1. Controller
MR Digital Solutions UG (haftungsbeschränkt)
Düsseldorfer Str. 26
51379 Leverkusen, Germany
Email: support@denklaut.app
2. Data processing in the app
Recordings, transcripts, folders, and queue data are processed locally on your iPhone or Apple Watch. DenkLaut does not transfer recordings or transcripts to its own servers or cloud transcription services. Processing is necessary to provide the app functions you request (Article 6(1)(b) GDPR).
When you initiate the one-time speech-model download, technically necessary connection data, including your IP address, is sent to Hugging Face. Transcription works offline after the download. Copying text writes it to the iOS clipboard; Apple may transfer it between your devices when Universal Clipboard is enabled. Your system settings and Apple’s privacy terms apply to device backups and these services.
Local app data remains until you delete it or remove the app. Unconfirmed audio may be retained until successful transcription or until you delete it.
3. Visiting the website
When you visit, Cloudflare as our delivery and protection provider and our web server at Hetzner Online GmbH process technically necessary connection data, particularly IP address, time, requested address, browser, and device information. This is necessary for secure and reliable operation based on our legitimate interest (Article 6(1)(f) GDPR). Server logs are normally deleted after 14 days.
We use a self-hosted, cookie-free Rybbit instance for audience and error analysis. It processes page views, referrer, language, browser and device details, outbound links, and performance metrics. Rybbit does not store the IP address, does not record inputs or sessions, and uses a pseudonymous visitor identifier renewed daily. The basis is our legitimate interest in improving the website (Article 6(1)(f) GDPR). Data is deleted when no longer necessary for this purpose.
Your light or dark appearance choice is stored only in your browser. The website has no marketing cookies and does not access app content.
4. Contact form
If you use the form, we process your name, email address, topic, and message to handle your request. The basis is Article 6(1)(b) GDPR for contractual or pre-contractual requests and otherwise our legitimate interest in answering support requests (Article 6(1)(f) GDPR). Required fields are necessary so that we can respond.
Cloudflare Turnstile processes IP address, browser, device, interaction, and security signals to prevent abuse. This is based on our legitimate interest in protecting the form (Article 6(1)(f) GDPR). The message is sent through Resend and Cloudflare Email Routing to our support mailbox at Google. We retain it until the request is resolved and afterwards only where statutory retention duties apply.
5. Recipients and international transfers
Where necessary, recipients are our hosting and IT providers Cloudflare, Resend, Google, Hugging Face, and Apple. These providers may also process data in the United States. Transfers are based on an adequacy decision or suitable safeguards, particularly EU Standard Contractual Clauses.
6. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability, and objection. Contact support@denklaut.app or use the support page. You may also lodge a complaint with a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. No automated decision-making or profiling takes place.