Controller (Art. 13(1)(a) GDPR)
Cem Güney
Göttinger Straße 48 A
37154 Northeim, Germany
Email: contact.c3m0dev@gmail.com
A data protection officer is not required to be appointed, as the conditions of Art. 37 GDPR and § 38 BDSG are not met.
1. Data We Collect
Account data (via Sign In with Apple)
When you create an account, Apple provides us with your name and email address. This data is required to identify your account and provide the Service.
Receipt images
If you grant camera or photo library access, images you capture are processed on your device for warranty data entry and stored in iCloud (CloudKit) for sync across your Apple devices.
Diagnostic and usage data
We collect anonymous crash reports and usage statistics to improve app stability and performance. This data does not identify you personally.
Push notification tokens
If you enable notifications, a device token is used solely to deliver warranty expiry reminders to your device.
2. Legal Basis for Processing (Art. 13(1)(c) GDPR)
Art. 6(1)(a) GDPR – Consent
Camera and photo library access for receipt scanning; delivery of push notifications for warranty reminders. You may revoke consent at any time in your device Settings.
Art. 6(1)(b) GDPR – Performance of a contract
Account management and fulfillment of In-App Purchases.
Art. 6(1)(f) GDPR – Legitimate interests
Ensuring IT security and system stability, detecting and preventing misuse, and analysing crash and diagnostic data — where our legitimate interests are not overridden by your rights and freedoms.
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
3. Recipients (Art. 13(1)(e) GDPR)
- Google LLC (Firebase Authentication) — authentication service
- Apple Inc. (iCloud / CloudKit) — device synchronisation
We do not sell your data. We do not share it with advertisers, affiliates, or business partners.
4. International Transfers (Art. 13(1)(f) GDPR)
Google LLC — Firebase Authentication processes data in the United States. Google applies Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR as appropriate safeguards.
Privacy policy: policies.google.com/privacy
Apple Inc. — iCloud/CloudKit processes data subject to Apple's appropriate safeguards under Art. 46 GDPR.
Privacy policy: apple.com/legal/privacy
5. Retention (Art. 13(2)(a) GDPR)
- Account data: retained as long as your account exists. You may delete your account and all associated data at any time via Account settings in the app.
- Receipt images: stored in iCloud until you delete them.
- Diagnostic logs: retained for up to 30 days.
6. Obligation to Provide Personal Data (Art. 13(2)(e) GDPR)
- Account data (Sign In with Apple): REQUIRED to use the Service. Without it, no account can be created and the Service cannot be provided.
- Camera / photo library access: VOLUNTARY. The app functions without it; the receipt scanning feature will not be available.
- Push notification permission: VOLUNTARY. The app functions without it; warranty expiry reminders will not be delivered.
7. Your Rights (Art. 13(2)(b) GDPR)
Right of access (Art. 15 GDPR)
Obtain confirmation whether we process data about you and receive a copy.
Right to rectification (Art. 16 GDPR)
Request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR)
Request deletion of your data where no lawful basis for continued processing exists.
Right to restriction of processing (Art. 18 GDPR)
Request that we limit processing of your data in certain circumstances.
Right to data portability (Art. 20 GDPR)
Receive your data in a structured, machine-readable format and transfer it to another controller.
Right to object (Art. 21 GDPR)
Object at any time to processing based on legitimate interests (Art. 6(1)(f) GDPR). We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or processing is necessary for legal claims.
Right to withdraw consent (Art. 7(3) GDPR)
Withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Revoke via your device Settings (camera, photos, notifications).
To exercise any of these rights: contact.c3m0dev@gmail.com
8. Right to Lodge a Complaint (Art. 13(2)(d) GDPR)
You have the right to lodge a complaint with a competent supervisory authority. The authority for our registered location in Niedersachsen:
Die Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen)
www.lfd.niedersachsen.de
You may also contact the supervisory authority of your EU member state of habitual residence, place of work, or place of the alleged infringement.
9. Children
The Service is not directed to persons under the age of 16. We do not knowingly collect personal data from children. If you believe your child has provided us with data, please contact us and we will delete it promptly.
10. Changes to This Privacy Policy
We will notify you of material changes via an in-app notice and by updating the "Last updated" date at the top of this document.
11. Contact
For questions about this Privacy Policy or to exercise your GDPR rights:
contact.c3m0dev@gmail.com