Privacy Policy
Effective 2026-10-09 · Last updated 2026-10-09
On this page
What we collect
Using the app needs no account, and the app bundles no analytics SDK. Without an account, nothing from your calendar is collected.
The app has two optional features that talk to our server: the optional account with cloud backup (see “Optional account” below), and Online services. While Online services is on, the app sends the following to almanaut.io at most once a day:
- A device code — a random code created by our server, containing nothing about you
- App version, iOS version and device model (for example, iPhone16,1)
- Interface language, in-app region, time zone and theme
- Whether the full version is unlocked and whether notifications are allowed
We use it to see how many people use which version, to find your device’s record when you write to us, and to send notices later. It is never used for advertising and never sold. It is not linked to your name, email or Apple ID — unless you include the device code when you write to us, in which case we use it only to answer you. Our server does not keep your IP address. Online services are off by default in the European Union, the European Economic Area, the United Kingdom, South Korea and mainland China, where we use them only with your consent; elsewhere they are on by default and you can turn them off in More → Online services. Turning them off deletes your device’s record from our server. Records unused for 13 months are deleted automatically. The server is operated by JOESAN INC and hosted in Japan (Tokyo).
Optional account
You can create an account in the app (More → Account & cloud backup) or on this website (Account page) for cloud backup, which is for members. If you do, we keep:
- Your email address and a one-way hash of your password (never the password itself)
- The devices and browsers signed in to it, with the time each was last used
- Purchases you link to it (product, date, expiry and refund status — never payment details)
- If you turn on cloud backup in the app: the events and reminders you created, encrypted on our server
We use these only to sign you in, keep your devices in step and show your purchases. Sign-in codes are sent by email; failed sign-ins are recorded for 30 days to stop password guessing. Backed-up content is opened by staff only when you ask for help or the law requires it, and every such access is logged. You can delete the account at any time on this website: it is disabled at once and erased with all its data after 30 days. If a membership ends, backups are kept read-only for 90 days and then erased. The legal basis is performing the service you asked for. Data is stored in Japan (Tokyo); if you are in the EU, the UK, South Korea or mainland China, creating an account means your data is transferred there, and we ask for your consent to that when you turn on cloud backup.
What stays on your device
Everything you create is stored on your phone:
- Events you add
- Lunar reminders
- Cities you saved for sunrise and sunset
- Your settings: region, language, display preferences
Unless you sign in and turn on cloud backup, none of this is ever sent to us. With cloud backup on, only your events and reminders are backed up — never cities, location or your system calendar.
Permissions
Three, each asked for only at the moment you use the feature that needs it, and each optional:
- Notifications — so reminders can fire. Decline and the app still shows when each reminder is next due.
- Location — to compute sunrise and sunset where you are. The coordinates are kept in memory only while the app is running; the app does not store or transmit them. Decline and the app uses a city you pick from its built-in list, or your region’s default city; the times are that city’s and may differ from where you are.
- Calendar — to show your existing calendar events alongside the almanac. Your calendars are only read: once you grant access, their events are read into memory while the app is running so they can be shown, and are not kept after the app quits. Only if you turn on “Add to system calendar” (Account & cloud backup) does the app create one separate calendar named “Almanaut” and keep the events you created in it; it never changes your other calendars.
Third parties
The app bundles no third-party SDK of any kind. In the app, the only third party involved is Apple, and only for the purchase: the App Store handles payment and tells the app whether this Apple ID owns the full version. We never see your payment details, and we do not receive your Apple ID.
If you buy a membership on this website instead, payment is handled by our payment service at pay.joesan.io, which passes card and PayPal payments to processors such as Stripe and PayPal. We receive only the amount, whether it was paid or refunded, and the email of your account — never your card details.
Crash data
If — and only if — you have turned on "Share iPhone Analytics" in iOS Settings, Apple’s own system mechanism may make crash reports available to us in aggregate. We integrate no third-party crash reporting SDK, and we neither receive nor store crash data ourselves. Online services (see above) send no crash or usage logs.
Your rights
Without an account, the only thing we may hold about you is the device record described above, and only while Online services is on. With an account, you can see what we hold and delete it yourself on the Account page. You can delete it yourself by turning Online services off. To ask for a copy or a correction instead, write to us with the device code shown in More → About. The data on your phone is yours: the app can export all of it to a file you keep, and deleting the app removes all of it.