Lanti
Privacy
This translation is provided for your convenience; if there is any difference, the French version prevails.
What you share with Lanti stays with you. Here is, in detail and without needless jargon, what the app stores, where, and why.
Effective September 24, 2026
The essentials
- Lanti creates no account and sends none of your data to us or to any third party: syncing goes through your own iCloud database.
- Your inner weather, journal, small steps and settings are stored on your device and, if iCloud is on, in your private iCloud database, so you find them on your other devices. We cannot read it.
- No ads, no trackers, no analytics, no third-party SDKs.
- Purchases go through Apple: we never see your name, your email address or your payment details.
- Deleting the app erases its data from your device; its iCloud copy is deleted from your iCloud settings.
1. Who is responsible
Lanti is an app for iPhone, iPhone Duo and Apple TV, published by Stefano Carbone, Switzerland (“we”). This policy covers the Lanti app and the getlanti.com website.
For any question about your data: contact@getlanti.com.
2. On your device and in your iCloud
Lanti works without an account and without a server of ours. The app contains no code that sends your data to us or to any third party. The only copy that leaves your device goes to your private iCloud database, for syncing (section 5). Its content (suggested small steps, walk memories, journal questions, help lines) ships inside the app: nothing is downloaded.
Here is what the app stores on your device, in its protected space:
| Data | What it is for |
|---|---|
| Your Lanti: name, pronouns, bud color, hatching date | Bringing your Lanti to life the way you chose. |
| Your first name, if you give it | Greeting you. It is shared with no one. |
| What brings you here (0 to 3 optional choices at setup) | Keeping your choice. This is not health data. |
| Inner weather: date, level (storm to sun), optional feeling words | Knitting the scarf and showing your mood history. |
| Journal: your entries and the question they answer | Letting you read your journal again. |
| Small steps: titles, frequencies, days completed | Tracking your steps and lighting the bud. |
| Walks, memories, treasures and seeds | Your collection and the in-game currency (never for sale). |
| Settings: end of day, hemisphere, streaks, calmer tone, animations, gentle reminder time, journal lock, country chosen for help lines | Fitting Lanti to you. |
| A random installation identifier | Accompanying your purchases with Apple (see section 4). |
| The start and end time of an SOS or breathing session, kept for 3 days | Never showing you an offer during or right after a hard moment. |
| Trial-end reminders already shown | Not showing you the same reminder twice. |
If iCloud is on, your Lanti’s data (your Lanti, your first name, what brings you here, inner weather, journal, small steps, walks, seeds, wardrobe and Lanti’s settings) is also copied to your private iCloud database. Only these stay on the device: the installation identifier, SOS and breathing session traces, the free-trial reminders already shown and the country chosen for help lines.
Your inner weather and your journal can say a lot about what you are going through. That is why they never reach us: they stay on your device and, for syncing, in your private iCloud database, which we cannot read. If you back up your iPhone (to iCloud or to a computer), this data is also part of the device backup, which you manage with Apple.
3. Face ID, Touch ID and passcode
You can lock your journal (off by default). Lanti then asks your device to check that it is really you, and your device only answers “yes” or “no”. Your biometric data stays in the device’s secure chip: Lanti never sees it, never stores it and never transmits it.
4. Purchases and subscriptions
Lanti Plus, the lifetime purchase and the collections are sold through the App Store. Apple processes the payment and your Apple Account under its own privacy policy. We receive neither your name, nor your email address, nor your payment details.
To know what you have bought, the app reads the purchase receipts signed by Apple on your device. Each purchase also carries a random identifier created by the app, unrelated to your identity: Apple attaches it to the transaction information. Today, we run no server that receives this information.
Apple provides us with aggregated sales and download reports (for example by country and by product), which cannot identify you.
5. iCloud sync
If your device is signed in to iCloud, Lanti copies its data to your private iCloud database (CloudKit), linked to your Apple Account. You find the same Lanti on your iPhone, your iPhone Duo and your Apple TV, and on a new device. This private database is accessible only to you: we can neither read nor change it. Apple hosts it under its iCloud terms.
