Privacy Policy for our Apps

Last updated: 15 October 2026

This policy applies to the apps Playrio, QuittungsMaker Pro, LastTime and GarantiQ on every platform they are available for (macOS, iPhone, iPad, Apple Watch, Android). Section 4 describes each app separately. The privacy policy for our website is at hallo-webseite.de/legal/privacy-policy.

1. Controller

Enrico Fischer
Hallo-Webseite.de
Sendeweg 2
34246 Vellmar
Germany

Phone: +49 561 98833622
Email: info@hallo-webseite.de
Privacy requests: datenschutz@hallo-webseite.de

Data protection officer: Enrico Fischer, datenschutz@hallo-webseite.de

2. The most important points

• We do not sell data and the apps contain no advertising networks. The apps contain no actively used third-party services for analytics, tracking or crash reports. Section 4 lists exceptions and special cases for each app.
• Most content stays on your device. For QuittungsMaker Pro, LastTime and GarantiQ we do not run a server that stores your content. Only Playrio has an account on our server (playrio.de).
• External AI evaluation only at your request. In GarantiQ, the recognised text of a receipt goes to an AI provider only if you switch this on in the app and enter your own credentials.
• iCloud. QuittungsMaker Pro syncs through your iCloud account by default, LastTime only if you switch it on.

3. What applies to all apps

3.1 Permissions

The apps ask for access (for example camera, calendar, photos, notifications) only when a feature needs it. You can withdraw every permission at any time in your device's system settings. The feature that needs the access is then no longer available.

3.2 Services from Apple and Google

Where an app uses services of your operating system (App Store and purchases, iCloud, notifications, Siri and Shortcuts, Apple Intelligence, speech recognition, Sign in with Apple, Google Play services), the provider processes data on its own responsibility under its own terms. We do not control this and do not receive any content from it.

3.3 Purchases

Purchases in the apps for iPhone, iPad and Apple Watch go through Apple. We do not receive payment data. In Playrio for the Mac, purchases are made through the website playrio.de.

4. The apps in detail

4.1 Playrio (iPhone, iPad, Mac, Apple Watch)

Playrio is an arcade service. The app is the interface to our server playrio.de. For your account there, the information at playrio.de/page/privacy applies in addition.

What goes to our server (playrio.de):

• Account: email address, password, username, country. Optionally Sign in with Apple (identity token with name and email, as far as you share them), passkey and a second factor by code.
• Device name in a general form ("Playrio iOS" or "Playrio Mac").
• Voluntary profile: first and last name, company, address, phone number, preferred channel for codes (email, SMS, WhatsApp or Telegram) and, if applicable, your Telegram identifier.
• Age group (under 13, 13 to 15, 16 to 17, adult): if your device supports Apple's age range feature, Apple asks you whether you want to share your age group. If you share it, we transmit it to our server so that community features are enabled according to age. We do not receive a date of birth.
• Push notifications (only with your consent): push token, a random installation identifier, platform and environment.
• Game progress: game, score and the stake in challenges.
• Purchases on the iPhone: the transaction signed by Apple, so that we can unlock your subscription or game point packages.
• With every request: an app key of the app, the language, the type of device and, if you are logged in, your sign-in token.

Games and web content: games, sign-in pages, legal texts, leaderboard and shop links run in the app as web pages. Like a browser, the app permanently stores cookies and similar data of the loaded pages. The app's web area does not show the website's consent banner. For free users, games may contain advertising. Which cookies or third-party content a single game sets depends on the game and cannot be viewed in the app itself. If you do not want this, use the games through the website in a browser with the settings available there.

Apple Watch: the watch app receives your sign-in token from the iPhone and uses it to retrieve account, news, blog, forum and notification data. When you sign out, the app removes the token from the watch.

On your device: the sign-in token is kept in the keychain, settings (language, appearance, Face ID lock) in the app settings. You can optionally lock the app with Face ID.

Delete account: in the app under "Profile" you can delete your account yourself. It is then scheduled for deletion. If open invoices remain, we block and anonymise the account and keep the data that the law requires (for example invoice data) until the retention periods expire.

Permissions: Face ID, notifications, age range via Apple. No camera, no microphone, no location, no contacts.

4.2 QuittungsMaker Pro (iPhone, iPad, Mac, Apple Watch)

We do not run a server for this app. The app stores your receipts and organisations in a database on your device.

iCloud synchronisation (switched on by default): the app syncs your data with your other devices (iPhone, iPad, Mac) through your iCloud account. All details of your organisations and receipts are synchronised: name, address, tax number, VAT ID, commercial register, email, phone, IBAN, customer numbers, amounts, purposes, line items, as well as signature, stamp and logos. The data is stored in your private iCloud database. We cannot read it. You switch synchronisation off in the settings; the change takes effect after you restart the app.

Other features:

• Text suggestions ("Analyse text"): the text is evaluated on the device with Apple Intelligence. The app recognises text in images locally with Apple's text recognition. We receive none of it.
• Sharing and sending: if you send, export or print a receipt as a PDF, it goes to the app or destination you choose.
• Apple Watch: the watch shows the latest receipt and the Pro status. It can send receipt requests (payer, amount, currency, direction, purpose, payment method) back to the iPhone. The watch has its own local storage without iCloud.
• Siri and Shortcuts, and notifications about new receipts arriving from other devices (only if you switch them on), use data on your device only.
• Purchases (Pro subscription and one-time purchase) go through Apple.
• You can optionally lock the app with Face ID.

