Privacy Policy

1. An Overview of Data Protection

General Information

The following information will provide you with an easy-to-navigate overview of what will happen to your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data Recording on This Website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under the section “Information About the Responsible Party (Referred to as the ‘Controller’ in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programmes.

For detailed information about these analysis programmes please consult our Data Protection Declaration below.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, meta and communications data, contract data, contact information, names, web page accesses, and other data generated through a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

We use the following host:

Webspace-Verkauf.de ISP e.K.
Lichtenfelser Strasse 17 a
96271 Grub am Forst, Germany

Conclusion of a Data Processing Agreement (DPA)

To guarantee processing in compliance with data protection regulations, we have concluded a Data Processing Agreement with our host.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose, the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information About the Responsible Party (Referred to as the “Controller” in the GDPR)

The data processing controller on this website is:

Carsten Sachse & Christopher Sachse
Taunusstrasse 42a
61440 Oberursel, Germany

Phone: +49 176 / 633 80 937
E-mail: info@wwwery-good-apps.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage Duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

Information on Data Transfer to the USA

Our website incorporates tools of companies domiciled in the United States. When these tools are active, your personal information may potentially be transferred to the respective companies’ US-based servers. We must point out that the United States is not a safe third country in the meaning of EU data protection law. US enterprises are required to release personal data to security agencies without you, as the data subject, being able to take judicial action to defend yourself in court. Hence, it cannot be ruled out that US authorities (e.g., intelligence services) may process, evaluate, and permanently archive your personal data residing on US servers for surveillance purposes. We have no control over these processing activities.

Revocation of Your Consent to the Processing of Data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to Object to the Collection of Data in Special Cases; Right to Object to Direct Advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Log a Complaint With the Competent Supervisory Agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Competent supervisory authority. The supervisory authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Wilhelmstraße 7, 65185 Wiesbaden, Germany, phone: +49 611 1408-0, email: poststelle@datenschutz.hessen.de, datenschutz.hessen.de.

Right to Data Portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

SSL and/or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to Demand Processing Restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

• In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
• If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
• If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
• If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

4. Recording of Data on This Website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

In some cases, it is possible that third-party cookies are stored on your device once you enter our site (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g., cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyse user patterns or to display promotional messages.

Cookies, which are required for the performance of electronic communication transactions (required cookies) or for the provision of certain functions you want to use (functional cookies, e.g., for the shopping cart function) or those that are necessary for the optimisation of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of cookies to ensure the technically error free and optimised provision of the operator’s services. If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimisation of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you write to us via a contact form (e.g. on our support pages), you transmit your first name, last name, email address and your message to us. This information is sent to us by email and is not stored in a database of the website. We only use it to handle your request and any follow-up questions, and we do not share it without your consent.

The legal basis is Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the requests addressed to us (Art. 6(1)(f) GDPR).

The data remains with us until you ask us to delete it or the purpose no longer applies (e.g. after your request has been dealt with). Statutory retention periods remain unaffected.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the fulfilment of a contract or is required for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. Analysis Tools

Umami

This website uses the web analytics service Umami Cloud. The provider is Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, CA, USA.

Umami records which pages are accessed, which page you came from (referrer), as well as browser, operating system, device type, screen size, language and the country derived from your IP address. Umami does not set cookies, does not track you across other websites and does not collect names, email addresses or other directly identifying data; page views are grouped anonymously into visits. For technical reasons, your IP address is transmitted to Umami when the page is loaded.

Umami is used on the basis of our legitimate interest in data-minimising reach measurement that helps us improve our website (Art. 6(1)(f) GDPR). You can object to this processing under Art. 21 GDPR.

A data processing agreement is in place with Umami. Where data is transferred to the USA in the process, this is based on the standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR). Further information: Umami privacy policy and Umami data processing agreement.

6. Plug-ins and Tools

cdnjs (Cloudflare)

For animations, this website loads the JavaScript library GSAP via the public content delivery network cdnjs. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the file is loaded, your browser transmits your IP address, date and time as well as browser information to Cloudflare for technical reasons. No cookies are set.

