How to request a copy of your data from any app

The short answer: you have the right to request a full copy of your personal information from any service you use. Many platforms offer an automated tool to download an archive containing your data in just a few clicks; for those that don't, you simply need to email the privacy contact listed in their legal terms to obtain your data package free of charge.

The General Data Protection Regulation (GDPR) recognises two key rights in the European Union: the right of access (knowing what data is held about you and how it is processed) and the right to data portability (receiving that information in a standard format to keep or transfer to another tool). Even so, the process for obtaining that file varies significantly depending on the application.

1. The quick route: direct download tools

Medium-sized and large platforms usually have an automated export system. In most cases, you don't need to contact anyone:

• In account settings: look for sections labelled 'Privacy', 'Your Data', or 'Security'. Services such as Google (Takeout), Apple (Data and Privacy), or Microsoft have dedicated pages where you can tick the categories you wish to include.
• In mobile apps: within your profile, check if there is an option such as 'Download my data' or 'Export account'. Tapping it triggers the system to generate a copy in the background and send you a temporary download link via email.

This process can take anywhere from a few minutes to several days if the volume of files or activity logs is particularly large.

2. What to do if an app has no download button

Not all tools provide a self-service export panel. In those cases, the request is handled by email:

• Find the contact details: check the app's privacy policy. As a rule, it must list a dedicated email address (often a privacy inbox or the Data Protection Officer's address) or a support form.
• Draft a specific request: state your name, the email address or username you used to register, and clearly explain that you are exercising your right of access and data portability to receive a complete copy of the data linked to your account.
• Verify your identity: to prevent third parties from requesting your data, always send the request from the email address linked to the service. If the company asks you to confirm additional details before sending the file, this is standard security practice.

The organisation must respond without undue delay and, generally, within one month of receiving your request.

3. What information the file should contain

A full copy is not limited to your profile photo or username. When reviewing the package you receive, you should find:

• Data you provided: profile details, lists, tasks, notes, messages, or any content you have created on the platform.
• Usage and activity logs: login history, IP addresses you connected from, and settings changes.
• Metadata and diagnostics: technical information about your devices and feature usage that the app has stored in association with your account.

The export usually arrives as a compressed file (.zip) containing documents in open, machine-readable formats such as JSON or CSV, or easily readable files in HTML or PDF format. If you want to understand what permissions an app that reads your email asks for and how they affect the volume of data held about you, it is worth reviewing these permissions periodically.

4. Distinguishing between cloud data and local data

It is worth considering where your information lives before requesting it. Some applications store your data solely on your local device or sync directly via services like iCloud without routing it through the app developer's own servers. In these cases, the company does not hold copies of your tasks or calendar events because they are never stored on its infrastructure, and backups are handled directly by your operating system.

For services with their own cloud infrastructure, central servers do retain the information linked to your profile. At Madrugo, for example, our servers and database are hosted within the European Union, and permissions for email, tasks, or calendars are limited to querying your regular providers without storing unnecessary duplicates of your messages. Checking the articles in our privacy section from time to time will help you better understand how your data moves between tools.