Privacy Policy

1. Controller

The controller responsible for the processing of personal data is:

heidenreich.dk
Ing. René Heidenreich
Burgenlandstraße 93
7301 Deutschkreutz
Austria

Website: https://heidenreich.app
E-Mail: hello@heidenreich.app

2. General

Protecting personal data is important to us. We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). This Privacy Policy applies to all applications and services offered by heidenreich.app, in particular heidenreich do and heidenreich log.

3. Data Processed

The categories of personal data processed depend on the application used:

heidenreich do:

  • Master data, e.g. email address, username, and account information
  • Login data and security-related information
  • Content data, e.g. tasks, lists, projects, comments, and other user-entered content
  • Collaboration data, e.g. shares, invitations, team and project assignments
  • Usage data, e.g. feature interactions, timestamps, app version
  • Device and technical data, e.g. operating system, device type, language settings, IP address or similar technical identifiers
  • Subscription and transaction information

heidenreich log:

  • Locally stored measurements and observations (e.g. blood pressure, weight, sleep, or other individually recorded parameters) that remain exclusively on the user’s device and are not transmitted to the provider
  • Device and technical data in connection with advertising (Google AdMob), unless an ad-free purchase has been made
  • Transaction information for in-app purchases, as processed by the respective app store
  • Authentication data (Google account via OAuth 2.0) exclusively when the optional Google Drive backup feature is used

4. Registration and User Account

This section applies exclusively to heidenreich do. When a user creates an account, we process the data provided in order to set up, provide, and manage the user account, and to grant access to protected features.

heidenreich log does not require a user account. No registration data is collected.

5. Use and Data Storage

For heidenreich do, we process data entered and generated during use in order to provide the application’s features, including task planning and management, synchronisation across devices, and collaboration with other users.

For heidenreich log, all recorded data (log types, entries, measurements) is stored exclusively locally on the user’s device in a SQLite database. This data is not transmitted to the provider’s servers.

6. Backup Feature (heidenreich log)

heidenreich log offers an optional, manually triggered backup feature:

  • iOS (iCloud): The local database file is uploaded to the user’s personal iCloud container (iCloud.app.heidenreich.log). The file is accessible only within the user’s own iCloud account.
  • Android (Google Drive): The local database file is uploaded to the user’s Google Drive. This requires a one-time Google sign-in (OAuth 2.0) with a limited permission scope (access only to files created by the app). The file is stored under “Files from apps” in the user’s Google Drive.

The provider has no access to the backed-up data at any time. The database file is transferred unencrypted and resides in the user’s personal cloud storage. Users should be aware that if the file contains health-related measurements, it contains correspondingly sensitive information.

7. Legal Basis for Processing

  • Art. 6(1)(b) GDPR – for the performance of a contract or to take pre-contractual steps
  • Art. 6(1)(c) GDPR – for compliance with a legal obligation
  • Art. 6(1)(f) GDPR – based on legitimate interests, in particular regarding security, stability, further development, and prevention of misuse
  • Art. 6(1)(a) GDPR – where consent has been given

8. Paid Services and Payment Processing

Paid upgrades for heidenreich do are processed as subscriptions on iOS and Android through the respective app stores. RevenueCat may be used for technical subscription management.

For heidenreich log, a one-time in-app purchase (“Ad-free”) is available, processed through the respective app store of the platform operator.

We generally do not receive full payment data such as credit card numbers, but only the information required for assigning and managing the transaction.

9. Advertising

The free version of the apps may display advertisements. On mobile platforms, Google AdMob is used for this purpose. In the web and desktop versions, partner or advertising banners may also be shown.

Depending on the technical implementation and the user’s consent, technical identifiers, device information, usage data, or similar information may be processed. In heidenreich log, advertising is permanently disabled following the one-time “Ad-free” purchase.

10. Recipients and Processors

Personal data may be shared with external service providers to the extent necessary for delivering our services. The scope depends on the application used:

For heidenreich do, these may include in particular:

  • Hosting and cloud service providers
  • Authentication and infrastructure providers
  • Analytics, error tracking, or support service providers
  • Advertising service providers (e.g. Google AdMob)
  • App store operators and subscription management providers (e.g. RevenueCat)

For heidenreich log, these are in particular:

  • Advertising service providers (Google AdMob), unless an ad-free purchase has been made
  • App store operators (Apple, Google) in connection with in-app purchases
  • Google (OAuth 2.0 / Google Drive), if the optional backup feature is used

Where required, such service providers are engaged on the basis of a data processing agreement pursuant to Art. 28 GDPR.

11. International Data Transfers

Where service providers located outside the European Economic Area are used, or where data is processed outside the EEA, this is done only in accordance with applicable legal requirements.

Transfers may in particular be based on an adequacy decision or appropriate safeguards such as standard contractual clauses.

12. Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

For heidenreich do, account and content data is generally stored for the duration of the user account. Upon deletion of the account, the data is deleted or anonymised, unless statutory obligations require further retention.

For heidenreich log, all user data resides exclusively on the user’s device. It remains there until manually deleted or until the app is uninstalled.

13. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access, and other unlawful processing.

13a. Protection of Sensitive Health Data

This section applies exclusively to heidenreich log. The application allows users to record health-related information (e.g. blood pressure, weight, sleep, or other user-defined measurements). Such information may constitute sensitive personal data under applicable data protection laws.

The following measures are implemented to protect this data:

  • Health data is stored locally on the user’s device by default.
  • No automatic transmission of health data to the provider or to third parties takes place.
  • Backups to Google Drive or iCloud are created only upon the user’s explicit request using the optional backup feature.
  • The provider has no access to the locally stored health data or to the cloud backups created by the user.
  • Backup files are transmitted exclusively via encrypted HTTPS/TLS connections.
  • For Google Drive, only the restricted OAuth scope is used, allowing the application to access only files that it has created or that the user has explicitly selected for use with the application.
  • Health data is not used for advertising, profiling, marketing purposes, or sold to third parties.

14. Rights of Data Subjects

Data subjects have the right, subject to applicable legal requirements, in particular to:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent with effect for the future

To exercise these rights, please contact us at any time at hello@heidenreich.app.

15. Right to Lodge a Complaint

Data subjects also have the right to lodge a complaint with a competent data protection supervisory authority.

16. Website Cookies

This website uses cookies. For detailed information, please refer to our Cookie Policy (EU).

17. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy where required due to changes in the legal framework, technical developments, or modifications to our services.

Last updated: May 2026

Data Export and Deletion

heidenreich do: You can export and delete your data at any time directly within the application. In the account settings under Data & Account, you will find the options Export data and Delete account.

heidenreich log: Individual entries and logs can be deleted directly within the app. A full data export as CSV is available via the settings. Uninstalling the app will permanently delete all locally stored data.