You can turn off syncing for Lanti at any time in your device’s iCloud settings (Settings › your name › iCloud). Without iCloud, Lanti works entirely on your device, as before.
6. Reminders, help lines and widgets
Notifications
The daily gentle reminder (if you choose a time), the notice that Lanti is back from a walk (if you accepted it; silent at night) and the reminder sent two days before a free trial ends (only if you have already allowed notifications) are local notifications, scheduled on your device. No notification server is used. You can turn them off in the app or in your device settings.
Help lines (SOS)
The country for help lines comes from your device’s region setting, or you choose it yourself: Lanti does not use your location. When you tap a number, Lanti opens the Phone, Messages or WhatsApp app. What happens next is between you and the help service, under their own rules. Lanti does not know whether you called and records neither the call nor the message. “Copy number” only places the number on the clipboard.
Apple TV and widgets
On Apple TV, Lanti shows the data received from your private iCloud database (never your journal) and keeps it on the device in the same way. If widgets are offered, they show a summary prepared by the app on your device; nothing is sent elsewhere.
7. What Lanti doesn’t do
- No account, no sign-up.
- No ads, no analytics or audience measurement, no third-party SDKs.
- No tracking across apps and websites: Lanti doesn’t track you, which is why the app never asks for permission to track.
- No selling or sharing of data, no profiling.
- No access to your location, contacts, photos, microphone, camera or the Health app.
Reports from Apple
If you agreed, in your device settings, to share analytics with app developers, Apple may send us crash reports and anonymized usage statistics. You can change this choice in Settings › Privacy & Security › Analytics & Improvements.
Future features
Apart from syncing to your private iCloud database (section 5), no Lanti feature sends data to a server today. If a future feature ever needs to (for example illustrated postcards), this policy will be updated before that feature goes live, the feature will stay optional, and we will ask for your explicit consent before anything is sent, naming the providers involved.
8. The getlanti.com website and your messages
This website is made of static pages: no cookies, no trackers, no analytics, and nothing loaded from another website. It is hosted by Vercel Inc. (United States). Like any host, Vercel technically processes your IP address and connection information (browser, page requested, time) to serve the site and protect it from abuse.
If you write to us, we use your email address and your message only to reply and follow up on your request.
9. Legal framework, retention and transfers
We apply the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR).
The app’s data stays under your control, on your device and in your private iCloud database: we have no access to it. For the little data that does reach us, the legal bases are: your request, to answer your messages; our legitimate interest, to secure the website and fix errors; your consent, given to Apple, for crash reports.
Retention. The app’s data stays for as long as you keep the app, or until you delete it; its iCloud copy stays until you delete it from your iCloud settings; SOS and breathing session traces are erased after 3 days. Your messages are kept while we handle your request and its follow-up, then deleted.
Transfers. Apple and Vercel may process data outside Switzerland and the European Union, in particular in the United States, with the safeguards required by law (for example standard contractual clauses or the Swiss–EU–US data privacy frameworks).
Security. The app’s data benefits from your device’s protection: when your device has a passcode, iOS encrypts app files. In iCloud, your private database is protected by Apple’s security measures.
10. Your rights
You have the right to access your data, correct it, erase it, restrict its processing, object to it, receive it in a common format, and withdraw your consent at any time.
In practice, since everything is on your device and in your private iCloud database:
- you can see your data in the app and change your settings at any time;
- you can delete a journal entry in the app;
- deleting the app erases all its data from your device (a copy may remain in an older device backup until it is replaced);
- the iCloud copy of Lanti’s data is deleted from iCloud storage management, in your device settings;
- for your purchases, the history is kept by Apple, at privacy.apple.com.
For any request, write to contact@getlanti.com: we reply within 30 days. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), or the data protection authority of your country in the European Union.
Children and teenagers
Young people can use Lanti. Since the app sends us nothing, no child’s data ever reaches us. A minor’s purchases go through Apple’s parental controls (for example “Ask to Buy” in Family Sharing). If you are a parent and have a question, write to us.
11. Changes
If we change this policy, we publish the new version on this page with its effective date. If an important change affects your data (for example a feature that would send data to a server), we will let you know in the app before it applies.
Version in effect since September 24, 2026.