Heute

Privacy Policy

Last updated: April 2026

1. Controller

The controller responsible for the processing of personal data in connection with the "Heute" app and the website heute.feldstein-studio.de is:

Christofer Haus
Griebenowstr. 12
10435 Berlin
Germany
Email: heute@feldstein-studio.de

A data protection officer has not been appointed, as the legal requirements for doing so are not met.

2. Our Approach

The Heute app was built with the goal of collecting as little data as possible. All data you enter in the app stays exclusively on your device. Nothing is transmitted to external servers.

3. Website Access

When you visit heute.feldstein-studio.de, technical access data is processed as required to provide the website. This is handled by our hosting provider netcup GmbH, Daimlerstr. 25, 76185 Karlsruhe, Germany.

The following data may be processed:

  • IP address
  • Date and time of access
  • Pages visited
  • Referrer URL
  • Browser type and operating system
  • Volume of data transferred

Purpose: Technical provision and security of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
Retention: Server log files are deleted after no more than 30 days.
Recipient: netcup GmbH as data processor.

4. Data Processing in the App

4.1 App Content

When using the app, you enter content — in particular tasks, routines, and settings.

Data processed: Content you enter and associated metadata (e.g. timestamps).
Purpose: Providing the app's core functionality.
Legal basis: Art. 6(1)(b) GDPR (processing necessary to provide the features you use).
Storage: Locally on your device in a SQLite database.
Retention: Until deleted by you or upon uninstalling the app.

4.2 Calendar Access

With your permission, the app can access your device's system calendar. This access is read-only — the app does not create, modify, or delete any calendar entries.

Purpose: Displaying your calendar entries in the app timeline.
Legal basis: Art. 6(1)(a) GDPR (your consent via the iOS permission dialog).
Storage: Calendar data does not leave your device and is not stored separately.
Withdrawal: You can revoke this permission at any time in iOS Settings under Privacy → Calendars.

4.3 iCal Feeds

If you optionally add an iCal feed, the URL you provide is fetched directly from your device. The retrieved data is cached locally and not shared. The privacy policy of the respective provider applies to the fetch request (e.g. Proton Calendar, Google Calendar).

Legal basis: Art. 6(1)(a) GDPR (your consent by actively adding the feed).

4.4 Push Notifications

Notifications are scheduled and triggered locally on your device. No data is transmitted to external servers.

Legal basis: Art. 6(1)(a) GDPR (your consent via the iOS permission dialog).
Withdrawal: You can disable notifications at any time in iOS Settings.

4.5 Backup Feature

The app offers an optional backup feature that creates a JSON file containing your app data. This file is stored locally only and is shared solely if you actively choose to do so (e.g. via AirDrop or iCloud Drive). You are responsible for keeping this file secure.

Legal basis: Art. 6(1)(b) GDPR.

5. What Is Not Collected

  • No usage statistics or analytics
  • No tracking
  • No advertising
  • No sharing of app content with third parties
  • No user account, no registration required

6. Your Rights

As the controller, I am obliged to inform you of the following rights:

  • Access to your personal data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR)

Since no app content is stored on external servers, you can delete all your data at any time directly on your device by uninstalling the app. For requests regarding the rights listed above, please contact me at heute@feldstein-studio.de.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, Email: mailbox@datenschutz-berlin.de.

8. Changes to This Privacy Policy

I reserve the right to update this privacy policy if technical changes or new features require it. The currently published version always applies.