The legal basis is our legitimate interest in fast and reliable delivery of our website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Further information: Cloudflare privacy policy.

7. eCommerce and Payment Service Providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the establishment, content arrangement and modification of our contractual relationships. Data with personal references to the use of this website (usage data) will be collected, processed, and used only if this is necessary to enable the user to use our services or required for billing purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.

The collected customer data shall be deleted upon completion of the order or termination of the business relationship and upon expiration of any existing statutory archiving periods. This shall be without prejudice to any statutory archiving periods.

Payment Services

We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) is processed by the payment service provider for the purpose of payment processing. The respective contract and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

We use the following payment services / payment service providers within the framework of this website:

Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd.,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://stripe.com/privacy and https://stripe.com/guides/general-data-protection-regulation.

You can find details on this in Stripe’s privacy policy under the following link: https://stripe.com/privacy.

8. Mobile Apps — App-Specific Notes

We develop and publish several mobile apps. Which data processing applies depends on which of our apps you use. You can find a complete overview of our published apps at wwwery-good-apps.de. Sections 8.1 to 8.3 describe rules that apply to several apps; from section 8.4 onwards, we describe for each app which data is processed and where.

General for all our mobile apps: None of our apps requires a user account. We do not operate any server of our own that stores your app content, and we do not sell any data. Whether an app shows ads, sends crash reports or uses third-party services is stated in the respective app section.

8.1 Advertising in Our Apps (Google AdMob)

Some of our apps are free and financed by advertising: Good Spend (iOS), Altitude (iOS and Android), NetRadar Pro (Android), Good Salary (iOS) and Good Buy (iOS). They show ads from the Google AdMob service. How you consent to or decline advertising differs from app to app and is described in the respective app section.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”); for recipients in the USA, Google LLC. Google processes the data for ad delivery under its own responsibility.
• Processed by Google: your IP address (from which an approximate location may be derived), device and app information (e.g. device model, operating system, language, app version) and information about ads shown and clicked. Google only uses your device’s advertising ID (IDFA on iOS, advertising ID on Android) to the extent you have allowed it as described in the app section.
• Not transmitted to Google: the content you enter or measure in our apps (e.g. financial data, salary data, altitude and location data, scan results).
• Transfer to third countries: Google also processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023, Art. 45 GDPR); in addition, Google has concluded the EU Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
• Storage period: Google determines how long it stores the data; we have no access to it and do not receive any personal data from Google.
• Ad-free: In each of these apps you can remove the ads with a one-time purchase (see 8.3). After that, the app no longer loads ads.
• Further information: Google’s privacy policy and how Google uses information from apps that use its services.

8.2 Crash Reports (Firebase Crashlytics)

Good Salary (iOS) and Good Fuel (iOS) send a report to the Firebase Crashlytics service when the app crashes or an error occurs, so that we can find and fix bugs.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for recipients in the USA, Google LLC.
• Processed data: crash log (which part of the program was affected), device model, operating system and app version, time, a random Crashlytics installation identifier and, for technical reasons, your IP address. Which additional values an app sends is stated in the respective app section. Your name, email address or advertising ID are not transmitted.
• Legal basis: our legitimate interest in a stable, error-free app (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR); please write to us at the address below.
• Transfer to third countries: as described in section 8.1 (Data Privacy Framework and standard contractual clauses).
• Storage period: Google deletes crash reports after 90 days.
• Further information: Privacy and security in Firebase.

8.3 Purchases in Our Apps

Purchases in our apps (e.g. “Remove ads” or “Ad-free”) are handled entirely through the billing system of Apple (App Store) or Google (Google Play); their terms and privacy policies apply. We do not receive your payment data. From Google we only receive the order information needed for processing (e.g. order number, product, time, country, status), from Apple only aggregated sales reports. The app stores locally whether a purchase exists and checks this status with the respective store. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). We retain billing records where tax and commercial retention obligations apply (Art. 6(1)(c) GDPR).

