Privacy Policy

1. Controller

Markus Urbanietz
George-Gershwin-Weg 2
69181 Leimen
Germany
Email: support@dailylimit.de

2. Website delivery and server log files

When this website is accessed, the web server processes technically necessary connection data. This may include the IP address, date and time of access, requested file, amount of data transferred, referrer URL, browser type, browser version, operating system, and access status.

The processing is necessary to deliver the website, maintain its stability, and prevent or investigate attacks. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable, and abuse-resistant operation of this service. Log data is deleted as soon as it is no longer required for these purposes. In the event of a specific security incident, relevant data may be retained until the incident has been fully investigated and, where necessary, for the establishment, exercise, or defense of legal claims.

Hosting recipient:
kauschinger.net onlineservice
Romy Kauschinger
Pater-Roth-Str. 7
85221 Dachau
Germany

3. Cookies and tracking

This website does not set cookies and does not use analytics, marketing, or tracking services. No external fonts, videos, advertising networks, or social-media plugins are loaded automatically. Merely visiting the website does not cause information to be stored in the browser. A consent-management system is therefore not currently required. External websites are accessed only when the user actively selects the relevant link.

4. Contact and support

When you contact us by email, we process the sender address, the content of the message, and any other information provided voluntarily. This processing is carried out to respond to the request. The legal basis for contract-related requests is Article 6(1)(b) GDPR; otherwise, it is Article 6(1)(f) GDPR. The legitimate interest is responding to requests, analyzing errors, and improving support.

Support messages are regularly deleted once the request has been fully resolved and no later than twelve months after the last communication. Data is retained for longer only where statutory retention obligations apply or where it is required for the establishment, exercise, or defense of legal claims. The email service provider used for the mailbox may act as a technical recipient.

5. Data processing in DailyLimit

DailyLimit processes the financial and budget data entered by the user to provide the app's functions. This may include income, fixed costs, expenses, categories, payees, and related dates and amounts. This processing generally takes place locally on the device. Locally stored content is not automatically transmitted to the operator of DailyLimit and cannot be viewed by the operator.

DailyLimit does not use its own backend or an external database. The app does not include analytics, tracking, or external crash-reporting services. Budget and financial data remain on the device or, when synchronization is enabled, in the user's private iCloud area.

Where processing by the operator is necessary to provide a function requested by the user, the legal basis is Article 6(1)(b) GDPR. Users decide which budget data they enter, change, export, or delete.

6. iCloud and CloudKit

When iCloud synchronization is available and enabled, DailyLimit stores and synchronizes app data through Apple iCloud or CloudKit in the user's private iCloud area. This requires an Apple Account signed in on the device. The data is transmitted to Apple; the operator does not maintain a separate synchronization server and does not gain access to the user's Apple Account.

Apple may process data in data centers outside the European Union or European Economic Area. Information about the responsible Apple entities, possible international transfers, and safeguards is available in Apple's Privacy Policy. Apple provides further information about CloudKit on its Privacy Features page.

7. In-app purchases and subscriptions

Purchases and subscriptions are processed through the Apple App Store. Apple processes account, purchase, and payment data under its own responsibility. DailyLimit or StoreKit on the device receives the purchase or subscription status required to unlock features and, where applicable, technical transaction information, but not complete payment information such as credit-card or bank-account details. The legal basis for unlocking purchased functions is Article 6(1)(b) GDPR. Apple's App Store terms and privacy information apply to processing performed by Apple.

8. Widgets, Siri, and Shortcuts

Widgets process the selected budget information on the device for display. Siri and Shortcuts are used only after being configured or activated by the user. Content required for the relevant command may be processed by Apple operating-system services. The scope and settings of this processing depend on the privacy and Siri settings of the Apple device.

9. CSV export and import

When users use an export or import function, they decide where exported files are stored and which app or service receives them. DailyLimit processes imported files locally to add the content selected by the user. The operator receives these files only when the user sends them explicitly, for example as part of a support request.

10. Recipients and international transfers

Personal data is disclosed only to the recipients or categories of recipients described in this policy where this is necessary to provide the website or app, respond to a request, perform a contract, or comply with a legal obligation. The operator does not transfer data to third countries, except for possible processing through Apple services used by the user in accordance with Apple's privacy information.

11. Data subject rights

Subject to the applicable legal requirements, data subjects have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on Article 6(1)(f) GDPR. To exercise these rights, send a message to support@dailylimit.de.

12. Right to lodge a complaint

Data subjects may lodge a complaint with a data-protection supervisory authority. The authority responsible for the controller's place of establishment is in particular:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Website: baden-wuerttemberg.datenschutz.de

13. No automated decision-making

The operator does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

14. Security and updates

The website is transmitted in encrypted form via HTTPS. This Privacy Policy will be updated if functions, data flows, or services change. Last updated: August 25, 2026.