Privacy policy
In short
The duegrid app processes your contracts, amounts, deadlines, documents and spending on your device. If you turn on sync, a copy is also kept in your own iCloud or Google Drive storage. If you use a household, its members see the items you file under “Family”. We run no server for the app, there is no account and no tracking. We never receive your data.
Controller
Oliver Ferch, Zimmererstr. 26, 86153 Augsburg, Germany. Email: info@duegrid.app. More details in the imprint.
This website
The website is hosted by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: IP address, date and time, the page requested and your browser. This is needed to deliver the pages and protect them against attacks. We keep no access logs ourselves. Cloudflare processes this data only briefly and deletes it according to its own retention periods. The legal basis is Art. 6 (1)(f) GDPR, our interest being secure operation. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers to the USA rely on the European Commission’s adequacy decision (Art. 45 GDPR).
The website sets no cookies, uses no analytics and loads no fonts or content from third parties. If you choose the light or dark theme, your browser remembers the choice locally (local storage), and the language too. This never leaves your device.
Contact by email
If you write to us at info@duegrid.app, we process your email address, your name if you give it, and the content of your message to answer your request. If the request concerns using or buying duegrid, the legal basis is Art. 6 (1)(b) GDPR (contract or steps prior to a contract). Otherwise it is Art. 6 (1)(f) GDPR, our interest being to answer your request.
Cloudflare Email Routing (Cloudflare, Inc., USA) forwards mail sent to info@duegrid.app to our mailbox at Proton (Proton AG, Switzerland). Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission has issued an adequacy decision for Switzerland (both Art. 45 GDPR).
We delete your message once your request is resolved. We keep it longer only when the law requires it, for example for business letters under § 257 HGB (German Commercial Code) or § 147 AO (German Fiscal Code).
Data in the app
All content is kept in the app’s protected storage on your device and encrypted by the operating system. Text recognition when scanning runs on the device, and duegrid uploads no images or text. On iPhone and iPad, Apple’s VisionKit and Vision do this on the device.
On Android, the scan runs in Google Play services (ML Kit document scanner and text recognition). Google Play services may download the recognition models and, according to Google, sends Google diagnostic and usage data: device and app information, a per-installation identifier, performance metrics such as latency, image format and size, and events such as model downloads. The scanned images and the text read from them are not among the data Google lists. duegrid itself receives none of this data, and it doesn’t track you.
duegrid opens a cancellation page you save with an item only when you tap it, in your browser. The provider of that page then receives the usual connection data, as with any page you visit.
Backup and export
The app encrypts backups with a password you choose. It saves backups you make yourself and CSV files where you decide, for example in a folder on the device or in your cloud storage. If you turn on “Back up automatically”, the app keeps the password encrypted on the device and saves a backup once a week, keeping the newest 4: on Android in the folder you choose for it, on iPhone and iPad without asking again in the app’s folder on the device, which the Files app shows as “duegrid”. We never receive any of these files.
If iCloud Backup or Google’s device backup is on, the system also backs up duegrid’s data on the device, on Android without documents, scans and the sync state. This backup is kept in your Apple or Google account, and Apple or Google process it under their own terms.
Sync (optional)
Sync is off until you turn it on under Settings › Storage and sync, and it needs Premium. The app then keeps a copy of your data in the private database of your iCloud account (Apple) on iPhone and iPad, and in the hidden app folder of your Google Drive (Google) on Android. The data travels directly between your device and your account, with no server of ours in between. On iPhone and iPad, iCloud wakes your other devices through Apple’s push service so they fetch changes soon; these notifications contain none of your data. Apple or Google process it under their privacy policies. We have no access and receive nothing.
Sync covers your items, budgets, spending and the settings for reminders, sender and currency. Documents and scans stay on the device you added them on, and so do the app lock, hidden amounts, appearance, the calendar feature and the automatic backup.
If you turn sync off, the copy stays in your cloud. “Delete all data” with “Delete on all devices” removes it together with the data on your other devices. A household stays: the shared zone, your membership and the shared items remain for the other members, and your other devices keep the household. Leave it first under Settings › Household, or end it there if you created it. You can also delete the copy in your device’s iCloud settings or in the Google Drive settings.
Household (optional)
Households are available on iPhone and iPad, with Premium only. When you create or join a household, a shared zone in the iCloud account of the person who created the household (Apple CloudKit sharing) holds: the items in the “Family” scope, with who pays each item, who gets its reminders and who changed it when; and for each member their name, a stable identifier (the identifier of their iCloud user record, the same on all their devices), their role, whether they “Can edit” or are “View only”, the kind of Premium they have, and when they joined. Every member can read this data, and members who “Can edit” can change it. If an Apple Account has no name, duegrid uses its email address or phone number as the name; it is then stored in that member’s shared record and every member sees it. Your other items, budgets, spending, settings and documents are not shared. We never receive any of this data.
An invitation by link or QR code is for one person and is valid for 7 days: once that person has joined, no one else can join with it. After the 7 days, duegrid no longer lets anyone join with it, and the duegrid of the person who created the household closes the link at the latest the next time it runs. The person who created the household can withdraw an invitation at any time under Settings › Household. Anyone who leaves the household can choose “Keep a copy” and keep a personal copy of every shared item, other members’ items included, with their history and the names in it. Without a copy, and after being removed, a person keeps only the items they shared themselves. If the person who created the household ends it, the shared zone is deleted; they can keep a copy, and everyone else keeps their own items. When you leave or end a household, duegrid writes a short note into your own private iCloud database: which household you left or ended, whether you kept a copy, and when. Only your own devices read it, so they follow your choice. The note stays until you leave or end a household again and a new note replaces it, or until you choose “Delete all data” with “Delete on all devices”. You can delete it together with duegrid’s other data in your device’s iCloud settings.
Purchases
Purchases and subscriptions are handled by Apple (App Store) or Google (Google Play). We receive no payment details and no names, the app verifies the purchase on the device. Family Sharing for duegrid Family is managed by Apple.
Ratings
After you confirm a cancellation, duegrid asks the system at most once per version to show its rating dialog (App Store or Google Play). The system decides whether it appears. duegrid receives nothing, not even whether or how you rate it. Apple or Google handle any rating under their own terms.
Notifications and calendar
Reminders are scheduled as local notifications on the device, with no push server for them. If you use the calendar feature, the app creates its own “duegrid” calendar on the device. Whether that calendar is synced depends on your calendar settings.
Crash reports
Only if you have agreed in your system settings, Apple or Google provide us with anonymised crash reports and usage statistics. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give in the system settings of iOS or Android. You can withdraw it there at any time, with effect for the future (Art. 7(3) GDPR).
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can lodge a complaint with a data protection authority, for example the one responsible for us: Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Because we store no app data, you export or delete it directly in the app under Settings › Security and data.
Right to object under Art. 21 GDPR
Where we process data on the basis of Art. 6 (1)(f) GDPR, that is when you visit this website and for emails that don’t concern using or buying duegrid, you can object to this processing at any time on grounds relating to your particular situation. We then no longer process this data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An email to info@duegrid.app is enough to object.