8.4 Fridoo — Pantry and Expiry-Date Tracker (iOS)

Local processing. Fridoo processes your pantry and expiry data on your device. There is no Fridoo server that stores or processes your data. The app requires no account and no registration.

iCloud sync. Fridoo synchronises your pantry data to your personal iCloud account by default (via Apple’s CloudKit infrastructure), provided you are signed in to iCloud on the device. You can switch off the sync in the app’s settings at any time. We have no access to this iCloud container; the transfer takes place between your device and your own Apple account. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

Product data: OpenFoodFacts. When you scan a barcode and the product is not yet known locally, Fridoo retrieves the product name from the open database OpenFoodFacts (world.openfoodfacts.org). The barcode number is transmitted; for technical reasons OpenFoodFacts also receives your IP address and logs it for rate limiting. OpenFoodFacts is a non-profit open-data project. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

App permissions.

• Camera (for barcode scanning) — image data is not stored or shared; scanning takes place locally.
• Notifications (for reminders before expiry) — the notifications are generated by the device itself, without a push server on our side.

You can revoke permissions at any time under iOS Settings > Privacy.

No ads, no tracking, no analytics. Fridoo contains no advertising SDKs, no analytics services and no crash reporting services, and does not read any advertising ID.

Storage period and your rights. Your pantry data remains on your device until you delete individual entries or all data, or uninstall the app. If iCloud sync is active, the retention rules of your Apple account apply in addition. Questions: info@wwwery-good-apps.de

8.5 Good Spend — Expense Tracker / Personal Finance (iOS)

Local processing. Good Spend processes all financial data you enter (income, expenses, categories, notes, budgets) exclusively locally on your device. There is no Good Spend server, no user account and no registration. The app does not connect to any bank and never processes bank login credentials. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

App permissions.

• Camera — only for the optional receipt scanner. Text recognition runs entirely on the device; neither the photo nor the recognised text leaves your iPhone or iPad.
• Notifications — optional local reminders generated by the device itself. There is no push server and no push token.

You can revoke both permissions at any time under iOS Settings > Privacy.

Advertising (Google AdMob). Good Spend is ad-supported (provider, data and transfer to third countries: section 8.1). The ads are not personalised; every request is made with the parameter npa=1. The app does not read your advertising identifier (IDFA) and therefore shows no tracking request (ATT). Your financial data is never used for advertising or transmitted to Google.

• Consent: On first launch, Good Spend uses Google’s consent dialog (User Messaging Platform) to ask whether Google may store and access information on your device. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, the app does not load any ad.
• Withdrawal: at any time in the app under Settings → Advertising → Ad privacy settings. After the “Remove ads” purchase, the app no longer starts ads or the consent dialog.

No tracking, no analytics. Good Spend contains no analytics services and no crash or telemetry services, and does not build a usage profile.

Storage period, access and deletion. Your data remains on the device until you delete it or uninstall the app. In the app: Settings → Export as JSON (access/data portability) and Settings → Delete all transactions. Questions: info@wwwery-good-apps.de

8.6 Altitude — Altimeter (Android)

Altitude shows your height above sea level. To do so, the app uses your device’s air pressure sensor (barometer) and GPS. Altitude is free and ad-supported; the ads can be removed with the one-time purchase “Ad-free” (section 8.3). We do not operate any servers of our own for Altitude. We do not receive your measurement or location data.

Location and sensors. With your permission, Altitude uses your device’s location to determine the GPS altitude and to display speed, accuracy and coordinates. Location is determined via the location service of Google Play services on your device. Whether Google receives data in the process (e.g. Wi-Fi and mobile network data for more accurate positioning) depends on your Android settings and Google’s privacy policy; we have no influence on this. Air pressure and GPS altitude are evaluated exclusively on your device. Sensors and location only run while the app is open. Coordinates are neither stored nor transmitted to us or advertising partners. The legal basis is the provision of the app function you requested (Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR). Granting location access is voluntary; without it, the app measures with the barometer only. You can revoke the permission at any time in the Android settings.

Data stored on your device. Altitude stores locally on your device:

• the elevation profile of the current recording (altitude values and start time only, no coordinates),
• the altitude calibration (no longer used after 6 hours),
• the last measured altitude with time for the home screen widget,
• the selected unit and whether ads have been removed.

