Privacy Policy

Introduction

This privacy policy explains how Geheimfach: Notfallmappe processes personal data when you use the app.

What Data We Collect

Geheimfach: Notfallmappe does not collect personal or usage data; we never receive the content you create in the app. If you make an App Store purchase, Apple processes that transaction under its own privacy policy; Geheimfach: Notfallmappe does not receive your payment details.

Your cards, attachments and household name are encrypted on your iPhone with a household key (AES-256-GCM) before they are saved. When you are signed in to iCloud, the encrypted entries are stored in your own iCloud account through Apple's CloudKit; the household key is kept in your iCloud Keychain, which Apple encrypts end to end. If you invite people to your household, the encrypted entries are shared with them through iCloud, and they can only read them after you hand over the key. If you join someone else's household, the entries are stored in that person's iCloud. Apple can see that a household exists, who it is shared with, how many entries it has, their size and when they change, but not their content. Apple processes iCloud data under its own privacy policy. We have no server and no access to your data or your key. Deleting the household in the app removes it from your iPhone and your iCloud.

How We Use Your Data

We use collected data only for the stated purposes. We do not sell personal data or use it for advertising or cross-app tracking.

Data Processors and Subprocessors

We do not use third-party processors for personal data.

Data Retention

We keep personal data only as long as needed for the stated purpose or as required by law. The app-specific retention periods, where applicable, are listed above.

Your Rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, withdrawal of consent and data portability. You may also lodge a complaint with a supervisory authority.

International Data Transfers

We do not transfer personal data to recipients outside the EU or EEA.

Changes to This Privacy Policy

We may update this policy when legal, technical or functional changes require it. The current version is always available at this address.

Contact

For privacy questions or to exercise your rights, contact:

Controller:
Timothy Krechel
timkrechel@googlemail.com