Privacy policy

Applies to the Green Serenity mobile app and to green-serenity.com.
Last updated 5 August 2026.

The short version

Green Serenity has no accounts, no sign-up and no login. It does not ask for your name, your email address or your location. There is no analytics, no advertising, no advertising identifier and no third-party tracking of any kind in the app.

Your settings and the list of videos you have watched are saved on your device only and are never sent anywhere. The only information that reaches us is what any web server unavoidably sees when your app asks for content — described in full in section 4.

1. Who we are

Green Serenity is a mobile app produced by the Green Serenity project, an Erasmus+ Cooperation Partnership in the field of youth, project number 2025-1-LT02-KA220-YOU-000349930-E10313203, co-funded by the European Union.

The data controller for the purposes of the General Data Protection Regulation (EU) 2016/679 is [coordinating organisation: legal name, registered address, country], acting on behalf of the project consortium. Contact details are in section 15.

2. No account, no sign-up

The app has no registration, no login and no user profiles. You do not create an account to use any part of it, and there is no mechanism by which the app could associate your use with your identity. Everything in the app is open to everyone who installs it.

This is deliberate. Green Serenity is used by young people who have experienced stress, violence or abuse, and the surest way to protect information is not to ask for it.

3. What stays on your device

The app saves a small number of preferences in your device's own storage so that it behaves the way you left it. In full, this is everything it stores:

WhatWhy
Chosen languageSo the app opens in the language you picked
Text sizeTo keep your reading size between sessions
High-contrast settingTo keep the display mode you chose
Reduced-animation settingTo keep motion turned down if you asked for that
Autoplay settingTo remember whether videos start on their own
List of watched videosTo show a tick next to what you have already seen
Cached contentA copy of the latest text and media list, so the app opens instantly and works without a signal

None of this is transmitted to us or to anyone else. It is not backed up to any server we operate. It stays in the app's private storage on your phone, and it is removed when you uninstall the app or clear its data — see Your data.

Note that if you have your phone's own cloud backup switched on (iCloud or Android Backup), your operating system may include this app's storage in that backup. That is a function of your device and your account with Apple or Google, governed by their privacy policies, not ours.

4. What our server sees

The app fetches its content — the guides, stories, tutorials and gallery — from our own server at api.green-serenity.com. Those requests carry no identifier of you, no account and no device ID. They ask questions like "what guides are published, in Lithuanian?".

As with any web server, our web server records a standard access log entry for each request. Each entry contains:

An IP address is personal data under the GDPR, so we treat it as such. These logs exist to keep the service running and secure — spotting abuse, diagnosing faults, and noticing outages. They are not used to build a profile of you, are not combined with anything else, are not shared, and are deleted automatically after 14 days.

Our application log, which records which content was requested and how long it took, does not record IP addresses at all. It labels each request with a random identifier that is generated fresh for that request and cannot be traced back to a person or device.

5. Third parties

We keep these to the minimum. There is exactly one, and it receives nothing about you beyond what is described here.

Cloudflare R2 — media hosting

Videos, PDF guides and images are stored with Cloudflare R2 and delivered to your device over time-limited private links issued by our server. When your app downloads a video or a guide, Cloudflare's servers see the request and your IP address, as any file host would. Cloudflare acts as a processor on our behalf. See Cloudflare's privacy policy.

Fonts are not a third party here

Many apps download their typeface from Google's font servers the first time they run, which quietly discloses the reader's IP address to Google. Green Serenity does not: the Nunito Sans typeface is included in the app itself, and font downloading is switched off in code. Google is never contacted, on first launch or afterwards.

Cloudflare is therefore the only external destination the app contacts, and only when you open a video, guide or photograph. There is no analytics provider, no crash-reporting service, no advertising network and no social-media SDK.

6. What we do not do

To be unambiguous, Green Serenity does not:

This website behaves the same way. It uses no cookies, no analytics and no third-party fonts or scripts — every file it serves comes from green-serenity.com.

7. Device permissions

The app requests no runtime permissions. It does not ask for access to your camera, microphone, photos, contacts, calendar, files, health data or location, because it has no feature that needs them. The only capability it uses is network access, to download content.

8. Young people and children

Green Serenity is designed for young people and for the professionals who work with them. Because the app collects no personal data and has no accounts, no messaging and no user-generated content, it does not process children's personal data and no parental consent mechanism under Article 8 GDPR is required.

The app does discuss stress, mental well-being and recovery from difficult experiences. It is educational material, not therapy, and it is not a crisis service — see the crisis information on our support page.

The only personal data we process is the IP address in our server access logs. Our legal basis is legitimate interests (Article 6(1)(f) GDPR): keeping the service available, secure and working correctly. We consider this to have a minimal effect on your privacy, given the short retention period and the fact that the logs are never used to identify or profile anyone.

No consent banner is shown because we set no cookies and run no tracking that would require consent.

10. How long we keep things

DataWhereKept for
Your settings and watched listYour device onlyUntil you clear the app's data or uninstall it
Web server access logs (incl. IP)Our server, in the EU14 days, then deleted automatically
Application logs (no IP)Our server, in the EU14 days
Administrator action logsOur server, in the EU24 months — these record staff activity, not yours

11. International transfers

Our server is hosted in the European Union. Cloudflare and Google both operate global networks, so the requests described in section 5 may be handled outside the European Economic Area. Both providers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework for such transfers.

12. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and the right to data portability.

In practice these rights have very little to work on here: the settings on your phone are already entirely under your control, and the only thing we hold is an IP address in a log that deletes itself within 14 days. We have no way to link that entry to you unless you tell us the IP address and the approximate time yourself. If you would like to make a request, write to us using the details in section 15 and we will help as far as the data allows.

You also have the right to lodge a complaint with your national data protection authority. A list is maintained by the European Data Protection Board.

13. Deleting your data

Because there is no account, there is nothing on our side to delete. Everything the app has saved is on your device and goes with it. Full instructions, for both iPhone and Android, are on Your data.

14. Changes to this policy

If we change how the app handles information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly. This policy is versioned alongside the app, so earlier versions can be provided on request.

15. Contact

Questions about this policy, or about privacy in Green Serenity generally:

We aim to reply to any privacy request within 30 days, as the GDPR requires.

Co-funded by the European Union

The European Commission support for the production of this publication does not constitute an endorsement of the contents which reflects the views only of the authors, and the National Agency and Commission cannot be held responsible for any use which may be made of the information contained therein.