Cucut

Cucut privacy policy

Version 1.1. Effective date: 11 September 2026. Written against the app's source code.

This document explains what Cucut does with your data. The use agreement — what you can do with the app, what costs money and what is not guaranteed — is a separate document: the Terms and conditions.

In three sentences

Cucut runs entirely on your phone and without an account: alarms, missions, minutes and history are stored on your device and never leave it. The only thing that can leave is your leaderboard entry, and only if you switch it on: four numbers for the week, a nickname you choose and a friend code. There are no ads, no trackers, and no data is sold to anyone.

1. Who the data controller is

  • Controller: Joan Cama Ribot
  • Trading name: Somia Digital
  • Tax ID (NIF): 41531670H
  • Address: Carrer de Sant Joan, 16, 17200 Palafrugell (Girona), Spain
  • Contact email: hola@somiadigital.com

There is no data protection officer: this activity is not among those for which Article 37 GDPR requires one.

2. The principle: local first

Cucut is a local-first app. All of this lives in the database on your phone and is never copied to any server of ours:

  • your alarms (time, days, label, sound, mission chain);
  • the result of each mission and how many seconds you took to silence the alarm;
  • your screen minutes and their history;
  • your streak, the weekly report and its notes;
  • your preferences (Cucut's tone, language, switches) and your screen rules.

If you ever delete the app, all of that goes with it. We have no copy and cannot restore it for you. Backing it up is up to you, and the way to do it is the one Apple already gives you: an iCloud or computer backup of your iPhone.

3. What does leave the device: the leaderboard

The weekly leaderboard is optional. If you never switch it on, nothing of yours exists anywhere.

When you do, the app creates an anonymous session on our server (Supabase, servers in the European Union). Anonymous means literally that: we ask for no email, no phone number, no name, no Apple account and no other identity. A random identifier is created for this installation.

What travels is exactly this and nothing else:

  • the nickname you typed (2 to 16 characters; you can change it and it needn't be your name);
  • the friend code (C-XXXXX), generated by the server so you can share it;
  • the weekly aggregate: the week, mornings won, the average seconds to silence the alarm and the number of snoozes.

No alarm time, no label, no app list, no health data and no mission content ever travels.

There are two lists: friends (only people who entered your code, or whose code you entered) and global. The global one can be switched off in "Me": switching it off removes you from the list of strangers and leaves you on the friends one.

The aggregate is uploaded when you complete a mission chain or when you open the leaderboard screen. Never in the background.

You choose the nickname and everyone else on the list sees it. You are responsible for what you write there: don't use your full name, other people's data, or anything that identifies you if you'd rather it didn't.

4. Screen time and blocked apps

To block apps, Cucut uses Screen Time (Family Controls), Apple's technology, and asks for your permission first.

The list of apps you pick is not readable by us or by the app. Apple hands it over as opaque tokens: they are stored in the native part of your phone and never reach the app's JavaScript code, the database or any server. That is why the SCREEN tab shows you a count ("3 apps blocked") and Apple's own picker, never a list with names and icons: we cannot see them.

The minutes you have spent in an app don't leave the phone either: they live inside the Apple extensions that do the blocking.

The Screen Time permission is never requested during onboarding: only when you turn blocking on. If you don't grant it, the app still works: minutes and windows look the same and nothing simply gets blocked. And you can withdraw it whenever you like from the system Settings.

5. Motion and steps

Some missions are completed by moving: shaking the phone, holding your balance or walking. For that Cucut reads the device's motion sensors (accelerometer, gyroscope and the iPhone's own step counter), which is why it asks for the motion and fitness permission.

Cucut does not use HealthKit and neither reads from nor writes to the Health app. Steps are counted by the phone's sensor while the mission is open on screen, to know whether you have completed it. They are not read in the background, are not stored off the device and never leave it.

6. Camera: no image is ever saved

The camera is used in two missions:

  • the code: reading the barcode or QR code you registered yourself (your shampoo, your coffee, whatever you like);
  • push-ups: counting them by looking at your posture.

In both cases no image and no frame is stored or sent anywhere. For push-ups, the images don't even leave the native module that processes them: all that reaches the app's code is a number, the count of repetitions. The microphone is never used and the app doesn't even ask for permission to use it.

7. Notifications

Cucut schedules a local backup notification shortly after the alarm time, as a safety net in case the system fails to run our alarm. It is local: your phone schedules it and it goes through no server.

