Legal

Privacy Policy

Last updated: 27 August 2026

The short version

LABL Grateful is a local-first iPhone app. Your Moments, their optional because text, Annotations, and drafts stay on your device. They are never sent to LABL, PostHog, or anyone else.

If you actively choose to share basic analytics, the app sends three types of non-text usage event linked by a random ID for this installation. This helps us understand whether people return to the app. Analytics are optional: you can decline without losing any feature, turn them off later, and request deletion of analytics already uploaded.

There are no accounts, advertising identifiers, ads, cross-app tracking, or location collection. We do not sell personal information.

Who this policy covers

This policy applies to the LABL Grateful iPhone app and this website at labl.media. The Grateful app is published by Shane Melaugh, who is the data controller. LABL is the product and brand name used in this policy.

Questions and privacy requests can be sent to contact@labl.media.

Your writing and practice history

The app stores the following information only on your device:

  • your Moments and optional because text;
  • drafts and Annotations;
  • the dates and grouping needed to show your practice history; and
  • your local app and analytics preferences.

LABL cannot read, recover, or remotely delete this information because LABL never receives a copy. You can delete individual Moments inside the app. Deleting the app removes its local data from that iPhone. The app provides no account, sign-in, sync, export, social sharing, or LABL-operated cloud backup. Any device backup managed by iOS or iCloud is controlled by you and Apple, not by LABL.

Optional basic analytics

No analytics ID, event, or analytics network request is created until you affirmatively choose to share basic analytics. If you decline, the app remains fully functional and the choice is stored only on your device.

When analytics are enabled, the app can send only these events:

  1. Install: sent once after you consent for this installation.
  2. App day active: sent at most once for each local practice day on which you use the app.
  3. Practice day active: sent at most once for each local practice day on which you save your first Moment.

Each event contains only:

  • a random per-install ID, also used to link events from that installation;
  • the app version; and
  • for an active-day event, a whole-number day index counted from the day you consented.

PostHog also records the time it receives an event. Events created while you are offline can wait on your device and upload later, but they retain their original day index rather than a calendar date.

The random install ID is generated by the app. It is not your Apple ID, an advertising ID, a device serial number, or an account ID. It is pseudonymous, not fully anonymous, because it deliberately links the small set of events from one installation. It is not combined with another identity or dataset.

What analytics never include

Analytics never include:

  • any Moment, because, Annotation, or draft text;
  • keystrokes, text length, hashes, topics, embeddings, or other information derived from your writing;
  • screen views, taps, prompt use, edits, deletions, or deeper-dive interactions;
  • a calendar date, timezone, session duration, open count, device model, operating-system details, locale, referrer, or contacts;
  • precise or approximate location, or an IP-derived location; or
  • an advertising identifier or data used to track you across apps, websites, or companies.

LABL uses these analytics only to measure broad app and practice-day retention, under the consent you give in the app. They are not used for advertising, profiling, data brokering, or automated decisions about you.

Analytics processing and retention

PostHog processes the optional analytics for LABL in the United States. The app sends events directly to PostHog and instructs it not to enrich them with GeoIP location. PostHog receives no person properties and creates only a minimal profile keyed by the random install ID so the linked events can be deleted.

Uploaded analytics are retained for no more than 12 months, unless you request deletion sooner. Events waiting to upload remain on your device until they are sent. Turning analytics off clears that local queue immediately.

An analytics deletion request passes through a LABL service hosted by Cloudflare. The request contains only the random install ID. Cloudflare processes the request and delivers an operational notice to LABL so deletion can be checked. We keep that notice only as long as needed to complete and verify the request.

Changing your choice and deleting analytics

Open Settings → Data Sharing in LABL Gratitude at any time.

  • Turn Analytics off to stop future collection and uploads immediately and clear events still queued on your device. This does not delete events already uploaded.
  • Choose Delete analytics data to stop analytics, clear the local queue, and request deletion of the PostHog profile and every event linked to the current random install ID.

PostHog event deletion is asynchronous, so completion can take some time. Once the deletion service accepts the request, the app removes the old install ID and resets the analytics choice. Sharing analytics again requires a fresh affirmative choice and creates a new random ID. If the request fails, the app keeps the old ID only so you can retry.

If you cannot use the in-app control, contact contact@labl.media for help.

This website

The public website at labl.media does not currently run visitor analytics or set advertising cookies. It stores only your optional light-or-dark theme preference in your browser.

Cloudflare hosts and protects the website and necessarily processes ordinary connection information, such as an IP address and request details, to deliver pages and prevent abuse. LABL does not use that information to create a visitor profile. Cloudflare handles it under its own privacy and retention terms.

Email you send us

If you email LABL for support, feedback, or a privacy request, we receive your email address and whatever you choose to include. We use it only to respond, provide support, and handle your request. We keep correspondence only as long as reasonably needed for those purposes or to meet a legal obligation. The app never attaches your Moments or analytics ID to an email automatically.

Apple

Apple may independently process App Store, purchase, diagnostic, or device backup information under Apple’s privacy policy. LABL does not receive your Apple ID or payment details through the app.

Children

LABL Gratitude is a general-audience wellbeing app and is not directed specifically to children. We do not knowingly ask children for names, contact details, or writing. If you are a parent or guardian and believe a child enabled analytics, you can use the in-app deletion control or contact us.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of personal information, and to complain to a data-protection authority. You can withdraw analytics consent at any time without affecting the lawfulness of earlier processing.

Your writing is already under your control on your device. For pseudonymous analytics, the in-app deletion control is the most direct way to identify the current random install ID without revealing it to anyone else. You can also contact contact@labl.media to exercise a right or ask a question.

Changes to this policy

If the app or website changes how it handles data, we will update this policy and revise the date above. The current version will remain available at labl.media/privacy/.