Legal
Privacy Policy
Controller and contact: see Impressum.
What data we process
- Account data: Email address and password hash to create and secure your account.
- Profile & settings: Preferences such as weight unit, goals, timezone, and 2FA status.
- Entries: Weight entries you add or import.
- Linking: Emails related to incoming/outgoing account link requests and linked accounts.
- Support: Messages you send to support (email metadata and content).
- Technical data: Server logs (IP address, timestamps, user agent) and session cookies needed to operate the service.
Purpose and legal bases (Art. 6 GDPR)
- Provide the service (Art. 6(1)(b)): account creation, login, storing your entries and settings.
- Security and abuse prevention (Art. 6(1)(f)): protect Schautrack accounts, detect misuse, maintain reliability.
- Legal obligations (Art. 6(1)(c)): comply with statutory requirements (e.g., security logging).
- Consent (Art. 6(1)(a)) where explicitly requested (e.g., optional features you enable). You can withdraw consent at any time.
Cookies
We use only essential cookies for session management and security. No tracking or advertising cookies are set. If you block essential cookies, you may not be able to sign in or use the service.
Storage duration
We store your data while you have a Schautrack account. If you delete your account, related personal data is removed or anonymized unless legal retention duties require longer storage (e.g., security logs for a limited time).
Sharing
We do not sell personal data. Data is shared only with service providers necessary to operate Schautrack (e.g., hosting/database) under confidentiality and data processing agreements, or where required by law. No advertising or third-party tracking providers are used.
International transfers
Hosting or processors may be located outside your country. Appropriate safeguards (e.g., standard contractual clauses) are used where required.
Deletion and export
You can delete your account (and personal data stored with it) anytime via Settings → Delete account, or request deletion by following the steps on the deletion page. You can export your data via Settings → Backup & restore.
Your rights
You have the rights of access, rectification, erasure, restriction, data portability, and objection where the legal basis is Art. 6(1)(f). You may withdraw consent at any time. To exercise these rights, contact via the contact above. You also have the right to lodge a complaint with your supervisory authority (e.g., Bayerisches Landesamt für Datenschutzaufsicht).
Children
The service is not directed to children under 16. Accounts found to belong to minors will be removed.
Changes
We may update this policy. The version date will be adjusted, and material changes will be highlighted in the app.
Contact
