Privacy Policy

1. Who is responsible?

The controller for the processing of your data is:

[FIRST NAME LAST NAME]
[STREET NUMBER]
[POSTCODE CITY]
Germany
Email: hi@yourmuso.app

I have not appointed a data protection officer because there is no legal obligation to do so. For questions about data protection, contact me at the email address above.

2. Overview

3. Website yourmuso.app

Server logs. When you visit the website, your browser automatically sends data to the server: IP address, date and time, page requested, browser and operating system. This is technically necessary to deliver the site and operate it securely. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). The website is hosted by Vercel Inc. (USA). Logs are stored there for [VERCEL LOG RETENTION].

No cookies, no tracking. The website sets no cookies, uses no analytics or advertising services and embeds no external fonts or content. Fonts are loaded from the site's own domain.

Links. If you click a link to TestFlight or the App Store, you go to Apple. From there, Apple's privacy policy applies.

4. Waitlist

Data. First name, last name, email address. Optional: experience level and a short note about your project.

Purpose. I invite you to the test phase (TestFlight) and send you a confirmation.

Legal basis. Your consent under Art. 6(1)(a) GDPR, which you give by submitting the form. You can withdraw it at any time with effect for the future; an email to hi@yourmuso.app is enough.

Processing. Your email address is stored in a database at Supabase (Frankfurt). Name and email address are passed to the email service Loops for the confirmation and invitation [LOOPS DETAILS: location, hosting, safeguards]. I also receive a notification with all your details in my mailbox at Strato.

Retention. Until the invitation or the end of the test phase; after that I delete the data, at the latest after [PERIOD]. On request I delete it earlier.

5. App: account and profile

Data. Email address, password (stored only in secured form, I cannot read it), username. Optional or during onboarding: profile picture, short bio, experience level, interests, and whether your profile is private.

System emails. Email confirmation, password reset and email address change are sent by Supabase on my behalf through the email service Brevo (Brevo GmbH, Berlin; servers in the EU). Your email address and the content of the mail, including the confirmation link, are processed for this. Brevo deletes these logs after one month and does not store a preview of the content.

Acceptance of the terms of use. At registration I store which version of the terms of use you accepted and when, so that I can prove it (Art. 6(1)(f) GDPR).

Legal basis. Art. 6(1)(b) GDPR (contract for use).

6. App: content and visibility

Data. Everything you create in the app: patterns with steps, images, video links and charts, projects with photos and progress, workshop (materials and tools), folders, ideas, likes, bookmarks, ratings, follows and time tracking. The data is stored at Supabase in Frankfurt, images in Supabase storage.

Who sees what. Published patterns, ratings, public projects and public folders are visible to other users, together with your username and profile picture. Each pattern has its own visibility setting. A private profile only hides your profile page from others; patterns follow their own setting.

Version history. A pattern's version history keeps its images. An image you remove from the current pattern stays in earlier versions and remains in storage (public storage area; the address cannot be guessed but can be retrieved without login). The purpose is a complete version history and projects that refer to a specific version. The images are deleted when you delete the whole pattern or your account.

Reporting. You can report other people's patterns, projects, folders, profiles and reviews in the app. For this I store your user ID, the type and ID of the reported content, the ID of the user concerned, an excerpt of the content at the time of the report (for example title, description or username), the reason you chose and, if you provide one, your note (up to 1000 characters). The system also sends me an email with these details to my mailbox at Strato; it is sent through Brevo. The purpose is to review violations, act within 24 hours and keep my decisions traceable. The reported person is not told who reported. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a service without unlawful content). I delete handled reports 12 months after handling; open reports are kept until they are handled.

Blocking. When you block someone, I store the block (your user ID, the blocked person's user ID, time). Its purpose is to hide that person's content from you and to stop them from following you and reviewing your content. When you block, I remove existing follows in both directions and notifications from that person for you. You can view and change your block list under Settings, "Blocked users". The legal basis is Art. 6(1)(b) GDPR.

Legal basis. Art. 6(1)(b) GDPR, for reports Art. 6(1)(f) GDPR as above.

7. Push notifications

If you allow notifications, I store a device token and send notifications through the Apple Push Notification Service. A notification may contain another person's username, for example when they follow you. The legal basis is your consent (Art. 6(1)(a) GDPR) through the iOS permission. You can withdraw it at any time in iOS settings.

