Privacy

1. Controller

Codemenschen GmbH, Anton-Hubmann-Platz 1/6, 8077 Gössendorf, Austria. Company register number FN 543274 h.

Questions about privacy and requests about your rights: office@codemenschen.at.

2. When you visit the website

Our server logs the IP address, time, requested address and browser details of each request. This is for security and troubleshooting. The logs are deleted after 14 days. The legal basis is our legitimate interest in running the service securely (Art. 6(1)(f) GDPR).

The server and database are run by Hetzner Online GmbH (Germany) in a data centre in Finland, inside the EU.

Every night the database and the project files are backed up. One copy is stored at Amazon Web Services in its Frankfurt data centre (Germany) and deleted after 90 days. The legal basis is our legitimate interest in being able to restore data after a failure (Art. 6(1)(f) GDPR).

3. Audience measurement without cookies

We count ourselves which pages are visited and how far visitors get, for example from a quote to an order. For this we build a checksum from the IP address, browser details and a random value that is replaced every day. The IP address and browser details themselves are not stored, and on the next day nobody can be recognised.

We store the page, the language, the website you came from (its domain only), campaign details from the link (utm) and whether you came from an ad. There are no cookies, no third-party services and nothing is passed on. The data is deleted after 13 months. The legal basis is our legitimate interest in improving the service (Art. 6(1)(f) GDPR).

4. What is stored in your browser

A cookie remembers your language. After you sign in, your sign-in key is kept in the browser's local storage, and so is the list of your free prototypes. All of this is needed for the site to work and is not used for analysis (§ 165(3) TKG 2021). You can delete it in your browser at any time.

The browser remembers your choice about statistics and ad measurement. Only if you agree are cookies from Google Analytics, Google Ads or Meta added, and for ad measurement the click id of an ad (see section 10).

5. Free prototype

Your description is sent to an AI model that writes the prototype (see section 8). One prototype per account is free; for that we store your e-mail address with the prototype. We also store the IP address so that nobody creates more than 5 prototypes a day. Prototype, description and IP address are deleted after 7 days, unless you order an app from it.

Photos in the prototype are searched at Pexels with a few keywords. Pexels receives no data about you.

6. Quote, order and account

For an order we process your e-mail address, name, app description, chosen packages and the consents given at checkout. When you accept the terms and waive withdrawal under § 18 FAGG, we store the time and IP address as proof. The legal basis is the contract (Art. 6(1)(b) GDPR) and our legal duty to keep proof (point c).

You sign in with a link sent by e-mail, without a password. Order and invoice data is kept for seven years because tax law requires it (§ 132 BAO).

7. Payment

Payments run through Stripe (Stripe Payments Europe, Ltd., Ireland). You enter card details directly at Stripe and we never see them. We only learn whether and how much was paid. Stripe also processes data in the USA, based on the EU standard contractual clauses.

8. Building the app, changes and chat

To build your app we store the project with its code, preview and history. When you ask for changes, we store the messages in the project chat and any screenshots you attach. This stays stored as long as the project exists and is deleted with your account.

Text and code are written by the AI model Claude from Anthropic PBC (USA). Your description, your chat messages and attached screenshots are sent to Anthropic for this. Images for ads are made by an image model from OpenAI (USA) from a description of the app, without your contact details. The installable Android app is built by the Expo service (650 Industries, Inc., USA) from your app's code. Transfers to the USA rely on the EU-US Data Privacy Framework or the EU standard contractual clauses.

Please do not send passwords, health data or other people's data in the chat unless the change really needs it.

9. E-mails

E-mails about your order, preview and changes are sent through World4You Internet Services GmbH (Austria). If you reply, the message lands in our mailbox there.

10. Google Analytics, advertising and ad measurement

We advertise Appmitki on Google and Meta. On your first visit we ask whether you allow statistics and ad measurement. Both are off until you agree, and without your consent the site loads nothing from Google or Meta.

Statistics: with your consent we load Google Tag Manager and through it Google Analytics (Google Ireland Ltd.). Google Analytics sets cookies (_ga) and records which pages you open, where you came from, device, browser and approximate location. The IP address is shortened. Data is deleted after 14 months.

Ad measurement: with your consent, tags from Google Ads and Meta (Meta Platforms Ireland Ltd.) may set cookies and learn whether your visit from an ad led to a request or an order. If you came from an ad, the link carries a click id (gclid or fbclid). We keep it for up to 90 days in your browser and with your quote. If you ask for a quote or a prototype or pay for an order, we also report this directly to Google or Meta: with the click id, the time, IP address and browser details, for an order the amount, and if we have it your e-mail address as a checksum (SHA-256), never in plain text. This teaches the platform which ads work and lets it reach similar people.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can change or withdraw it at any time under "Cookies and measurement" at the bottom of every page. We delete the matching data on our side once the report is sent, at the latest after 90 days.

Google and Meta also process this data in the USA, on the basis of the EU-US Data Privacy Framework, and under their own privacy policies.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on our legitimate interest. Write to office@codemenschen.at.

If you think we handle your data wrongly, you can complain to the Austrian Data Protection Authority (dsb.gv.at).