantee absolute security.

11. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or receive certain personal data, object to processing based on legitimate interests, and lodge a complaint with a competent data-protection authority. You may also withdraw consent where processing relies on consent, without affecting earlier lawful processing.

To exercise your rights, contact mail@simon-zeiler.de. Because server identifiers are pseudonymous, additional information from the app’s data export may be needed to match a request without collecting your real identity.

12. Children, changes, and questions

Avilo is not directed to children below the minimum age required to independently use the relevant Apple services in their country. This policy may be updated when features, legal requirements, or data practices change. Material changes will be communicated appropriately. Questions can be sent to mail@simon-zeiler.de.