Privacy Policy

1. Who is responsible

These applications and this website are operated by Appinger, a sole proprietorship based in Germany. Full contact details, including postal address, are given in our Impressum, which forms part of this notice.

For anything relating to data protection, write to sisermann@gmail.com.

2. What our apps store, and where

Every Appinger app is local-first. What you enter is written to storage on your own device — a local database or the operating system's preferences store — and stays there. It is not uploaded to us. We have no copy of it and no way to retrieve it.

Concretely, this means:

• No server of ours receives your app data. The one narrow exception is blockinger's optional sync, described in 3.4 below.
• There are no accounts, no sign-up, no login, no passwords, no profiles.
• We use no analytics SDK, no crash-reporting SDK and no advertising SDK.
• We do not collect device identifiers or an advertising ID.
• We do not profile you and carry out no automated decision-making.
• We do not sell or share personal data. There is nothing to sell.

Your data is included in your device's own backup (iCloud, Google, or a local backup) if you have that enabled. That backup is between you and your device vendor; we have no access to it.

3. The narrow exceptions

Three things genuinely do involve a third party. We would rather name them plainly than bury them.

3.1 Purchases (noisinger, and any future paid app)

Paid features are sold by Apple or Google, not by us. Your payment details go to them and never reach us. We receive no name, address or card data — only anonymous, aggregated sales reports.

To know whether you have purchased, the app uses RevenueCat (RevenueCat, Inc., USA) as a processor. RevenueCat receives a randomly generated app-user identifier, your purchase receipt, and basic device and country information. It is not linked to your name, and we cannot use it to identify you. See RevenueCat's privacy policy.

3.2 Fonts

Some apps currently load a typeface from Google's font service at first launch, which discloses your IP address to Google. We regard this as an avoidable transfer and are bundling the fonts into the apps so that no such request is made. Until that ships for a given app, this notice tells you it happens.

3.3 Speech (doinger)

doinger turns speech into text using the speech-recognition service built into your operating system. Depending on your device, model and settings, that provider (Apple or Google) may process the audio on the device or on its own servers. The resulting text is stored locally by us; the audio is not sent to Appinger at any point. Your platform's privacy settings govern this, and the app asks your permission before using the microphone.

3.4 blockinger, the browser extension

blockinger is a Chrome extension rather than a mobile app, so it works differently and deserves its own explanation.

To decide whether to blur a page, it has to be able to see the page you are on. That is why it asks for broad site access. The check happens entirely inside your browser — the address is compared against your own whitelist locally, and no browsing history, URL or page content is sent anywhere. We do not receive it, log it, or analyse it, and there is no analytics in the extension.

The extension also offers optional sync, so one whitelist can follow you between browsers. It is off unless you turn it on with a passphrase. When it is on:

• Only your whitelist is synced — never your history or what you visited.
• It is encrypted on your machine before it is sent, with a key derived from your passphrase. We hold no key and cannot read it.
• The server stores only an identifier derived from that passphrase plus the encrypted blob. It has no account, no email address and no name attached.
• If you never turn sync on, nothing ever leaves your browser.

4. This website

This site is static and deliberately plain.

• No cookies. The site sets none, of any kind. That is why you see no cookie banner — there is nothing to consent to.
• No analytics and no third-party resources. Every asset is served from this domain.
• Hosting. The site is hosted by Netlify, Inc. (USA). Like any web server, Netlify records technical access logs which include your IP address, the time of the request, and your browser's user agent. These are kept briefly for security and to keep the service running (Art. 6(1)(f) GDPR — our legitimate interest in a functioning, non-abused website).
• No contact form. We removed it. Contacting us means sending an ordinary email, so nothing you write passes through a third-party form service first, and there is no form data for us to hold.

Because Netlify is based in the United States, using this site involves a transfer of data there. Netlify is certified under the EU–U.S. Data Privacy Framework and we additionally rely on the European Commission's Standard Contractual Clauses.

5. Legal bases for processing (GDPR)

Where we do process personal data, our legal bases under Art. 6(1) GDPR are:

• Performance of a contract (lit. b) — verifying a purchase so the app can unlock what you paid for.
• Legitimate interests (lit. f) — server logs needed to operate and secure this website.
• Consent (lit. a) — where you actively grant a permission, such as microphone access. You can withdraw it at any time in your device settings.

6. How long we keep things

Data inside an app lives on your device until you delete it — we set no retention period because we hold nothing to retain.

• Website access logs: kept by our host for a short period, then deleted.
• Contact enquiries: kept as long as needed to deal with your request, and then for as long as German commercial and tax law requires us to retain business correspondence.
• Purchase records: held by Apple, Google and RevenueCat under their own policies.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful beforehand.

An honest caveat. For app data, these rights are largely satisfied by the app itself: the data is on your device, so you already have direct access to it and can erase it at any moment. If you ask us to erase your app data, we cannot — not as a refusal, but because we do not have it. See Data Deletion for how to remove it yourself.

If you contact us to exercise a right, we may be unable to identify you in our records, precisely because we hold so few. Under Art. 11(2) GDPR we are not required to collect additional information merely to be able to do so.

You also have the right to complain to a supervisory authority. In Germany this is the data protection authority of the federal state in which you live.

8. Children

Our apps are general-purpose tools intended for adults and are not directed at children. We knowingly collect no personal data from children — consistent with the fact that we collect none from anyone.

babinger is used by a parent or carer to record notes about their own infant. That information is entered by the adult using the app and, like all app data, never leaves their device.

9. Security

The strongest security property we can offer is structural: data we never receive cannot be breached on our side, leaked by us, or handed over. That is the main reason these apps are built local-first.

On your device, your data is protected by your operating system's own protections and by the passcode or biometric lock you have set. This website is served only over HTTPS.

10. Changes, and how to reach us

If we change this policy we will update the date at the top of this page. If a change is significant we will say so in the app.

Email: sisermann@gmail.com
Postal address and legal details: see our Impressum
All addresses: appinger.app/contact