Privacy Policy

for the app PillenKompass and the website pillenkompass.online

0. Data processing on this website

Hosting

This website is hosted by:
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
(Hetzner Privacy Policy)

When this website is accessed, server log files are automatically recorded. These may contain the following data:

  • IP address of the accessing device
  • Date and time of access
  • Requested URL
  • Referrer URL (previously visited page)
  • Browser / user agent used
  • HTTP status code

This data is processed solely for the operation and security of the server. It is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure server operation).
Retention period: Server logs are deleted after a maximum of 30 days.

No cookies, no tracking

This website does not set cookies and does not use any analytics or tracking tools. No user behavior is recorded. A cookie banner is therefore not required.

External links

This website contains a link to the Google Play Store. When this link is accessed, the Google Privacy Policy applies. We have no influence over the data processing by Google.

1. Controller

Benedikt Koßmann
Schaurain 4 1/2
83101 Rohrdorf
Germany
Email: info@stavau.com

2. Principle: your data stays on your device

PillenKompass generally stores health and usage data exclusively locally on your device. There is no user account, no proprietary cloud synchronization, and no proprietary tracking of app usage.

External data processing only takes place where necessary for in-app purchases and the management of paid subscriptions. This processing is carried out via the respective app store infrastructure and RevenueCat for technical subscription management.

3. What data is processed?

3.1 Data stored locally on your device

Contraception data
Intake status, contraceptive method, cycle scheme, pack start
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

Symptom data (Plus)
Recorded symptoms, intensity, free-text notes
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

Event log (Plus)
Contraception-related events and notes
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

How consent is obtained: Consent under Art. 9(2)(a) GDPR is explicitly requested in the app – during onboarding (step 5) and when the Plus features Symptom Tracking and Situation Log are opened for the first time. Consent is voluntary; without consent, all core features (reminders, calendar, statistics) remain fully available. You can withdraw consent at any time (Settings → Privacy & Security → Withdraw consent).

App settings
Reminder time, display options, notification texts, PIN/biometric setting, stock level
Legal basis: Art. 6(1)(b) GDPR

Travel mode data (Plus)
Home time zone, current time zone
Legal basis: Art. 6(1)(a) GDPR

Subscription status
Plan, expiry date, product ID
Legal basis: Art. 6(1)(b) GDPR

Important: This data generally does not leave your device. It is stored in a local database on your device and is only accessible within the app.

3.2 Data relating to in-app purchases and subscriptions

If you subscribe to PillenKompass Plus, purchase-related data is processed via the relevant app store. This may include purchase receipts or receipt tokens, product IDs, subscription period, and subscription status.

RevenueCat (RevenueCat Inc., USA) is used for the technical management and validation of subscriptions. RevenueCat processes personal data as a processor for the respective app provider.

No health data entered in the app is transmitted to RevenueCat. Only data required for subscription validation, entitlement checks, and subscription management is processed.

Recipients: Apple App Store / Google Play / RevenueCat
Legal basis: Art. 6(1)(b) GDPR
Third-country transfer: Where processing takes place in the USA, it is based on appropriate safeguards, in particular Standard Contractual Clauses.

3.3 Data export

You can export your data yourself at any time:

  • JSON backup - app data, optionally password-encrypted
  • CSV - intakes, events, symptoms, depending on selection
  • PDF (Plus) - formatted report

Exported files are stored locally on your device or shared via system functions. You are responsible for any further processing after export.

4. What data is not collected?

  • No usage analytics for advertising or marketing purposes
  • No advertising IDs
  • No disclosure of health data to third parties
  • No user account and no registration
  • No proprietary cloud synchronization
  • No proprietary push backend for reminders

5. Permissions

  • Notifications - local reminders within the app
  • Exact alarm - precise local scheduling of reminders
  • Biometrics - optional app lock via device functions
  • Internet - required for store communication and subscription management
  • Autostart - restoring local reminders after device restart

6. Storage period

  • Local app data: until deleted by you or until the app is uninstalled
  • Purchase and subscription data: according to the requirements of the respective store and RevenueCat

You can delete data within the app. Uninstalling the app generally removes locally stored data, unless the operating system stores it otherwise.

7. Your rights

Under the GDPR, you have in particular the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future

Since essential health data is stored locally on your device, you can exercise many of these rights directly yourself, for example through correction, export, or deletion within the app.

If you have questions about privacy, contact: info@stavau.com

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

9. Not a medical device

PillenKompass is a reminder and tracking tool. The app does not provide medical advice, diagnoses, risk assessments, or treatment recommendations. The information displayed serves solely for personal organization and documentation.

10. Changes to this privacy policy

This privacy policy may be updated when the app is further developed. The currently published version shall apply.

Version date: May 2026