Privacy

This is a translation. The German version (Datenschutz) is authoritative.

1. Controller

The controller within the meaning of Art. 4(7) GDPR for the app Wunderfeed and this website is:

Provider

Marvin Kicha

Address

Hueskenboerde 34
45136 Essen
Germany

Email

hello@deckle.io

No data protection officer has been appointed, as none is required (§ 38(1) BDSG, Art. 37(1) GDPR).

2. The app in short

3. What stays on your device

The app stores the following only on your iPhone:

• the topics you picked as interests when you started
• which discoveries you have seen, saved or marked with “Aha!”
• your answers to questions in discoveries and the schedule for “Remember this?”
• how long you stay with each topic, so the feed shows more of it (one number per topic, computed on the device)
• a copy of downloaded content, so the app also works offline

Storing this information on your device does not require consent, because it is strictly necessary to provide the function you asked for (§ 25(2) no. 2 TDDDG). We do not process it, because it never reaches us. You can reset your history in the app's settings; deleting the app removes everything.

4. Loading content

Discoveries aren't built into the app; they are loaded from audio.meditation.deckle.io. This storage is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare R2 behind Cloudflare's network). For each request Cloudflare processes the technically necessary connection data: IP address, time, the requested file and the app and system details sent with the request. No account, device identifier or any of the data listed in section 3 is transmitted.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to deliver new and corrected content without an app update. We do not analyze these access data ourselves. Cloudflare acts as our processor under Art. 28 GDPR; the data processing agreement is part of Cloudflare's terms. Data may be transferred to the USA on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified.

Interactive pieces in some discoveries are loaded from the same storage and shown inside the app. They load nothing from third parties and store nothing outside the app.

5. Sources and sharing

When you tap a source or an image credit, the provider's page opens in your browser, and that provider is responsible for what happens there. When you share a discovery, the app uses the iOS share sheet; we don't learn whether or with whom you share.

6. Crash reports via Apple

If you have enabled “Share with App Developers” in iOS, Apple provides us with aggregated usage statistics and crash reports through App Store Connect. They contain nothing that would let us identify you. The setting is under Settings → Privacy & Security → Analytics & Improvements.

7. Contact by email

If you email us, for example to point out a mistake, we process your address and message to reply and to check your hint (Art. 6(1)(f) GDPR). We delete the correspondence once the matter is settled, at the latest after 12 months, unless the law requires us to keep it.

8. This website

The website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Deutschland. When you visit, the server processes the usual access data (IP address, time, page requested, amount of data, referrer, user agent) in server logs, on the basis of Art. 6(1)(f) GDPR for secure and reliable operation. The logs are kept only as long as needed and then deleted automatically. Hetzner acts as our processor under Art. 28 GDPR; the servers are in Germany and no data is transferred to a third country.

• This website sets no cookies and uses no local storage. The server picks the language once from your browser's language setting; nothing is stored.
• There is no audience measurement and no analytics.
• Fonts and images are served from our own server. There is no connection to Google Fonts or any other third party.
• No maps, videos, social media widgets or other third-party content are embedded.

9. What doesn't happen

• no advertising and no advertising identifiers
• no tracking, no analytics tools, no third-party SDKs
• no account and no sign-in
• no automated decision-making within the meaning of Art. 22 GDPR; the feed is arranged on your device and has no legal or similarly significant effect
• no selling or sharing of data
• no access to contacts, photos, location, microphone or camera

10. Retention

Data in the app stays on your device until you reset your history or delete the app. Website logs are deleted automatically once they are no longer needed (section 8). Emails: see section 7.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Because we keep no accounts and cannot identify you, we are usually unable to link any processing to you (Art. 11 GDPR). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de). You may also contact the authority where you live or work.

12. Changes

We update this policy when the app, the website or the law changes. The version published here applies; the date at the top shows when it was last changed.