Privacy
Controller and contact
klickStelle IT
Proprietor: Andre Rüttinger
Klosterstr. 25
98553 Schleusingen
Germany
Email: support@separapics.de
Photos and notes
SeparaPics stores images, notes, tags, recognized image text and optional capture locations in app storage. New captures do not automatically appear in Apple Photos. Text recognition runs on the device.
iCloud and app protection
Synchronization uses the private CloudKit database associated with your iCloud account. A salted PIN verifier and enabled status are synchronized through iCloud Keychain. The operating system handles biometric authentication; the app does not receive raw Face ID or Touch ID data.
Location
With permission, capture locations can be saved. Imported images may contain GPS metadata. Apple’s geocoding service is used to obtain place names, so location processing is not entirely local.
Import, export and deletion
You control imports, sharing and exports. Changes to Apple Photos require the relevant system permission. Deleting imported originals requires confirmation and can affect other devices using iCloud Photos. The app trash is separate from the Apple Photos trash.
Purposes and legal bases
Where we process personal data to provide agreed app features or handle contract-related enquiries, the legal basis is Article 6(1)(b) GDPR. Technical operation, troubleshooting and protection against misuse rely on Article 6(1)(f) GDPR; our legitimate interest is a secure and reliable service. Article 6(1)(c) GDPR applies to retention required by law.
Optional location features are used with your consent (Article 6(1)(a) GDPR). You can withdraw location permission in system settings; this does not automatically remove previously saved locations. Camera and photo permissions control technical access. Without permission, the relevant features are limited; other features remain available.
Website and technical logs
klickStelle IT operates the website and support mailbox on its own virtual server hosted by Host Europe in Strasbourg, France. A data processing agreement with Host Europe dated 25 May 2018 is in place. Website requests require processing connection data, including IP address, request time and requested address. Depending on server configuration, logs may also contain status codes, transfer sizes, referrers and browser identifiers. Logs support operation, troubleshooting and security, not advertising profiles.
Logs are rotated daily; seven rotated files are kept in addition to the current file. Since 8 October 2026, web server logs have been excluded from new backups. Older backups are retained for two months and may contain previously backed-up log files until their regular expiry.
The current static website uses no analytics tools. Fonts and images are served locally; the supplied pages set no custom cookies and embed no advertising services. This notice will be updated if the website changes.
Email enquiries
Messages sent to support@separapics.de are received and stored in a dedicated mailbox on our server at Host Europe. We handle enquiries using an email client over IMAP. Messages are no longer forwarded to Google Workspace.
If you contact us, we process your email address, any supplied name, message, attachments and technical delivery data to handle your request. Contract-related support relies on Article 6(1)(b) GDPR. Other enquiries rely on Article 6(1)(f) GDPR and our legitimate interest in answering them. Please send only information necessary for your request.
Resolved support enquiries are deleted two months after the respective support case is closed as part of regular manual housekeeping. Legal retention duties or the necessary protection of legal claims may require longer storage of the affected records. The support mailbox is included in server backups retained for two months. Messages deleted from the mailbox may therefore remain in a backup until that backup expires.
Retention of your collection
App contents remain stored until you remove them or a configured timer runs. Deleted photos and notes normally remain in the app trash for 30 days; you can permanently delete them earlier. Automatic cleanup runs while using or reopening the app. A timer that empties a note preserves its text and tags; new photos restart the configured interval.
Deletions are passed to iCloud when synchronization is available. Offline devices and backups may retain older states. Uninstalling alone does not guarantee deletion of iCloud data. Shared or exported copies and originals in Apple Photos are managed separately.
Recipients and Apple services
Host Europe provides the infrastructure for the website and email. The app does not send your collection to this web server. Collection contents are stored in the app and, when iCloud synchronization is active, in your private CloudKit database. We may receive content you voluntarily send to support.
Apple processes data when you obtain the app through the App Store or use iCloud and location services under its applicable terms. Processing may take place outside the EU/EEA. See Apple’s privacy policy for responsible Apple entities, international transfers and safeguards. Recipients you select when sharing also apply their own privacy terms.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction of processing and data portability. You may withdraw consent at any time for the future without affecting earlier lawful processing.
Right to object: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Contact support@separapics.de. Reasonable verification of your identity may be required to handle the request.
You may complain to a supervisory authority, particularly where you usually live, work or believe an infringement occurred. The authority responsible for our location is the Thuringian Commissioner for Data Protection and Freedom of Information, Häßlerstraße 8, 99096 Erfurt, Germany.
Date of this notice
9 October 2026. We do not make automated decisions with legal or similarly significant effects or conduct related profiling.