📌 Privacy Policy

1. Controller

The controller responsible for data processing in this app is:

Florian Sauer
basic income
Postfach 43
3925 Grächen
zeitkontogrundeinkommen@gmail.com

2. Collection and Storage of Personal Data

We collect and process personal data only to the extent necessary for the operation of the app. This includes in particular:

• Name
• Email address (e.g., for registration)
• Language preference
• Password (hashed, for account security)
• Verification status (isVerified)
• Verification token derived from the ID number (non-reversible hash)

2.1 Identity verification (optional)

If you choose to verify your account, the app uses the camera to scan your German identity card (Personalausweis) and read the machine-readable zone (MRZ) to obtain your ID number. We do not save a photo of your ID and we do not store the readable ID number. Instead, we immediately create a non-reversible verification token (e.g., a cryptographic hash of the ID number) and store only that token together with your isVerified status to prevent duplicate accounts and abuse.

3. Purpose of Processing

Your data will be processed exclusively for the following purposes:

• Providing and operating the app
• Registering and managing your account
• Optional identity verification to prevent multiple accounts and abuse
• Communicating with you regarding the app
• Enforcing our rights (e.g., in cases of misuse)

4. Disclosure of Data

Your personal data will not be shared with third parties. An exception applies only if disclosure is required to enforce our rights under applicable law.

5. Storage Period

We retain your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data unless statutory retention obligations require otherwise.

For identity verification, we retain only the verification token and isVerified status until you remove verification or delete your account. The readable ID number is discarded immediately after generating the token.

5.1 Account Deletion

You can delete your account at any time in the app under Profile → Settings → Delete Account. When you confirm deletion, we immediately deactivate your account and start removal of your personal data.

• What we delete: account profile data (name, email, language), authentication data, and app usage data linked to your account.
• Verification data: we retain only the non-reversible verification token and the isVerified flag until deletion completes; then these are deleted as well.
• What we don’t keep: we do not store any ID photo; the readable ID number is discarded immediately after generating the token.

If you cannot access the app, you may also request deletion via email at zeitkontogrundeinkommen@gmail.com from your registered address.

6. Rights of Data Subjects

You have the right to:

• Request information about your stored personal data
• Request correction or deletion of your data
• Restrict the processing of your data
• Object to the processing of your data
• Request data portability
• Lodge a complaint with a supervisory authority

7. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, misuse, loss, or destruction.

8. Responsibility and Legal Framework

All transactions and activities within the app are carried out by users on their own responsibility. Users must comply with the laws of their respective countries.

9. Contact

If you have any questions about this Privacy Policy, please contact:
zeitkontogrundeinkommen@gmail.com