1. Controller and contact
Desatec Systems GmbH is the controller for the processing described on this page where we operate the app, its backend services, or connected support workflows.
For privacy-related questions or to exercise data protection rights, contact us at info@desatec.eu. General company privacy information is also available on the Desatec Systems website.
2. Core privacy approach
Our apps are designed around data minimization. We do not collect data simply because it might be useful later.
Whenever an app can function purely on-device, the data remains on the device. This includes local app content, settings, history, and user-created records where no server sync is needed.
If an app offers sync, collaboration, billing, notifications, map services, exports, or support features, only the data required for that concrete function is transmitted.
3. Categories of data that may be processed
Depending on the app, this can include information you enter directly, such as names, business details, notes, records, exported documents, or support messages.
Some apps may process operational or technical data such as device model, operating-system version, app version, random device identifiers, push tokens, route or work-session data, billing state, or security logs.
Sensitive permissions such as location are used only where the core function requires them and only within the scope explained inside the relevant app.
4. On-device storage and limited transfer
Our default preference is local storage. If an app does not need an account, cloud sync, or shared backend, we aim to avoid adding one.
Where backend communication is necessary, we limit transfers to the minimum required to authenticate the request, deliver the chosen feature, secure the service, or complete a user-requested action.
We do not sell personal data and we do not use app data for advertising profiles.
5. Purposes and legal bases
We process data to provide app functions, maintain service security, handle support requests, and where applicable manage subscriptions or legal retention duties.
The legal basis may be contract performance under Art. 6(1)(b) GDPR, legal obligation under Art. 6(1)(c), legitimate interest under Art. 6(1)(f), or consent where a specific feature requires it.
The exact legal basis depends on the feature in question and whether the app is purely local or connected to backend services.
6. Processors and recipients
Where necessary, we use service providers for hosting, e-mail delivery, billing, push delivery, map delivery, or technical infrastructure.
Those providers receive data only insofar as required for the respective service. Where required by law, data processing agreements under Art. 28 GDPR are in place.
Not every app uses every provider. A local-only app may use none of them.
7. Retention and deletion
Data stored only on the device generally remains there until you delete it, reset the app, remove the linked account, or uninstall the app.
Data stored on our systems is kept only as long as needed for the service, support handling, account operation, fraud prevention, or legal retention obligations.
Server logs and diagnostic records are retained for limited periods appropriate to security and debugging needs.
8. Your rights
Under GDPR you may have rights of access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.
Because some apps keep data entirely on your own device, certain requests can best be fulfilled directly by deleting or exporting data locally.
For server-side data or if you need assistance, contact us and we will review the request in the context of the app and account involved.
9. Security and changes
We use appropriate technical and organizational measures to protect transmitted and stored data, including encrypted transport where services communicate over the web.
We may update this page when our app portfolio, infrastructure, or legal obligations change. The date shown above reflects the latest revision of this general apps privacy page.