Fällig

Privacy Policy

This is a translation of the German privacy policy for convenience. The German version is the authoritative one and prevails in case of any discrepancy: Datenschutzerklärung.

This policy covers two separate offerings: the website faellig.app and the iOS app Fällig. They process different data on different legal bases and are therefore described separately.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Yannick Wippert
Bürklin-Wolf-Straße 3
67157 Wachenheim an der Weinstraße, Germany
Email: kontakt@faellig.app

Part A — Website faellig.app

A.1 Hosting and server log files

The website is hosted on Firebase Hosting. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor within the meaning of Art. 28 GDPR on the basis of a data processing agreement.

When a page is requested, technically necessary access data are processed: in particular the IP address of the requesting device, the date and time of the request, the address requested, the HTTP status code, the volume of data transferred, the identifier transmitted by the browser (user agent) and, where applicable, the previously visited page (referrer).

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the technically sound and secure operation of the website and in defending against attacks. These data are not combined with other data sources, nor are they evaluated for advertising or analytics purposes.

The log data arise when the pages are delivered by the server infrastructure and are deleted there automatically after a period determined by the provider.

A transfer to Google LLC in the USA cannot be ruled out. It is based on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR; in addition, Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).

A.2 Contact by email

If you send an email to the address given above, the information transmitted — sender address, subject, content and any further details provided voluntarily — is processed in order to handle the enquiry. The legal basis is Art. 6(1)(f) GDPR (interest in responding); for enquiries concerning an existing or prospective contract, Art. 6(1)(b) GDPR.

Messages are deleted as soon as they are no longer required for handling the enquiry and no statutory retention obligations prevent this.

A.3 No tracking, no cookies, no third-party content

This website does entirely without:

  • cookies of any kind — not even technically necessary ones are set
  • web analytics, reach measurement and conversion tracking
  • embedded third-party content such as maps, videos or social media elements
  • fonts from external servers — all fonts are served from this domain

There is therefore neither a cookie banner nor a consent prompt on this website: there is nothing to consent to. No access to information stored on the terminal equipment within the meaning of Section 25 TDDDG (the German implementation of the ePrivacy Directive) takes place.

Part B — iOS app Fällig

B.1 No data collection by us

We operate no servers of our own for the app and process no personal data of its users. All content — items, maintenance intervals, completed maintenance, notes and receipts — resides on the device and in the respective user's iCloud. There is no account with us and no sign-in; nothing is transmitted to us.

B.2 Synchronisation via iCloud

The app synchronises its content via Apple's iCloud (CloudKit) between the devices signed in with the same Apple ID. The data reside in the respective user's private iCloud database. We have no access to that database and cannot view its contents.

The provider of the service is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Under Attachment 4, Section 3.6 of the Apple Developer Program License Agreement, Apple processes the data stored through the CloudKit APIs solely on our instructions and has committed there to the obligations set out in Art. 28 GDPR — including the confidentiality undertaking of the persons involved and the obligations to demonstrate compliance and permit audits.

The legal basis is Art. 6(1)(b) GDPR: synchronisation between devices is part of the functionality provided with the purchase of the app.

Insofar as personal data are transferred from the EEA to a third country, the same agreement provides for such transfers only to countries ensuring an adequate level of protection or on the basis of standard contractual clauses.

Under Section 3.5 of the same attachment, Apple does not access or disclose data in private CloudKit containers, except to comply with legal or regulatory obligations or at the user's request.

Synchronisation can be switched off for this app in the iOS system settings under “Apple ID → iCloud → Apps using iCloud”.

B.3 No third-party SDKs

The app contains no analytics tool, no crash reporting, no advertising networks and no other third-party libraries that establish network connections. No device or advertising identifiers are read.

B.4 Notifications

Reminders for due maintenance are created and scheduled as local notifications on the device itself. They do not run through a push service; no data are transmitted to a server for this purpose.

B.5 Purchase via the App Store

The purchase of the app is handled by Apple. Apple is independently responsible for the data arising in that context — such as Apple ID, payment data and purchase history; we receive no personal data about purchasers, only anonymous sales figures. Apple's privacy policy applies in this respect.

B.6 Data backup

In addition to the synchronisation described under B.2, the app data form part of the usual device backup: if the device's data are backed up via an iCloud backup or a local backup, they are included. Backup and synchronisation are two separate processes. Apple is responsible for the iCloud backup; we have no access to it.

Your rights

The following rights exist in respect of the processing described in Part A. In Part B, there is no processing by us for them to be directed at.

  • access to the data processed (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on legitimate interests (Art. 21 GDPR)

An email to the address given above is sufficient to exercise them.

Right to lodge a complaint

Independently of this, there is a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular with the authority of your habitual residence, place of work or the place of the alleged infringement.

Changes to this policy

This policy will be adapted as soon as the processing described here changes — for instance if the hosting provider changes.

Last updated: August 2026