Privacy policy

The German version is the binding one.

In short: this website sets no cookies, uses no analytics and loads nothing from third-party servers. The Kassensturz app collects no data about you; only a message you choose to send us from the app reaches us, and a daily request for exchange rates that carries nothing about you. What happens anyway is set out below.

Controller

1. This website

Server logs

When you open this website, our hosting provider’s web server records what your browser sends: IP address, date and time, the page requested, bytes transferred, browser and operating system, the referring page. We use this data to run and secure the server (legal basis: Art. 6(1)(f) GDPR), and it is deleted after 14 days at the latest. It is not combined with other data.

Hosting provider (web server and mailboxes): SHOPPROFI – Mario Köhler, Theodor-Heuss-Straße 14a, 04328 Leipzig, Germany. A data processing agreement under Art. 28 GDPR is in place, signed on 16 September 2026. The servers are located in Germany; for the server infrastructure the provider uses sub-processors based in the EU.

No cookies, no tracking

This website sets no cookies, uses no analytics or advertising services, embeds no third-party content (not even external fonts) and has no contact form. That is why there is no cookie notice.

Contact by email

If you write to us, we process your address and the message to answer you (Art. 6(1)(b) or (f) GDPR). The message stays in our mailbox while the matter is open and is deleted afterwards unless a retention duty applies.

2. The Kassensturz app

What the app collects

Nothing, unless you send us a message yourself (see below). Kassensturz has no user account and no analytics libraries. Everything you enter – transactions, categories, recurring items – lives on your iPhone and in your own iCloud account. We have no access to it, and no way to get any.

What your iPhone shares with Apple

• Your data – transactions, categories, recurring items and everything else you enter in the app – is stored on your iPhone and synced through the private CloudKit database of your own iCloud account. That is how it reaches every iPhone signed in to that account and comes back on a new iPhone. Apple stores it encrypted. That is your iCloud account, not ours; Apple processes this data under its own privacy policy. As the developer, we have no access to your account’s private database. If you don’t use iCloud, the app works on the iPhone alone.
• Your settings are stored in the key-value store of your own iCloud account so they follow you to another device: the colors and the light or dark appearance, the currency, the sort order, the statistics comparison period, whether upcoming recurring items are counted, which weekly and monthly recap you last opened, the app lock and the privacy-mode settings, including which categories it hides. The store also keeps how much of the free trial has been used, whether the first-run setup is complete and whether the starter categories have been created. This too is your iCloud account, not ours; Apple processes it under its own privacy policy.
• Face ID or your passcode is checked by the iPhone itself; the app only learns whether the check succeeded.
• Purchases and subscriptions go through the App Store. We see no payment data; the purchase contract is with Apple.

Exchange rates

To book a payment in another currency at the day’s rate, the app asks our website kassensturz.hello-labs.de for the day’s exchange rates, at most once a day while you use it. The request carries nothing about you: no identifier, no currency, no amount, no cookie and nothing from your data in the app. Like every web server, ours records the request in its log with the IP address and the time; the log is deleted after 14 days at the latest. The rates themselves come from the European Central Bank and the free currency-api service; our server fetches them there, so neither learns that you use the app (legal basis: Art. 6(1)(f) GDPR, our interest in booking payments abroad at a current rate). Without a connection the app uses the rates it already has.

Import and backup

The copy in your iCloud account brings your data back on a new iPhone. A backup or a CSV export is, in addition, a file you create and keep yourself. Importing a file from the “Meine Ausgaben” app happens entirely on your iPhone; the imported transactions are then synced through your iCloud account like all the others.

Ideas and bug reports from the app

Under Settings → Suggest an improvement you can send us an idea or a bug report. It is sent only when you tap “Send message”. It contains your message, whether it is an idea or a bug, the images you chose (such as screenshots; at most three, no larger than 1,600 pixels and without their metadata, such as the location) and, added automatically, the app version and build, the iOS version, the device model, the interface language and the state of iCloud sync (on, off, waiting or failed). It contains nothing from your data in the app – transactions, amounts, categories, items – except what you write yourself or what an image shows. It carries no name or account. If you would like a reply, you can add your email address; without it we cannot reply.

The report travels encrypted to our own server at feedback.hello-labs.de, run by the hosting provider named in section 1, which forwards it as an email to our mailbox there and keeps nothing else. Like every web server, it records the request in its log with the IP address, the time, the amount of data and the app name, build number and system version the app sends along; the log is deleted after 14 days at the latest. To keep the form from being abused, it also holds a pseudonymised form of the IP address in memory until about 15 minutes after your last request. We use the report to consider your idea or to fix the bug (legal basis: Art. 6(1)(f) GDPR, our interest in improving the app). The email stays in our mailbox while we work on it and is deleted afterwards unless a retention duty applies.

If you give your email address, it is sent with the report and set as the address our reply goes to. We use it only to answer your message, including questions about it, and for nothing else – no newsletter, no product news, no advertising (legal basis: Art. 6(1)(f) GDPR, our interest in answering your message). You can object to this at any time (Art. 21 GDPR) or ask us to delete the address; an email to us is enough. We delete a report that carries an address once the conversation is over, and 12 months after it arrived at the latest.

Deletion

Deleting the app deletes its data on that iPhone only. The copy in iCloud stays until you remove it there: you delete your data and settings from iCloud under Settings → your name → iCloud → Manage Storage → Kassensturz.

3. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR) and the right to complain to a supervisory authority – for us, the Saxon data protection authority. Since we store no personal data about you beyond the entries in the servers’ logs (with your IP address; 14 days at most, see above) and an email or a message from the app that you send us, a request for access is usually answered in a line or two.

Last updated: 27 October 2026