This data remains on the device until you restart the elevation profile, clear the app data or uninstall the app. Only the unit and the purchase status are included in the Android backup to your Google account, no measurement data.

Advertising (Google AdMob). Altitude shows an ad banner (provider, data and transfer to third countries: section 8.1). We do not pass the GPS data from altitude measurement on to Google.

• Consent: On first launch, Altitude uses Google’s consent dialog (User Messaging Platform, based on the IAB Transparency & Consent Framework) to ask whether Google may store and access information on your device and show personalised ads. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Your choice is stored on your device.
• Without consent: Depending on your choice, the app shows personalised or non-personalised ads. If you decline device access, the app only shows limited ads (“Limited Ads”), for which Google uses neither the advertising ID nor information on your device for advertising purposes. Even then, the data technically required for delivery (IP address, device information) is processed; the legal basis for this is our legitimate interest in offering the app free of charge, financed by advertising (Art. 6(1)(f) GDPR).
• Withdrawal: at any time with effect for the future in the app’s settings (privacy or ad settings). You can reset or delete your device’s advertising ID in the Android settings under “Privacy” → “Ads”.

8.7 Altitude — Altimeter (iOS and Apple Watch)

On iOS, too, Altitude shows your height above sea level using GPS and the device’s air pressure sensor. The app is free and ad-supported; the ads can be removed with a one-time purchase (section 8.3), and the Apple Watch app has a separate one-time purchase. We do not operate any servers of our own for Altitude.

Location and sensors. With your permission, Altitude uses your device’s precise location and the air pressure sensor (motion & fitness data). If you have granted the permission “While Using the App”, Altitude only measures while the app is open. If you additionally grant “Always” in the app, Altitude continues measuring in the background so that the widget and Apple Watch stay up to date. Evaluation takes place on your device. The legal basis is the provision of the app function you requested (Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR). You can change the permission at any time under iOS Settings > Privacy > Location Services.

Data stored on your device. So that the widget and the Apple Watch app can show current values, Altitude stores the last measured position (latitude and longitude), altitude and time as well as the last 60 altitude values in a shared app storage on your device. This data does not leave your device; it is removed when you delete the app.

Advertising (Google AdMob). Altitude shows an ad banner (provider, data and transfer to third countries: section 8.1). We do not pass location or altitude data on to Google.

• Tracking request (ATT): Before ads are loaded, iOS asks you whether Altitude may track your activity across other apps. If you allow this, Google may use your advertising identifier (IDFA) and show personalised ads; the legal basis is then your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If you decline, Google does not receive the IDFA and the app only requests non-personalised ads (npa=1); the legal basis for this is our legitimate interest in offering the app free of charge, financed by advertising (Art. 6(1)(f) GDPR).
• Withdrawal: at any time under iOS Settings > Privacy & Security > Tracking.

No analytics. Altitude for iOS contains no analytics and no crash reporting services.

8.8 NetRadar Pro — Network Scanner (Android)

NetRadar Pro shows the devices in your local network and offers network diagnostic tools. The app is free and ad-supported; the ads can be removed with the one-time purchase “Ad-free” (section 8.3). We do not operate any servers of our own for NetRadar Pro. We do not receive scan results.

Network scan and diagnostics. During a scan, the app determines in particular the IP address, MAC address, device name (hostname), manufacturer, device type, response time and open ports of devices in your Wi-Fi network. The app identifies the manufacturer using a database included in the app. Tools such as ping, port scan, traceroute, Wake-on-LAN and the detection of UPnP devices send data packets to devices in your local network or to targets you select yourself. The evaluation takes place exclusively on your device. Scan results may concern devices belonging to other people; please only scan networks you are authorised to scan.

Android requires the location permission so that apps can read the name (SSID) and identifier (BSSID) of the connected Wi-Fi network. NetRadar Pro uses the permission only for this purpose and does not determine your location. The legal basis is the provision of the app function you requested (Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR).

