Privacy Policy

1. Controller

Shaker Badal Shukur Shukur, Wallstr. 3, 31655 Stadthagen, Germany
Email: support@fristwache.de

This policy applies to the website fristwache.de and to the iOS app Fristwache.

2. Website

Hosting and server log files

The website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit it, the host processes technically necessary data (IP address, date and time, page requested, amount of data transferred, browser and operating system, referrer) to deliver the pages and keep the service secure. The legal basis is Art. 6(1)(f) GDPR. The host is certified under the EU-US Data Privacy Framework; log data is stored and deleted according to its policies. More information: the host's privacy policy.

No cookies, no tracking

The website sets no cookies, uses no analytics or statistics tools and embeds no third-party content. Fonts are also loaded directly from this website, not from external servers.

Contact by email

If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no statutory retention periods apply.

3. Fristwache iOS app

Using the app without an account

Without an account, the app stores everything you enter (contracts, documents, settings) only locally on your iPhone. This data is not transferred to us.

User account and sync

If you create an account, we process your email address, your password (only as a secure hash), your username and the content you create in the app (e.g. contracts, amounts, price changes, deadlines, notes, documents, reminder and display settings) to provide your account and sync your data across your devices. The legal basis is Art. 6(1)(b) GDPR.

For this we use Supabase (Supabase Pte. Ltd., Singapore) as a processor. The data is stored on servers in the EU (Frankfurt am Main) and transferred encrypted. Documents are kept in private storage that only your account can access. Where Supabase may access data from third countries for operations and support, this is based on the EU Standard Contractual Clauses.

Account emails

We send emails for verification codes, password resets and email address changes through the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA); they are sent through servers in the EU (Ireland). This processes your email address and the content of the email (Art. 6(1)(b) GDPR). Open and click tracking is not enabled for these emails. Resend is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses also apply.

Fristwache Plus (in-app purchases)

Subscriptions are bought and paid for through the App Store; Apple (Apple Distribution International Ltd., Ireland) handles payment. We do not receive payment details. To manage subscription status we use RevenueCat (RevenueCat, Inc., 1032 East Brandon Blvd #3003, Brandon, FL 33511, USA). RevenueCat processes an app user ID (your account ID if you have an account, otherwise a random ID) and purchase information from Apple (e.g. product, period, status). The legal basis is Art. 6(1)(b) GDPR. Transfers to the USA are based on the EU Standard Contractual Clauses.

Reminders, camera and photos

Deadline reminders and the monthly summary are scheduled as local notifications on your iPhone; no server is involved. The app only accesses the camera, photos or files when you add a document or scan a contract yourself, and only after you allow it in iOS. When you scan, the app recognizes the text directly on your iPhone (Apple Vision); the scan is not sent to us or to third parties for analysis. The app saves the scan as a document with the contract; with an account it is synced like your other documents.

Calendar, Face ID and ratings

If you add a deadline to your calendar, the app creates an event after you allow it; it does not read your other calendar entries. The app lock uses Face ID or Touch ID through iOS: the check happens only on your device, and we receive no biometric data. For ratings the app uses Apple's rating dialog; whatever you enter there is processed by Apple.

Retention and deletion

We keep account data as long as your account exists. You can delete your account in the app under Profile; this deletes your account data, contracts and documents. You remove local data by deleting it in the app or deleting the app itself. You can export your data in the app at any time.

4. Your rights

Under the GDPR you have the right to:

• access (Art. 15), rectification (Art. 16) and erasure (Art. 17),
• restriction of processing (Art. 18) and data portability (Art. 20),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21),
• lodge a complaint with a data protection supervisory authority (Art. 77).

To make a request, simply email the address above.

The German version of this policy is authoritative; this English version is a translation.