Igni Privacy Policy
In short
Igni needs a server: if something happens to you, your phone can't send anything, so a clock on our server decides when to tell the people you chose. That server stores as little as it can: your name, your schedule, when you lit your fire, and who is in your circle. It never stores your location, your contacts, phone numbers or email addresses. Check-ins and notification records are deleted after 90 days. Apple Health values never leave your iPhone. There are no analytics, no ads and no third-party SDKs. You can delete your account in the app, and everything is deleted right away.
Igni is not an emergency service. It never calls emergency numbers.
1. Who is responsible
Igni is made by Burak Özaslan at 1801 Labs, Maltepe, İstanbul, Türkiye, who is the data controller. Email: support@1801labs.com. For any privacy question or request, write to that address.
2. Your account, without an email address
Igni has no sign-up form. When you open it the first time, the app creates a random secret and keeps it in your iPhone's Keychain; our server stores only a one-way hash (SHA-256) of it. To protect sign-up from abuse, the app also proves to Apple that it is a genuine copy (Apple's App Attest), and we store the identifier of that key.
If you choose Link with Apple in Settings, so you can restore your account on a new phone, we store only the user identifier Sign in with Apple gives us, and, if you haven't given Igni a name yet, the name Apple shares. We don't store an email address.
3. What our server stores
- About you: the name you give, your language, your time zone, your daily time (and a weekend time, if you set one), your grace period, whether you're away and until when, and whether you have a fire of your own.
- Your devices: the push notification tokens Apple gives your devices, so we can send you notifications.
- Your check-ins: the time you lit your fire each day and how (hold, notification, widget, Shortcut or Apple Health), and the notifications we sent, with their delivered and seen receipts. These are deleted after 90 days.
- Your battery level, only if you turn it on: the last battery level your phone reported, so it can be shown in an alert ("their phone was at 4%").
- Your circle: for each connection, the name each side uses for the other (for example "Mom"), the relationship, whether it is mutual, whether it was accepted, and whether the watcher shares that they've seen your alerts. Invites that are never accepted expire, and are deleted 90 days later.
- Your subscription, if you buy Igni Pro: the product, when it expires, Apple's original transaction ID and a random identifier the app passes to Apple with the purchase, so the subscription is matched to your account.
4. What Igni never collects
- No location.
- No contacts. When you pick someone from your contacts, the picker runs inside iOS and Igni gets only the name you choose. If you pick a number to call someone you watch, it is kept on your iPhone only.
- No phone numbers or email addresses on the server. Igni sends no SMS and no email.
- No Apple Health values (section 7).
- No analytics, advertising or tracking SDKs, no cookies, and no tracking across apps or websites.
- We never sell or share personal data, use it for advertising, or make automated decisions about you.
5. Why we use it
- To run the daily clock: remind you at your time, tell your circle if your fire stays dark past your grace period, and tell them "all good" when you light it.
- To show your circle your fire, and you their receipts.
- To keep your Igni Pro features on while your subscription is active.
- To prevent abuse of sign-up (App Attest) and keep the service secure.
6. What the people in your circle see
Someone sees your fire only after they accept your invite in the app. They see the name they gave you, today's state of your fire (lit and when, not yet lit, or away), when you're away and until when, and your battery level in an alert if you turned that on. You see whether your alerts reached them and whether they saw them. Each watcher can turn off Share that I've seen it; then opening your alert isn't shown to you, but a ♥ they send still is.
If your plan allows fewer people than see your fire (for example, when Igni Pro ends), the people beyond the limit are paused: they get one notice, then no news of your fire until you have room again. We record when that notice was sent.
Either side can end a connection at any time. If you delete your account, the people in your circle get one notice that your circle has ended.
7. Apple Health (optional, Igni Pro)
If you turn on auto check-in in Settings, Igni asks for permission to read one of two things from Apple Health, only the one you choose:
- Steps: whether you've taken 100 or more steps since midnight today.
- Heart rate: whether your Apple Watch has recorded any heart rate today.
The check happens on your iPhone. The values never leave it and are never stored by Igni; the only thing sent to our server is that your fire was lit "from Health". Igni never writes to Apple Health. Health data is never used for advertising, marketing or data mining, and is never shared with anyone. You can turn it off in Settings in the app, or in iOS Settings → Health → Data Access & Devices → Igni.
8. Notifications
Notifications are how Igni works: reminders to you, and alerts, receipts and "all good" messages to your circle. They are sent from our server through Apple's Push Notification service, which delivers them to the device and processes the notification text (for example, the name your circle uses for you) to do so. You can turn notifications off in iOS Settings, but then Igni can't remind you or tell you that someone needs you.
9. Who else processes data
- DigitalOcean hosts our server, in Frankfurt, Germany. The database and its backups stay on that server.
- Cloudflare handles DNS and the encrypted connection (TLS) for igni.1801labs.com, so it processes your IP address and the requests in transit. It stores none of your Igni data.
- Apple delivers notifications (section 8), handles purchases (section 10), Sign in with Apple and App Attest, each under Apple's privacy policy.
No one else receives your data.
10. Purchases
Igni Pro is bought through the App Store with StoreKit. Apple handles payment; we never see your payment details or your Apple Account. Apple sends our server signed notices about your subscription (for example, renewals and refunds), which we use only to keep Pro on or off.
11. How long we keep data
- Check-ins, notifications and receipts: 90 days.
- Your account, settings and circle: until you delete your account.
- Backups: the server keeps a daily backup for 3 days, then deletes it. After you delete your account, your data is gone from the backups within 3 days.
- Technical logs (IP address, time, request) are kept briefly for security and rotated automatically.
- Emails you send us: as long as needed to answer you.
12. Deleting your account
In the app: Settings → Delete my account. Everything on our server is deleted right away, and your circle is told it has ended. If you have Igni Pro, the subscription stays with Apple: cancel it first in Manage subscription. Deleting the app alone doesn't delete your account.
13. Legal bases
Under the GDPR, we use your data to provide the service you asked for, Art. 6(1)(b). Apple Health auto check-in and the battery level are based on your consent, Art. 6(1)(a) and, for health data, Art. 9(2)(a); you can withdraw it at any time in the app. Preventing abuse and keeping the server secure is our legitimate interest, Art. 6(1)(f). Under the Turkish data protection law (KVKK), we process your data to perform our contract with you and, for health and battery data, with your explicit consent.
14. International transfers
Our server is in Germany, in the European Union. We are based in Türkiye, so storing your data there is a transfer abroad under the KVKK, which you agree to by using Igni. Apple and Cloudflare may process data in other countries, including the United States, under their own safeguards, such as the EU Standard Contractual Clauses.
15. Security
Connections are encrypted (TLS). Your sign-in secret is stored only as a hash. The server's database and backups are readable only by the service, and the keys that sign notifications are kept off our code repository. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
16. Your rights
Depending on where you live, including under the GDPR (EU and UK), the KVKK and US state privacy and consumer health data laws, you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to a data protection authority. You can change your name, schedule and settings in the app and delete your account there. For anything else, write to support@1801labs.com; we answer within one month.
17. Age
Igni is for adults: you must be 18 or older to use it. If you think someone under 18 has an account, write to us and we will delete it.
18. This website
1801labs.com, where this policy lives, sets no cookies, runs no analytics and loads nothing from third parties. It is served by Cloudflare, which processes your IP address and technical request data to deliver the page and protect it from abuse.
19. Changes to this policy
If this policy changes, we will update this page and the date above. If a change is significant, we will also tell you in the app before it applies.
20. Contact
Burak Özaslan, 1801 Labs, Maltepe, İstanbul, Türkiye. support@1801labs.com.