8. The subscription

Cucut Pro is charged through your Apple in-app purchase. We neither see nor receive your payment method: Apple handles all of it.

To know whether your subscription is active we use RevenueCat, an intermediary that talks to Apple. An anonymous installation identifier and the purchase status travel there. Your name and your email do not.

9. Analytics

Cucut sends no analytics today. The code is in place and it is switched off.

The day it is switched on it will work like this, and this document will be rewritten first: a handful of action names ("app opened", "paywall seen") with no text of yours, no personal identifier and no amounts, and a switch to turn it off.

10. Over-the-air updates

Cucut can update itself from the inside without going through the App Store (only the program part, never the system). To find out whether there is a new one, the app asks our update server, hosted on Cloudflare (updates.cucut.app).

That question carries the technical fingerprint of the version you have and the channel, and nothing else: no identifier of yours, no phone data and no app content. The answer is a signed program file, which the phone verifies before installing it.

11. The support form on the website

There is a support form at cucut.app/. It is the only thing on the site that collects data, and only if you fill it in.

  • What you put in: your email and your message (both required) and, if you want, your name. We ask for nothing else, and you do not need to include health data or any sensitive data.
  • What for: to read your enquiry and answer it. Nothing else: we do not build mailing lists, we do not send newsletters and we do not use those addresses for anything else.
  • Who stores it: the site is hosted on Netlify (Netlify, Inc., United States), acting as a data processor. Netlify receives and stores the submission so that we can read it. The transfer outside the European Economic Area is made under the safeguards of Chapter V of the GDPR (standard contractual clauses).
  • How long: until the enquiry is resolved, plus a reasonable period afterwards in case it is picked up again. After that it is deleted from Netlify and from our mailbox.
  • Legal basis: your consent (Article 6(1)(a) GDPR), given by sending the form, and our legitimate interest (Article 6(1)(f)) in answering people who write to us and in keeping spam out.
  • The form sets no cookies, loads no scripts and does no tracking. It carries a hidden trap field for robots, which nobody should fill in.

If you would rather not use the form, write straight to hola@somiadigital.com.

12. How long things are kept

  • On the phone: as long as you keep the app installed. That's your call.
  • On the leaderboard server: weekly scores for as long as the account exists. Delete it and they are deleted.
  • On the update server: the technical access logs Cloudflare keeps in order to run the service, for short periods and never used to profile anyone.

13. Legal basis and where data is processed

  • The local processing on your phone is not done by us: the data never leaves your device and you are the one who holds it there.
  • The leaderboard is processed on your consent (Article 6(1)(a) GDPR), which you give by switching it on and withdraw by deleting the account.
  • The subscription and the Pro entitlement check are processed to perform the contract (Article 6(1)(b)).
  • Over-the-air updates and the security of the service are processed under our legitimate interest (Article 6(1)(f)) in delivering the app working and untampered with.

The leaderboard servers are in the European Union. Our providers — Apple, Cloudflare, Netlify, Supabase and RevenueCat — may process data outside the European Economic Area; when they do, they do so under the safeguards required by Chapter V GDPR (standard contractual clauses or an adequacy decision).

14. Your rights

You have the right to access your data, rectify it, erase it, restrict or object to its processing, to data portability and to withdraw consent at any time, and to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.

In practice, and because it is faster than writing to us:

  • Erase what is on the server: "Me" ▸ "Delete account". Nickname, friend code and scores are erased. Your local data is untouched: it is yours and it stays on the phone.
  • Erase what is on the phone: delete the app.
  • Leave the global leaderboard without erasing anything: the switch in "Me".

For anything else, write to hola@somiadigital.com. Because the leaderboard is anonymous by design, to act on a request about it we will need you to tell us your friend code: we have no other way of knowing which entry is yours, and we will not ask for any personal data to find out.

15. Minors

Cucut is rated 18+ on the App Store and asks for no personal data. You must be of legal age to use Cucut and to take out its subscription, which is always paid with the Apple account holder's account.

16. Security

We do what is reasonable to protect the little that leaves the phone: all traffic is encrypted, the leaderboard stores no identity, and update files are signed. No system is infallible, and to the maximum extent permitted by applicable law we are not liable for unauthorised access that is not attributable to us.

17. Changes to this policy

If what the app does changes, this document changes first, not afterwards, and the date at the top moves. Significant changes are announced inside the app.

18. Contact

Write to us at hola@somiadigital.com. The governing version of this document is the Catalan one; the other two are translations.