Public IP address (ipify). To display your public IP address, the app calls the ipify service (api.ipify.org) when loading the network overview. For technical reasons, your IP address is transmitted to the service, which is operated in the USA. According to its own statement, ipify does not log any visitor data. The legal basis is our legitimate interest in showing you a complete network overview including the public IP address (Art. 6(1)(f) GDPR). There is neither an adequacy decision nor standard contractual clauses for this service; the transfer to the USA takes place because it is necessary for the network overview you opened (Art. 49(1)(b) GDPR).

Data stored on your device. NetRadar Pro stores locally on your device the scan history (time, network range, devices found) and, for each device, IP and MAC address, hostname, manufacturer, device type, open ports, first and last seen, and your own entries such as device names, notes and favourites. The app also stores your settings and whether ads have been removed. The data remains on the device until you delete it in the app, clear the app data or uninstall the app. If you have enabled Android backup, the scan history and device names may be part of the backup in your Google account.

Advertising (Google AdMob). NetRadar Pro shows ad banners (provider, data and transfer to third countries: section 8.1). For consent, legal bases and limited ads, the information in section 8.6 applies accordingly. You can change or withdraw your consent in the app’s settings (privacy or ad settings). We do not pass scan results on to Google.

8.9 Good Salary — Live Salary Counter (iOS)

Good Salary shows in real time what you earn during your working hours. The app stores your salary and working-time data on your device. There is no Good Salary server and no user account. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

iCloud backup (optional). If you enable the backup in the app, Good Salary stores a backup of your data in the private database of your iCloud account (Apple CloudKit). On launch, the app checks whether a backup already exists there. We have no access to this data. Legal basis: Art. 6(1)(b) GDPR.

Workplace detection (optional). If you switch on automatic time tracking at your workplace, you set a workplace; the address search uses Apple Maps (your search query is sent to Apple). The app stores the workplace coordinates locally and, with the “Always” location permission, uses iOS region monitoring (accuracy approx. 100 m) to detect arrival and departure — even when the app is closed. Your movement data is neither stored nor transmitted. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR. You can switch off the function in the app and change the permission at any time under iOS Settings > Privacy > Location Services.

Notifications. Optional reminders are generated by the device itself; there is no push server.

Advertising (Google AdMob). Good Salary shows an ad banner (provider, data and transfer to third countries: section 8.1). Your salary data is not used for advertising or transmitted to Google AdMob.

• Tracking request (ATT): Before ads start, iOS asks you whether Good Salary may track your activity across other apps. If you allow this, Google may use your advertising identifier (IDFA) and show personalised ads; the legal basis is then your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If you decline, Google does not receive the IDFA; ad delivery is then based on our legitimate interest in offering the app free of charge (Art. 6(1)(f) GDPR).
• Withdrawal: at any time under iOS Settings > Privacy & Security > Tracking. With the one-time purchase “Remove ads”, the app no longer loads ads.

Crash reports (Firebase Crashlytics). Good Salary sends crash reports as described in section 8.2. As additional values, the app transmits: whether the premium version is active, the app language, device model and iOS version, the result of the tracking request, and the number of your salary entries and the total of your recorded earnings. These values are not linked to your name.

Storage period and deletion. Your data remains on the device until you delete it or uninstall the app; you can delete an iCloud backup in the app or in your iCloud settings. Questions: info@wwwery-good-apps.de

8.10 Good Fuel — Mileage and Fuel Log (iOS)

Good Fuel stores your refuelling records and trips locally on your device. There is no Good Fuel server, no user account and no iCloud sync. Good Fuel does not show ads. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

Trip recording. When you record a trip, Good Fuel uses your device’s precise location with your permission — also in the background while the recording is running. The trip is stored with its waypoints (coordinates and times) locally on your device and is not transmitted. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR. You can change the permission at any time under iOS Settings > Privacy > Location Services.

Scanning receipts. When you photograph or select a receipt, the app recognises the text on the device. Photos and recognised text do not leave the device.