Deleting: in the app you delete single entries or, with "Reset everything", all receipts and organisations. With synchronisation active, to our knowledge this also affects the iCloud copy; whether and when it reaches all devices is controlled by Apple. If you delete the app, the data stays in your iCloud account until you remove it there under "Manage iCloud storage". The Apple Watch keeps its own storage until you delete the watch app.

Permissions: Face ID (optional lock), notifications (optional). No camera, no microphone, no location, no contacts. Choosing photos (logo, background) happens through the system's picker; the app gets no access to your library.

4.3 LastTime (iPhone, iPad, Apple Watch)

We do not run a server for LastTime and the app has no account. To our knowledge it contains no third-party software for analytics, tracking or crash reports.

• Your entries (things, activities, entries with date, note, photo, measured value, reminders) are stored locally on your device.
• iCloud: on request the app syncs things, activities, entries and reminders through your iCloud account. The feature is off by default. Photos stay on the device. Deletions take effect on all devices.
• Speech and scans: voice input uses Apple's speech recognition, which, depending on device and setting, works on the device or at Apple. According to our information, recognition in "Magic Scan" runs on the device. No cloud AI is built in. On devices with Apple Intelligence the system can create suggestions on the device.
• Apple Watch, widgets and complications: the data stays between watch and iPhone, storage is on the iPhone.
• Permissions (depending on the feature): camera, microphone, speech recognition, Face ID (optional lock), depending on the feature also photos and notifications.
• Purchases: the Pro subscription and the one-time purchase go through Apple.
• Export and deletion: you export data (CSV, JSON, PDF) and delete it in the app, including all at once. With iCloud synchronisation active, also delete in your iCloud account if data remains there.

4.4 GarantiQ (iPhone, Android)

We do not run a server for GarantiQ and the app has no account. Your warranties, insurance policies, merchant data, notes and receipt photos are stored only on your device at first. Please note the following points, where data leaves the app or ends up in other places on your device.

iPhone

• External AI evaluation (off by default): the default evaluation runs with Apple on the device. If you choose ChatGPT or Ollama as the "AI source" in the settings, the text recognised from your receipt, fuel receipt or insurance scan (not the image) is sent to the destination you chose: with ChatGPT to OpenAI (api.openai.com, USA) with your own key, with Ollama to the address of your own server. The recognised text can contain merchant, address, line items, contract numbers and amounts. The app does not ask separately before the first sending, the setting is your decision. A connection to your own server can be unencrypted (http) if you enter such an address. The OpenAI key is kept in your device's keychain. We receive neither key nor text.
• Photo album: the app additionally saves scanned receipts, insurance documents and product photos automatically in the photo album "GarantiQ". These copies remain when you delete in the app and can end up in iCloud Photos if you have switched that on. Please delete them in the Photos app if needed.
• Files app and backup: the app's folders are visible in the Files app. Database and photos are part of your normal iPhone backup (for example in iCloud), if you have enabled it.
• Lock screen and search: deadlines can appear as a Live Activity on the lock screen, with the name of the product or contract, which others can see when your iPhone lies locked. Product name, merchant, address, category and notes are in the device's search index (Spotlight).
• Other features: calendar entries for deadlines (write-only), local reminders, Face ID (optional lock), Siri and Shortcuts, fuel feature (vehicles and refuelling stored locally), email draft through the device's Mail app, opening saved merchant links in the in-app browser. The app does not access your address book.
• Permissions: camera (scan, photos), photos (create album and store scans, the app requests read and write access for this), calendar (write-only), Face ID, notifications.

Android

• The Android version contains no external AI evaluation, no fuel feature and no biometric lock. It has no internet permission.
• Scanner: the document scanner and text recognition come from Google (ML Kit through Google Play services) and, according to Google, work on the device. What Play services themselves transmit is Google's responsibility.
• Photo album: scans are saved automatically in the folder "Pictures/GarantiQ", from where Google Photos can back them up if you have switched that on. They remain when you delete in the app.
• Google backup: the app allows Android backup. Database, settings and receipt photos can be included in your Google account's backup if you have enabled it on your device.
• Permissions: notifications and exact alarms (reminders).

Deleting: you delete entries one by one in the app. Uninstalling removes the app's data from your device, but not copies in the photo album, in backups or in exports.

5. Purposes and legal bases

6. Recipients and third countries

We pass on data only as stated in section 4. Depending on the feature, recipients are:

• our own server (playrio.de) for the Playrio account, operated under our responsibility;
• Apple, Google and the providers you explicitly switch on in the respective app (in GarantiQ OpenAI or a server of your own that you enter).

Several of these providers are located in the USA or other countries outside the EU. There, a level of data protection equivalent to European law may not apply. A transfer to such services takes place in the apps only if you switch on the feature. Services of Apple and Google that your operating system provides work under their responsibility.

7. Storage period

• On your device: until you delete the data or uninstall the app (exceptions: copies in photo albums, backups and iCloud, see section 4).
• Server logs: only as long as required for the operation and security of the servers.
• Playrio account: until you delete it, with the special cases from section 4.1.

8. Obligation to provide data, automated decisions

You are not obliged to provide data to us. You need a Playrio account for the features that require an account. No automated decision-making including profiling that produces legal effects concerning you takes place.

9. Your rights

You have the right to:

• access (Art. 15 GDPR),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent given, with effect for the future (Art. 7(3)).

Write to datenschutz@hallo-webseite.de for this.

10. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

11. Changes

We adapt this policy when an app or the legal situation changes. The date above shows the current version. We add new apps as their own part of section 4.