1. Controller
Christian Bister
Vaihinger Straße 120B
70567 Stuttgart
Germany
2. Scope of this privacy policy
This privacy policy applies to the GoutWatcher website, the contact and bug report forms provided through it, and the GoutWatcher mobile app, insofar as personal data is processed therein.
GoutWatcher is designed as a supportive everyday tool for documentation and orientation and is not intended as a medical device.
3. Accessing the website and server log files
When you access this website, technically required information is processed. This may include in particular the IP address, date and time of access, pages or files accessed, browser type, operating system, referrer URL, and other technical connection data.
The processing takes place to provide the website, to ensure stability and security, for error analysis, and to prevent misuse.
4. Reverse proxy
The website and the form integration are operated behind a reverse proxy. In doing so, technically required connection and log data may be processed in order to receive, forward, and secure requests and to operate the service reliably.
5. General contact form via n8n
For general contact requests, a form is provided via n8n at n8n.mybister.com and is also embedded in this website via iframe. When loading and using the form, the data you enter as well as technical connection data may be transmitted to this server.
In particular, the following is processed: your name, email address, message text, and other details that you voluntarily enter into the form.
6. Bug report form via n8n and forwarding to GitHub
For bug reports, a separate form is provided via n8n at n8n.mybister.com and is embedded in this website via iframe.
In particular, the email address you provide and the description of the reported bug are processed. Additional details are only processed if you provide them yourself as part of the bug report.
The contents of the bug report form are used automatically to create an issue in the private GitHub repository github.com/chbister/GoutWatcher. The submitted content is therefore transmitted to GitHub and stored there.
Please only provide the information required to describe the problem in bug reports, and in particular do not transmit any unnecessary sensitive personal data.
7. Forwarding contact requests by email
Content submitted via the general contact form is automatically forwarded by n8n by email to the controller so that the request can be processed.
Microsoft 365 or Exchange Online is used for email processing. In doing so, the information contained in the contact form, in particular name, email address, and message text, may be processed by systems operated by Microsoft.
To the extent that processing outside the European Union or the European Economic Area cannot be excluded within Microsoft 365, such processing takes place on the basis of the contractual and data protection safeguards provided by Microsoft.
8. Mobile app: local use and entered content
In the app, content you enter — such as food and diary entries, settings, or comparable usage data — may be processed to the extent required for the respective app function.
To the extent that data is stored exclusively locally on your device, this processing remains within your control on the respective device.
9. In-app purchases and subscriptions via RevenueCat
The app uses RevenueCat for the technical management and validation of paid features, subscriptions, or in-app purchases.
In particular, an app-specific user identifier, information about the purchased product, subscription or purchase status, transaction or receipt information, and technically required device and app metadata may be processed, to the extent necessary for providing, verifying, and managing in-app purchases.
RevenueCat is used as a data processor for the processing of end-user data within the meaning of data protection law. Further information can be found in RevenueCat's privacy information.
10. App Stores (Apple App Store and Google Play Store)
The mobile app is distributed via external platforms, in particular the Apple App Store and the Google Play Store. When accessing the respective store pages, downloading, making in-app purchases, or processing payments, personal data is processed by the respective platform operators.
This processing is carried out independently by the operators of the respective platforms. The controller has no influence on this data processing except to the extent possible through the settings and specifications of the respective platform.
Further information on processing by these providers can be found in the privacy notices of Apple and Google.
11. Cookies, similar technologies and analytics
This website does not currently use any analytics or marketing services. To the best of our knowledge, no web analytics tracking takes place.
To the extent that technically necessary cookies or comparable technical mechanisms are required by the hosting, the reverse proxy, or the embedded forms, these serve exclusively to operate the website and provide the forms securely and reliably.
12. Purposes and legal bases
Processing takes place to provide the website and the app, for secure technical delivery, to handle contact requests, to technically receive and process bug reports, to document software errors, and to process and manage in-app purchases and subscriptions.
To the extent that personal data is processed to handle contact requests or bug reports, this takes place — depending on the content of the request — on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The processing of technically required connection and log data takes place on the basis of Art. 6(1)(f) GDPR.
To the extent that data is processed for the performance of a contract or to take pre-contractual measures in connection with paid app features, this takes place on the basis of Art. 6(1)(b) GDPR.
13. Recipients of data
Recipients of personal data may include the controller itself as well as the technical service providers used for hosting, reverse proxy, form provision, email communication, error documentation, app distribution, and subscription management, to the extent required in each case.
These may include in particular n8n, Microsoft 365 or Exchange Online, GitHub, Apple, Google, and RevenueCat.
14. International data transfers
The processing of personal data in countries outside the European Union or the European Economic Area may take place in particular when services of international providers are used, such as Microsoft 365, GitHub, Apple, Google, or RevenueCat.
In such cases, processing takes place only in compliance with the applicable data protection requirements, in particular on the basis of an adequacy decision or appropriate safeguards.
15. Retention periods
Personal data is stored only for as long as is necessary to process the request, for technical administration, IT security, contract performance, for documenting and tracking reported software errors, or to fulfill statutory retention obligations.
16. Rights of data subjects
In accordance with the statutory provisions, data subjects have in particular the right of access, the right to rectification of inaccurate data, the right to erasure, the right to restriction of processing, the right to object to processing, and the right to data portability.
17. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
18. External privacy notices of the platforms and services used
Apple: https://www.apple.com/legal/privacy/en-ww/
Google: https://policies.google.com/privacy?hl=en
GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
RevenueCat: https://www.revenuecat.com/privacy