Privacy policy for Ready Kit

• No account, no sign-in. The app sends me no data on its own.
• What you create in the app stays on your device.
• No ads, no analytics, no tracking.

Responsible for the app Ready Kit is:

For any question about data protection, write to [email protected]. There is no data protection officer, because the law does not require one for a business of this size.

The app stores on your device your supplies, checklists and equipment, your shopping list, the mapping of your NFC tags, product details for barcodes you already captured, and your settings.

This data lives only on your device; I have no access to it. It is needed for the features you use (section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR). Deleting the app removes it.

If backups are turned on (iCloud or Google), the operating system includes the app data in them. You control this in your device settings; Apple’s or Google’s terms apply.

The app asks for a permission only when you use the feature. You can revoke any permission in your device settings at any time; the rest of the app keeps working. The legal basis is your permission in the system dialog (Art. 6(1)(a) GDPR, section 25(1) TDDDG).

• Camera: To scan barcodes the app uses the camera. The image is evaluated on the device and neither stored nor sent. The app matches the barcode only against products you captured yourself.
• NFC: The app writes NFC tags with an address like praezisus.com/readykit/t/… and a random ID, and reads them back. Which tag belongs to which item is stored only in the app on your device.
• Files and sharing: You can export a backup as a file and import it again, output lists as CSV or PDF and share the shopping list as text. You decide in the share sheet what you share and with whom.
• Notifications: The app reminds you at a time of your choice about supplies that expire soon. It schedules the reminders on the device.

In the equipment lists, some products lead to Amazon. These are affiliate links; the app says so.

An affiliate link opens in your browser or in the provider’s app. Only then does the provider learn of your visit and may set cookies; its privacy policy applies. If you buy something there, I may earn a commission, but receive no data about you. Your price stays the same.

Now and then the app asks for a rating through the system dialog. The app decides when based on counters on your device; Apple or Google decide whether the dialog appears. A rating goes straight to the store, not to me.

If you tap feedback or report a bug in the app, your mail app opens with a prepared message. The message goes to [email protected] and already contains the app version, operating system, device model and, on iPhone, the device name so I can trace errors. You see everything before sending and can edit or delete it; only what you send yourself is sent.

I use your message only to help you and delete it once the matter is settled. The legal basis is your use of the app (Art. 6(1)(b) GDPR) or my legitimate interest in answering (Art. 6(1)(f) GDPR). The mailboxes are hosted by STRATO GmbH, Berlin, as my processor.

When you download or update the app, Apple or Google process data such as your account details and device ID under their own responsibility. I have no influence on this. From the stores I receive only aggregated statistics (such as downloads per country) and crash reports not linked to you, if you allowed sharing them in your device settings.

Where I process personal data about you, you have these rights:

• Access to your data (Art. 15 GDPR)
• Correction of wrong data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Receiving your data in a common format (Art. 20 GDPR)
• Withdrawal of consent, at any time and for the future (Art. 7(3) GDPR)

Objection (Art. 21 GDPR): Where processing rests on a legitimate interest (Art. 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation. I then stop, unless there are compelling legitimate grounds that override your interests, or the processing serves legal claims.

An informal email to [email protected] is enough. You may also lodge a complaint with a data protection authority (Art. 77 GDPR), for example the one responsible for me:

www.baden-wuerttemberg.datenschutz.de

I do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

When the processing changes, I update this policy. The date at the top shows the last revision. The German version prevails.