Last updated: 23.04.2026
We are pleased about your interest in our CalTracker application. The protection of your privacy is very important to us. Below, we inform you in detail about the handling of your data in accordance with the General Data Protection Regulation (GDPR).
The controller for data processing within the meaning of the GDPR is:
Dorian Laforet Riedeselstraße 35d, 82319 Starnberg, Germany [email protected] https://laforet-it.com/impressum
Each time our app is used, data and information are automatically collected from the computer system of the calling computer or end device.
The following data may be collected:
This data is temporarily stored in the log files of our system. This data is not stored together with other personal data of the user.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in ensuring the functionality, security, and optimization of the app).
For hosting our application and providing the backend infrastructure (database, REST API), we use services from Oracle Cloud Infrastructure (OCI), operated by Oracle.
We have concluded a Data Processing Agreement (DPA) with Oracle in accordance with Art. 28 GDPR. This contract ensures that Oracle processes the data only according to our instructions and in compliance with the GDPR.
As part of the operation, necessary technical data (see 2a) is processed on Oracle's servers.
Legal basis: Art. 6 (1) lit. b GDPR (processing for contract fulfillment, i.e., provision of app functions) and Art. 6 (1) lit. f GDPR (legitimate interest in secure and efficient hosting).
We use Supabase as a backend platform, which is hosted on the Oracle Cloud Infrastructure in Frankfurt.
All data actively entered by you (e.g., during registration, creation of content) is processed via the REST API and stored in the Supabase database (PostgreSQL) on the Oracle Cloud Infrastructure.
If you register for our app, we collect the following data:
Additionally, Supabase automatically generates and stores user-specific data (e.g., a unique User ID) necessary for the functionality of the user account.
This data is used exclusively for providing and managing your user account and for enabling the use of app functions.
Legal basis: Art. 6 (1) lit. b GDPR (processing for the fulfillment of the user contract).
If you contact us by email, the personal data you transmit (in particular your email address and your request, as well as any other information you provide) will be stored and processed by us to handle your inquiry and for follow-up questions. We do not pass on this data without your consent.
Legal basis: The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if this has been requested. The data you send by email will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
To analyze user behavior and improve our application, we use PostHog. We use PostHog Cloud EU for this purpose.
PostHog collects usage data such as visited pages, interactions with elements (clicks, form entries), session duration, and technical information (device type, operating system, browser). We have configured PostHog so that no IP addresses are collected.
We have concluded a Data Processing Addendum (DPA) with PostHog in accordance with Art. 28 GDPR, which ensures that PostHog processes the data only according to our instructions and in accordance with GDPR requirements.
Legal basis and right to object: The processing of this analysis data is based exclusively on your active consent pursuant to Art. 6 (1) lit. a GDPR, which you grant by activating a corresponding option (e.g., a switch) during registration or at any time in the app settings. Only after your explicit consent will the analysis of your user behavior by PostHog be started. Without your consent, no analysis of your user behavior by PostHog will be carried out. You can revoke your consent at any time with effect for the future by deactivating the corresponding option in the app settings.
If you use the image analysis function, the images you upload are processed as follows:
For sending transactional emails (e.g., registration confirmation, password reset), we use the Resend service.
To monitor application errors, track performance issues, and improve the stability of our service, we use Sentry.
To measure the effectiveness of our own advertising campaigns on Instagram, Facebook, and across the broader Meta network, and to optimize our user acquisition, we use the Meta Software Development Kit (SDK) as well as Meta's server-side Conversions API.
Important note: CalTracker does not display any advertisements inside the app. The data processing described below serves exclusively to measure and optimize the advertising campaigns we run ourselves on platforms outside the app.
Processed data:
Purpose:
Joint controllership (Art. 26 GDPR): For certain processing activities (in particular the creation of Custom Audiences and the delivery of advertising based on them), we are a joint controller together with Meta Platforms Ireland Limited. The joint-controller agreement is available at: https://www.facebook.com/legal/controller_addendum
International data transfer: Meta transfers data to the USA. Such transfers are based on the EU Commission's Standard Contractual Clauses and on the EU-US Data Privacy Framework, in which Meta Platforms, Inc. is a certified participant. Further information: https://www.facebook.com/about/privacy
Legal basis: Art. 6 (1) lit. a GDPR (your active consent). Consent is obtained within the app before any Meta SDK events are transmitted. Additionally, on iOS the use of the advertising identifier (IDFA) requires your consent via Apple's App Tracking Transparency dialog. Without your consent, no data is transmitted to Meta.
Withdrawal of consent: You can withdraw your consent at any time with effect for the future:
To manage in-app subscriptions, validate purchase receipts with Apple and Google, and analyze subscription metrics, we use the RevenueCat service.
No cookies are processed.
Your data will generally only be passed on to third parties if this is necessary for the fulfillment of the contract (Art. 6 (1) lit. b GDPR), we have a legitimate interest in doing so (Art. 6 (1) lit. f GDPR), you have consented (Art. 6 (1) lit. a GDPR), or there is a legal obligation to do so (Art. 6 (1) lit. c GDPR).
Recipients may include:
Appropriate contracts (DPA) have been concluded with all processors, or other suitable guarantees for third-country transfers exist (e.g., Standard Contractual Clauses).
We take technical and organizational security measures (TOMs) to protect your data against unintentional or unlawful deletion, alteration, or loss, and against unauthorized disclosure or access.
We store your personal data only as long as necessary to achieve the respective purposes or as required by statutory retention periods. After the purpose no longer applies or the periods expire, the data is routinely blocked or deleted.
You have the right to:
To exercise your rights, please contact the responsible body mentioned in point 1.
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.