1. Controller and scope

Controller under the General Data Protection Regulation (GDPR):

Tom Silas Helmke c/o Online-Impressum #4746 Europaring 90 53757 St. Augustin Germany Email: tshfm78@gmail.com

This policy describes the static website at deviceaid.app and the native DeviceAid iPhone app separately.

2. Website

The website is static. It provides no account, login, or contact form. Its own functions set no cookies, use no tracking storage, and embed no first-party analytics, Google Analytics, Meta Pixel, external fonts, videos, or social-media trackers. The website displays no advertising.

Technically necessary server logs may be created when the site is requested, such as IP address, time, requested path, HTTP status, referrer, and browser identifier. They support secure and stable operation on the basis of Article 6(1)(f) GDPR. Retention and possible international transfers depend on the provider actually used. The hosting provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When the site is requested, Vercel may process in particular IP address, approximate location derived from IP, log files, timestamps, device and browser information, and diagnostics, performance, and security data. Processing may take place in the United States and involve subprocessors. Vercel describes its own roles for collected data and, where it acts as processor, contractual safeguards including EU Standard Contractual Clauses. More information: https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa.

External App Store links are contacted only after a user action. The external provider's privacy policy then also applies.

3. Email support

If you contact tshfm78@gmail.com, the sender address, message, and any voluntarily supplied information are processed by the email provider. Processing is necessary to answer your request under Article 6(1)(b) or (f) GDPR. Do not send Apple Account data, serial numbers, or sensitive information. Messages are deleted once the request is resolved unless a legal retention duty applies.

4. Local app core functions

DeviceAid requires no account and operates no proprietary cloud, analytics, telemetry, or test-data server. Manual checks run locally. DeviceAid requests no camera, photo, location, or contacts permission. Local settings such as language, appearance, and accessibility preferences remain in the app container.

The Microphone Test uses permission only after your explicit action. A short recording is played locally and removed when you leave the test or use Data Management; it is not sent to DeviceAid servers. Disconnect Bluetooth headphones when checking the iPhone microphone.

Level and Motion uses public Core Motion functions only after user action. Queries stop on exit or in the background. Raw sensor data is not retained.

5. Local data management

Data Management can remove local data controlled by DeviceAid, including temporary microphone files, local UI and AppStorage values, upgrade-reminder timestamps, and controllable app caches.

It cannot remove Apple purchase history, an active Apple subscription, Apple Account data, system-wide iOS permissions, data outside the app container, or Google consent data except through the official UMP privacy options. Removing local data or uninstalling the app does not cancel an Apple subscription.

6. Google AdMob and User Messaging Platform in Free

The free version may show Google advertising through the Google Mobile Ads SDK. Google UMP updates consent status at app launch and presents a form only when Google requires it. Ads are requested only when Google's status permits ad requests. A consent error does not block core features; ads stay disabled without permission to request them. Privacy choices are available in Settings when UMP requires them.

Depending on region, consent, configuration, and ad type, Google may process data for consent management, ad delivery, fraud prevention, security, and measurement. This may include online identifiers, device information, IP address, usage, diagnostics, advertising, and consent data. Exact App Store classification must be checked against current Google documentation and the final SDK configuration before submission. DeviceAid runs no proprietary ad platform or user analytics. Pro loads no ads and discards loaded ads when Pro status is recognised.

7. App Tracking Transparency

DeviceAid currently does not request App Tracking Transparency permission. If the advertising configuration changes, the website, privacy policy, and App Store disclosures will be updated accordingly.

8. Apple StoreKit and App Store

The planned, or after release available, yearly Pro subscription is handled by Apple StoreKit and the App Store. Apple processes payment, purchase history, Apple Account association, and verified transactions. DeviceAid does not process credit-card or bank data itself. The app derives the verified entitlement locally. Apple's terms and privacy notices govern Apple's processing.

9. International transfers and retention

Google, Apple, Vercel, and the email provider may process data under their own responsibility and potentially outside the EEA. Vercel's current provider information describes primary processing in the United States and contractual transfer mechanisms. The current configuration, allocation of roles, safeguards, and privacy notices of each provider remain decisive; no blanket claim is made.

Local app data remains until removed through Data Management or uninstallation. Support messages remain until resolved and, where applicable, for statutory periods. The respective provider's retention rules apply to hosting logs and Google or Apple data.

10. Your rights and complaints

Where provided by law, you have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also complain to a data-protection supervisory authority. Send controller requests to tshfm78@gmail.com. Google and Apple provide separate contacts and controls for data they process under their own responsibility.

11. Changes

This policy will be updated when the app, SDK configuration, hosting, or legal requirements change. The current version is available at https://deviceaid.app/en/privacy/. Technical and content compliance preparation does not replace final legal review.