8. AI pattern import

When you import a pattern from a PDF or from photos, the text is first recognized on your device (using Apple functions). The PDF file and photos do not leave your device for this.

What goes to the AI. Only the recognized text is sent for analysis to Anthropic (Anthropic PBC, USA). Anthropic structures it into title, description and steps. Images, PDF files, your name, your email address and your user ID are not transmitted. According to Anthropic, API inputs and outputs are deleted within 30 days (exceptions: abuse review, legal obligations) and are not used to train models.

Legal basis. Your confirmation before each import (Art. 6(1)(a) GDPR) and performance of the function you requested (Art. 6(1)(b) GDPR).

Proof of rights confirmation. Before the import you confirm that you have the necessary rights to the pattern. For this I store your user ID, the source (PDF or photos), the version of the confirmation text, the time and your IP address. The purpose is to be able to defend myself against third-party copyright claims (Art. 6(1)(f) GDPR). I anonymize the IP address after three years. If you delete your account, I also delete this proof.

9. Usage analytics (PostHog)

Only if you agree at first launch or later in Settings under "Share usage data" do I collect pseudonymous usage data with PostHog (PostHog Inc., USA, servers in the EU in Frankfurt).

Data. A random user ID, a random device identifier, app version, operating system and device type, plus events such as app opened, pattern viewed, project started or paused, step completed, import statistics and errors, each with the IDs of the patterns or projects concerned. Not collected: the content of your patterns, your name or your email address. There is no screen recording. Location detection via IP address is switched off.

Purpose. I want to understand which features are used and where the app has errors.

Legal basis. Your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time in Settings. Without consent, no data is sent to PostHog. If you delete your account, I delete your data at PostHog. This happens there with a delay, [PERIOD PER POSTHOG].

10. Local storage on your device

The app stores settings, an image cache, your search history and data for the widget and Live Activity on your device. This is necessary to operate the app (§ 25(2) no. 2 TDDDG). I remove this data when you sign out and when you delete your account; uninstalling the app removes it anyway.

11. Video links

If a pattern contains a video link and you tap it, YouTube or your browser opens. Only then is data sent to YouTube; YouTube's privacy policy applies.

12. Recipients and service providers

For service providers that process data on my behalf, data processing agreements under Art. 28 GDPR are in place [VERIFY STATUS PER PROVIDER BEFORE PUBLISHING].

13. Transfers to third countries

Some providers are based in the USA or process data there (PostHog, Anthropic, Vercel, Loops, Apple). The transfer relies on the EU-US Data Privacy Framework or on the EU Commission's standard contractual clauses. Supabase stores your data in Frankfurt; the contracting party is based in Singapore, and standard contractual clauses apply there too. [VERIFY SAFEGUARD PER PROVIDER BEFORE PUBLISHING]

14. Retention and deletion

Deleting your account. You can delete your account at any time in the app under Settings. Deletion is carried out immediately and permanently; there is no waiting period and it cannot be undone. Deleted: sign-in data, profile, your patterns (including published ones, which then disappear for others too), projects, workshop, folders, ideas, likes, bookmarks, ratings, follows, blocks, notifications, device token, time tracking, import proofs and all uploaded images. Local data on your device is removed.

What remains. Push notifications already delivered stay on devices. Other users' projects that referred to your pattern remain; only the link is removed. Reports you submitted or that concern you remain without a link to your account. The stored excerpt of the reported content (including username) remains until regular deletion, 12 months after the report is handled. Data at PostHog is deleted with a delay.

Backups. [BACKUPS: Currently I do not create database backups. After switching to the paid plan, change to: Deleted data may remain in backups for up to 7 days.]

Email inquiries. If you write to me, I keep the correspondence until the inquiry is resolved and delete it no later than 12 months afterwards, unless a legal retention obligation applies.

15. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21) and withdraw consent at any time (Art. 7(3)). Write to hi@yourmuso.app for this.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is [SUPERVISORY AUTHORITY DEPENDING ON RESIDENCE].

16. Provision of data and automated decisions

To use the app I need email address, password and username; without them I cannot set up an account. All other details are optional. There is no automated decision-making with legal effect. The AI in the pattern import only structures text; you review and confirm the result yourself.

17. Changes

If the app or the law changes, I will update this policy. The current version is available in the app under Settings and at yourmuso.app/en/privacy.