AI feature and model download. For the AI feature, Good Fuel downloads a language model from the Hugging Face platform (huggingface.co) at your request; the provider is Hugging Face, Inc., USA. For technical reasons, your IP address is transmitted in the process. The model then processes your input exclusively on your device. Legal basis: Art. 6(1)(b) GDPR; the transfer to the USA takes place because it is necessary for the download you requested (Art. 49(1)(b) GDPR).

Crash reports (Firebase Crashlytics). Good Fuel sends crash and error reports as described in section 8.2. As additional information, the app transmits error messages and app events (e.g. “refuelling recorded”), but no routes, locations or amounts.

Storage period and deletion. Your data remains on the device until you delete it in the app or uninstall the app. Questions: info@wwwery-good-apps.de

8.11 Subora — Subscription Tracker (iOS)

Subora stores your subscriptions locally on your device. There is no Subora server and no user account; the app shows no ads and contains no analytics or crash reporting services. Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

iCloud sync. If you are signed in to iCloud on the device, Subora automatically synchronises your subscriptions via the private database of your iCloud account (Apple CloudKit) so that they are the same on all your devices. We have no access to this data.

Logos (logo.dev). To show the matching logo for a subscription, Subora retrieves the logo from the logo.dev service (img.logo.dev). In the process, the provider’s web address (e.g. “netflix.com”) and, for technical reasons, your IP address are transmitted — but not prices, payment data or notes. Legal basis: our legitimate interest in a clear presentation (Art. 6(1)(f) GDPR).

Cancellation help (GitHub). For information on how to cancel a subscription, Subora downloads a public list from raw.githubusercontent.com at most once a day. The provider is GitHub, Inc., USA; for technical reasons your IP address is transmitted, but no information about your subscriptions. Legal basis: Art. 6(1)(f) GDPR. GitHub is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Notifications. Optional reminders before charges are generated by the device itself; there is no push server.

Storage period and deletion. Your data remains on the device and in your iCloud account until you delete it in the app, or uninstall the app and remove the iCloud data. Questions: info@wwwery-good-apps.de

8.12 Dosara — Medication Reminder (iOS)

Dosara stores your medications, intake times and doses taken exclusively locally on your device. Because this information may be health data, Dosara contains no ads, no analytics or crash reporting services and does not call any third-party services. There is no Dosara server and no user account. Legal basis: Art. 6(1)(b) GDPR; where health data is concerned, Art. 9(2)(a) GDPR (your explicit decision to record this data in the app).

iCloud backup (optional). Only if you switch it on in the app does Dosara back up your data to your personal iCloud account (Apple CloudKit). The backup is off by default. We have no access to this data.

Notifications. The intake reminders are generated by the device itself; there is no push server.

Storage period and deletion. Your data remains on the device until you delete it in the app or uninstall the app. Questions: info@wwwery-good-apps.de

8.13 Good Buy — Purchase Decisions (iOS)

Good Buy stores your entries exclusively locally on your device. There is no Good Buy server and no user account. The app is free and ad-supported; the ads can be removed with a one-time purchase (section 8.3). Legal basis: Art. 6(1)(b) GDPR (provision of the app function).

Advertising (Google AdMob). Good Buy shows ads (provider, data and transfer to third countries: section 8.1). Your entries are not used for advertising or transmitted to Google.

• Tracking request (ATT): iOS asks you whether Good Buy may track your activity across other apps. If you allow this, Google may use your advertising identifier (IDFA) and show personalised ads; the legal basis is then your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If you decline, Google does not receive the IDFA; ad delivery is then based on our legitimate interest in offering the app free of charge (Art. 6(1)(f) GDPR).
• Withdrawal: at any time under iOS Settings > Privacy & Security > Tracking. After the one-time purchase, the app no longer loads ads.

Storage period and deletion. Your data remains on the device until you delete it or uninstall the app. Questions: info@wwwery-good-apps.de

8.14 New Apps and Changes

If we publish a new app or the data processing of an app changes, we will update this section before the new version is released.

Data protection contact

If you have questions about data protection on the website or in our apps, you can reach us as follows:

Carsten Sachse / Webdesign
Taunusstrasse 42a, 61440 Oberursel, Germany
E-mail: info@wwwery-good-apps.de

Last updated: October 2026