Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

Malupp GmbH
Eystrasse 52
3427 Utzenstorf
Switzerland
hi@malupp.com

For all privacy-related enquiries, including exercising your data subject rights, please contact us at the above address or email.

2. Data We Collect

We collect the minimum data necessary to provide and improve our Services. Depending on the Service you use, this may include:

Category	Examples	Source
Contact data	Email address, name	Provided by you (e.g. contact form, in-app support)
Account data	Username, password (hashed), profile information	Provided by you at registration
Usage data	Feature interactions, session duration, screen views	Automatically collected via analytics tools
Technical data	App version, operating system, device type, language	Automatically collected
Purchase data	Subscription status, purchase history	Received from Apple / Google (no payment card data)
User-generated content	Data you create or import within the app	Provided by you

We do not knowingly collect sensitive personal data unless explicitly required by a specific Service and disclosed separately at that point.

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

Purpose	Legal Basis (revFADP / GDPR)
Providing and operating our Services	Performance of a contract (Art. 31 revFADP / Art. 6(1)(b) GDPR)
Responding to enquiries and support requests	Legitimate interest / performance of a contract
Improving and developing our Services through analytics	Legitimate interest (Art. 31 revFADP / Art. 6(1)(f) GDPR)
Processing in-app purchases and subscriptions	Performance of a contract
Sending important service-related communications	Legitimate interest / performance of a contract
Compliance with legal obligations	Legal obligation (Art. 31 revFADP / Art. 6(1)(c) GDPR)
Sending marketing communications (if opted in)	Consent (Art. 31 revFADP / Art. 6(1)(a) GDPR)

4. Analytics

Our website uses Simple Analytics, a privacy-first analytics service that does not use cookies and does not collect personally identifiable information. No IP addresses are stored; only aggregate, anonymised statistics are generated. For more information, see simpleanalytics.com/privacy.

Individual apps may use additional analytics tools. Where such tools are used, this will be disclosed in the app-specific privacy notice presented in the respective app store listing.

5. Data Sharing and Processors

We do not sell your personal data. We may share data with trusted third parties who act as data processors on our behalf, strictly to support the delivery of our Services:

• Apple Inc. - App Store distribution, in-app purchase processing, and optional analytics.
• Google LLC - Play Store distribution, in-app purchase processing, and optional Firebase services.
• Simple Analytics - Privacy-first website analytics.
• Cloud hosting providers - Server infrastructure for our web services, located within Switzerland or the EEA.

We may also disclose your data if required by law, court order, or to protect the rights, property, or safety of Malupp GmbH, our users, or the public.

6. International Data Transfers

Some of our third-party service providers are based outside Switzerland and the European Economic Area. Where this occurs, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalents recognised under Swiss law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.

• Account data - retained for the duration of your account plus up to 30 days after deletion, then purged.
• Contact/support correspondence - retained for up to 3 years for legitimate interest and legal purposes.
• Financial/purchase records - retained for 10 years as required by Swiss commercial law.
• Analytics data - aggregated and anonymised.

8. Cookies and Tracking Technologies

Our main website does not use cookies or tracking technologies that process personal data. Individual apps may use local storage or similar device-storage mechanisms to save your preferences or session state.

9. Your Rights

Under the revFADP and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Right of access - request a copy of the personal data we hold about you.
• Right to rectification - request correction of inaccurate or incomplete data.
• Right to erasure - request deletion of your data, subject to legal retention obligations.
• Right to restrict processing - request that we limit how we use your data in certain circumstances.
• Right to data portability - receive your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interest.
• Right to withdraw consent - withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hi@malupp.com. We will respond within 30 days.

10. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect personal data from children under 13.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

12. Links to Third-Party Sites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law.

14. Contact

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Malupp GmbH
Eystrasse 52
3427 Utzenstorf
Switzerland
hi@malupp.com