I am - Daily Affirmations

"Access to your mobile device. We may request access or permission to certain features of your mobile device, such as the camera, reminders, social media accounts, and other features. If you wish to change our access or permissions, you can do so in your device settings."

A motivational quotes app requesting access to the camera and social media accounts goes well beyond what is needed for its core functionality of displaying phrases and sending notifications.

"We collect location data, such as information about the location of your device, which may be accurate or inaccurate. The amount of information we collect depends on the type and configuration of the device you use to access the app. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address)."

A motivational quotes app has no legitimate need to collect GPS-based geolocation data. This level of location tracking is excessive for the app's stated purpose.

"For the navigation metric and analytics services, we use the services of the company GOOGLE INC. in its capacity as Data Processor, located in United States... For the navigation metric and analytics services, we use the services of the company MIXPANEL INC. in its capacity as Data Processor, located in United States."

User data including health-related information (mood, feelings, mental state) is shared with multiple third-party services including Google and Mixpanel for analytics, plus numerous other processors like AWS, Notion, Slack, and Salesforce.

"We will retain your personal data for no longer than is necessary to maintain the purpose of the processing, i.e. for the duration of the contractual relationship for the use of the APPS (including the obligation to retain it for the applicable statute of limitations), and when it is no longer required for that purpose, it will be deleted with appropriate security measures to ensure its anonymization or complete destruction."

The retention period is vaguely defined as the duration of the contractual relationship plus an undefined 'applicable statute of limitations,' providing no concrete timeline for when data will actually be deleted.

"Monkey Taps may update this PRIVACY POLICY at any time. An updated version of this PRIVACY POLICY will always be available on the APPS. If these changes affect purposes not foreseen in this PRIVACY POLICY, we will inform you, sufficiently in advance, of this further processing by the means of contact provided."

The company reserves the right to update the privacy policy at any time, and only commits to notifying users when changes affect entirely new purposes — routine expansions of existing data practices could go unnoticed.

"We automatically collect certain information when you visit, use, or browse the APPS. This information does not reveal your specific identity (such as your name or contact information), but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URL, device name, country, location, information about how and when you use our APPS, and other technical information."

The app collects extensive device fingerprinting data including IP address, device identifiers, browser characteristics, OS details, and usage patterns, which combined with analytics services like Google and Mixpanel can enable cross-service tracking.