Green SerenityThe short version
Green Serenity has no accounts, no sign-up and no login. It does not ask for your name, your email address or your location. There is no advertising, no advertising identifier and no third-party tracking of any kind in the app.
Your settings and the list of videos you have watched are saved on your device only and are never sent anywhere.
The app does tell us which guide or video was opened, so the project can see which of its nine languages are actually read and put translation effort where it is used. It never tells us who opened it. There is no account, no device identifier and no session anywhere in this app, so there is nothing an open could be attached to; what reaches us is the name of a guide or a video and nothing else, and it is added into a daily total before it is stored. You can switch it off in Settings. Section 4 sets out exactly what is sent and what is kept.
1. Who we are
Green Serenity is a mobile app produced by the Green Serenity project, an
Erasmus+ Cooperation Partnership in the field of youth, project number
2025-1-LT02-KA220-YOU-000349930, co-funded by the
European Union.
The data controller for the purposes of the General Data Protection
Regulation (EU) 2016/679 is
[coordinating organisation: legal name, registered address, country],
acting on behalf of the project consortium. Contact details are in
section 15.
2. No account, no sign-up
The app has no registration, no login and no user profiles. You do not create an account to use any part of it, and there is no mechanism by which the app could associate your use with your identity. Everything in the app is open to everyone who installs it.
This is deliberate. Green Serenity is used by young people who have experienced stress, violence or abuse, and the surest way to protect information is not to ask for it.
3. What stays on your device
The app saves a small number of preferences in your device's own storage so that it behaves the way you left it. In full, this is everything it stores:
| What | Why |
|---|---|
| Chosen language | So the app opens in the language you picked |
| Text size | To keep your reading size between sessions |
| High-contrast setting | To keep the display mode you chose |
| Reduced-animation setting | To keep motion turned down if you asked for that |
| Autoplay setting | To remember whether videos start on their own |
| List of watched videos | To show a tick next to what you have already seen |
| Cached content | A copy of the latest text and media list, so the app opens instantly and works without a signal |
None of this is transmitted to us or to anyone else. It is not backed up to any server we operate. It stays in the app's private storage on your phone, and it is removed when you uninstall the app or clear its data — see Your data.
Note that if you have your phone's own cloud backup switched on (iCloud or Android Backup), your operating system may include this app's storage in that backup. That is a function of your device and your account with Apple or Google, governed by their privacy policies, not ours.
4. What our server sees
The app fetches its content — the guides, stories, tutorials and gallery
— from our own server at api.green-serenity.com. Those
requests carry no identifier of you, no account and no device ID. They
ask questions like "what guides are published, in Lithuanian?".
As with any web server, our web server records a standard access log entry for each request. Each entry contains:
- the IP address the request came from;
- the date and time;
- the address requested and the response status;
- the user-agent string sent by the app or browser.
An IP address is personal data under the GDPR, so we treat it as such. These logs exist to keep the service running and secure — spotting abuse, diagnosing faults, and noticing outages. They are not used to build a profile of you, are not combined with anything else, are not shared, and are deleted automatically after 14 days.
Our application log, which records which content was requested and how long it took, does not record IP addresses at all. It labels each request with a random identifier that is generated fresh for that request and cannot be traced back to a person or device.
Counting what gets opened
When you open a guide, a video or a photograph, the app sends us the name
of that item — for example guide/ro or
story-forest-calm. That is the whole message. It carries no
account, no device or installation identifier, no session and nothing
about your phone, because none of those exist anywhere in this app.
Our server does not keep the message. It adds one to a running daily total for that item and stores only the total, so what exists afterwards is a row saying the Romanian guide was opened 41 times on 3 September. There is no list of events behind it, and no moment at which one is written down — which means there is nothing that could later be picked apart into individual visits, by us or by anyone else.
Once a day, the app also reports that it was opened at all, so the project can see roughly how many devices use it. Your phone works out for itself whether it has already done that today; we receive the fact and never anything that distinguishes your phone from another.
What this cannot tell us is who you are or what you read. The totals say which material is used, never by whom, and they cannot be turned back into a person because nothing identifying was ever attached. You can switch this off in Settings → Privacy, and when it is off nothing is sent at all.
We keep these totals for as long as the project runs, because their purpose is to show what the project produced and what was used — a question asked years after the fact by the people who funded it.
5. Third parties
We keep these to the minimum. There is exactly one, and it receives nothing about you beyond what is described here.
Cloudflare R2 — media hosting
Videos, PDF guides and images are stored with Cloudflare R2 and delivered to your device over time-limited private links issued by our server. When your app downloads a video or a guide, Cloudflare's servers see the request and your IP address, as any file host would. Cloudflare acts as a processor on our behalf. See Cloudflare's privacy policy.
