Balamentum

Privacy policy

This English translation is provided for convenience only. The German version is legally binding.

Balamentum gets by with as little data as possible. This policy lists which data we process for what purpose, who else sees it and which rights you have.

Controller

Martin Oppitz Development, Am Silberblick 32, 98716 Elgersburg. Contact for all privacy questions: balamentum@modevel.de.

Data minimisation

We only collect and store the data the service needs: the name and email address of your account as well as your tasks, series and settings. We do not ask for anything else.

No analysis

We do not analyse your data. There is no usage profile, no tracking and no advertising; the content of your tasks serves your own planning alone.

The only exception is an anonymous count of whether care suggestions help: how often suggestions are shown, accepted or declined (without reference to your account) and how many accounts are still completing tasks 4 and 12 weeks after sign-up, split by care hints switched on and off. For this we store when you switch the care hints on or off; this history is deleted with your account. Only totals are evaluated; groups of fewer than five people are not reported.

Sharing only with the services involved

We do not sell your data and do not pass it on for other purposes. The recipients named in the following sections only receive the information their respective task requires, and only if you use the corresponding feature.

Encryption

All connections between app, website and server are encrypted via HTTPS. We store sign-in links and access tokens only as a hash, never in plain text.

Sign-in (Google login and email link)

  • Purpose: Signing in and maintaining your account. You sign in with your Google account or with a sign-in link sent by email; we store your name and email address.
  • Legal basis: Art. 6(1)(b) GDPR (contract for the use of the app).
  • Retention period: Account data until you delete your account; when the account is deleted, the data is removed immediately. Sign-in links are valid for 15 minutes and are deleted shortly after they expire.
  • Recipients: Google (Google login), if you choose this sign-in method; our email delivery provider for the sign-in link.

Location and saved places

  • Purpose: Showing tasks near you, searching addresses and saving places as favourites. Your device only determines your location if you switch on the location feature.
  • Legal basis: Art. 6(1)(a) GDPR (consent by switching on the feature).
  • Retention period: Saved places, addresses on tasks and your distance settings until you delete your account; when the account is deleted, the data is removed immediately.
  • Recipients: Photon (komoot) and Nominatim (OpenStreetMap Foundation) for address search and converting coordinates into addresses.

Push notifications

  • Purpose: Sending reminders and hints as push notifications to your devices, if you allow it.
  • Legal basis: Art. 6(1)(a) GDPR (consent via the push permission).
  • Retention period: The device address for push notifications, until you switch off push or delete your account.
  • Recipients: The push service of your browser (for example Google, Mozilla or Apple) and Firebase Cloud Messaging (Google) in the Android app.

AI providers

  • Purpose: AI features such as suggestions and writing help. For this we send the text of your request to an AI provider and count the monthly usage.
  • Legal basis: Art. 6(1)(b) GDPR (contract), only when you use an AI feature.
  • Retention period: The provider processes the request to answer it; we only keep the monthly usage counter and your provider settings, until you delete your account; when the account is deleted, the data is removed immediately.
  • Recipients: Mistral AI or OpenRouter, or the AI provider you enter yourself.

Payments via PayPal

  • Purpose: Taking out and billing a subscription via PayPal.
  • Legal basis: Art. 6(1)(b) GDPR (contract).
  • Retention period: Subscription records and payment receipts for the statutory retention period, even beyond the deletion of the account (see Invoices).
  • Recipients: PayPal (Europe) S.à r.l. et Cie, S.C.A.

Purchases via Google Play

  • Purpose: Buying and billing subscriptions within the Android app; we verify the purchase with Google.
  • Legal basis: Art. 6(1)(b) GDPR (contract).
  • Retention period: Subscription records and payment receipts for the statutory retention period, even beyond the deletion of the account (see Invoices).
  • Recipients: Google (Google Play).

Invoices

  • Purpose: Creating invoices for paid subscriptions and sending them by email.
  • Legal basis: Art. 6(1)(c) GDPR (obligations under tax law).
  • Retention period: For the statutory retention period (currently 8 years, Section 147(3) of the German Fiscal Code (AO), Section 14b(1) of the German VAT Act (UStG)), even beyond the deletion of the account; an active subscription prevents the account from being deleted.
  • Recipients: Our email delivery provider; in the event of audits, tax advisers and tax authorities where applicable.

Feedback

  • Purpose: Reading feedback you send in the app and improving the app. Together with the feedback we store your email address so that we can follow up.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app).
  • Retention period: Feedback is kept with your email address in our GitHub repository until we have dealt with it; when you delete your account, we remove it there. On request we also delete it earlier.
  • Recipients: GitHub, where we store the feedback including the email address for processing.

Groups and invitations

  • Purpose: Sharing tasks with others in a group. We store who belongs to which group, who invited whom and the invitation links.
  • Legal basis: Art. 6(1)(b) GDPR (contract), only if you use a group.
  • Retention period: Memberships and invitations, until you leave the group, the invitation is settled or you delete your account; when the account is deleted, they are removed immediately.
  • Recipients: The other members of the group see the shared tasks and your name.

Email notifications

  • Purpose: Reminders of due tasks as well as notes on completed tasks and newly created series dates by email to the address of your account.
  • Legal basis: Art. 6(1)(b) GDPR (contract).
  • Retention period: A delivery log against duplicate messages, until you delete your account; when the account is deleted, the data is removed immediately.
  • Recipients: Our email delivery provider.

Operation, hosting and session cookie

  • Purpose: Providing the app and the website. After sign-in, the server sets a session cookie plus a cookie that only indicates the signed-in state; both are technically necessary (Section 25(2) of the German TDDDG).
  • Legal basis: Art. 6(1)(b) GDPR (contract) and (f) (legitimate interest in secure operation).
  • Retention period: The cookies until you sign out or until the session expires.
  • Recipients: Our hosting provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which operates the server on our behalf in Germany (Art. 28 GDPR).

MCP access with access tokens

  • Purpose: Access to your tasks from your own tools (for example AI assistants via MCP) with an access token you create yourself.
  • Legal basis: Art. 6(1)(b) GDPR (contract), only if you create an access token.
  • Retention period: We store the token only as a hash, until you revoke it or delete your account.
  • Recipients: None on our part. The tool you give the token to receives the requested data on your behalf.

Android app

  • Purpose: The Android app shows the same web app as the browser; in addition it uses push notifications and purchases via Google Play.
  • Legal basis: Art. 6(1)(b) GDPR (contract).
  • Retention period: The periods of the individual features above apply.
  • Recipients: Google (Google Play, Firebase Cloud Messaging).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time, for example by switching off the feature. You can delete your account yourself in the settings.

To do so, write to us at balamentum@modevel.de.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Thuringian State Commissioner for Data Protection and Freedom of Information (Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit), Häßlerstraße 8, 99096 Erfurt, Germany.