Fonts are not a third party here
Many apps download their typeface from Google's font servers the first time they run, which quietly discloses the reader's IP address to Google. Green Serenity does not: the Nunito Sans typeface is included in the app itself, and font downloading is switched off in code. Google is never contacted, on first launch or afterwards.
Cloudflare is therefore the only external destination the app contacts, and only when you open a video, guide or photograph. There is no analytics provider, no crash-reporting service, no advertising network and no social-media SDK.
6. What we do not do
To be unambiguous, Green Serenity does not:
- collect your name, email address, phone number or postal address;
- collect or request your location, at any precision;
- use an analytics provider, a crash-reporting service or any third-party measurement tool — the counting described in section 4 is ours alone, reaches nobody else, and carries no identifier;
- read or use the advertising identifier (IDFA or Android Advertising ID);
- show adverts, or contain any advertising software;
- track you across other apps or websites;
- build profiles, or make automated decisions about you;
- sell, rent or share personal data with anyone — there is nothing to sell;
- use cookies in the app;
- send push notifications;
- ask you to fill in any form, or accept any content you type.
This website behaves the same way. It uses no cookies, no analytics and no third-party fonts or scripts — every file it serves comes from green-serenity.com.
7. Device permissions
The app requests no runtime permissions. It does not ask for access to your camera, microphone, photos, contacts, calendar, files, health data or location, because it has no feature that needs them. The only capability it uses is network access, to download content.
8. Young people and children
Green Serenity is designed for young people and for the professionals who work with them. The app has no accounts, no messaging and no user-generated content, and the counting described in section 4 carries no identifier of any kind — there is no device or installation id in the app to attach to it, and the totals it produces cannot be traced to a person. Because we therefore hold no personal data about anyone using the app, it does not process children's personal data, and no parental consent mechanism under Article 8 GDPR is required.
This is why the counting works the way it does. A random identifier for each installation would have been simpler to build and would answer more questions — and it would also be personal data about a child. So the app does not have one.
The app does discuss stress, mental well-being and recovery from difficult experiences. It is educational material, not therapy, and it is not a crisis service — see the crisis information on our support page.
9. Legal basis
The only personal data we process is the IP address in our server access logs. Our legal basis is legitimate interests (Article 6(1)(f) GDPR): keeping the service available, secure and working correctly. We consider this to have a minimal effect on your privacy, given the short retention period and the fact that the logs are never used to identify or profile anyone.
The totals described in section 4 are not personal data: they carry no identifier, are added into a daily figure before they are stored, and cannot be linked to a person or a device. We rely on the same legitimate interest in running and reporting on a publicly funded project, and the switch in Settings lets you decline even that.
No consent banner is shown because we set no cookies, store nothing on your device for our own purposes, and run no tracking that would require consent. The counting keeps nothing on your phone but the date of the last daily report, which is there so the app does not send a second one.
10. How long we keep things
| Data | Where | Kept for |
|---|---|---|
| Your settings and watched list | Your device only | Until you clear the app's data or uninstall it |
| Web server access logs (incl. IP) | Our server, in the EU | 14 days, then deleted automatically |
| Application logs (no IP) | Our server, in the EU | 14 days |
| Counts of what was opened (no identifier) | Our server, in the EU | For the life of the project — these are totals per item per day, not records of anyone |
| Administrator action logs | Our server, in the EU | 24 months — these record staff activity, not yours |
11. International transfers
Our server is hosted in the European Union. Cloudflare and Google both operate global networks, so the requests described in section 5 may be handled outside the European Economic Area. Both providers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework for such transfers.
12. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and the right to data portability.
In practice these rights have very little to work on here: the settings on your phone are already entirely under your control, and the only thing we hold is an IP address in a log that deletes itself within 14 days. We have no way to link that entry to you unless you tell us the IP address and the approximate time yourself. If you would like to make a request, write to us using the details in section 15 and we will help as far as the data allows.
You also have the right to lodge a complaint with your national data protection authority. A list is maintained by the European Data Protection Board.
13. Deleting your data
Because there is no account, there is nothing on our side to delete. Everything the app has saved is on your device and goes with it. Full instructions, for both iPhone and Android, are on Your data.
14. Changes to this policy
If we change how the app handles information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly. This policy is versioned alongside the app, so earlier versions can be provided on request.
12 September 2026. The app now counts how often each guide, video and photograph is opened, and reports once a day that it was opened at all. Before this it reported nothing. What is sent carries no account, device identifier or session — none of those exist in the app — and the totals cannot be traced back to a person. It was added so the project can see which of its nine languages are actually read, and put translation work where it is used. Section 4 describes it in full, and it can be switched off in Settings → Privacy.
15. Contact
Questions about this policy, or about privacy in Green Serenity generally:
- Email: info@green-serenity.com
We aim to reply to any privacy request within 30 days, as the GDPR requires.
