1. Controller and contact
The controller for this website and provision of DueWink is:
Maximilian Andersen
Flurstraße 11
83043 Bad Aibling
Germany
Email: support.m.andersen@icloud.com.
“M. Andersen Apps” is the individual provider’s public name, not a separate company. Privacy enquiries can be sent to this address.
2. Scope and technical status
This notice covers the developer website and DueWink for iOS, version 1.0.0. The app has not yet been publicly released. The app features below describe this intended release and its available source code. Apple CloudKit is intended for optional synchronisation; the provider reports that the schema has been deployed to Production and tested with isolated data on one iPhone. A test between two devices remains outstanding. Publication of this information website is not approval or a functionality guarantee for a later app release.
3. Data processed by the app
You may enter or select providers, categories, amounts and currencies, contract dates and terms, cancellation deadlines, status, notes, reminder times and PDF or image documents. Technical data includes contract/change identifiers, timestamps, file names, types and sizes, and local sync, conflict and deletion state. You choose the document content, which may include other people’s data or sensitive information. Limit inputs to what is necessary and do not send this content to support without a specific reason. This notice does not promise a blanket legal basis for every possible sensitive document type.
4. Encrypted contract vault and preferences
The persistent contract vault encrypts contract data and attachments using AES-256-GCM. Its key is stored separately in the device-bound iOS key store and is unavailable while the device is locked. The app applies additional iOS file protection to the vault. Contents are decrypted into memory for display. Language, introduction, notification settings and other preferences are stored separately in local preference storage; not all are AES-encrypted contract files. The purpose is your requested contract management.
5. Document imports and temporary copies
Camera, photo and file selection are initiated by you. The import libraries may first place images and selected files in the app’s temporary area before the app saves them to the encrypted contract vault. These import copies are not covered by the vault’s additional AES encryption; iOS sandbox and system protections apply. The described app version has no verified targeted cleanup of every import copy after a completed or cancelled import. Immediate deletion or a fixed retention period is not promised. Originals in Photos, Files or another file provider remain separate.
6. Technical iCloud checks before sync
In a CloudKit-enabled build, the app checks Apple Account availability in the flow before it checks whether contract sync is enabled. It may retrieve a technical CloudKit user identifier and process its SHA-256 hash to recognise account changes. Hashing does not automatically make it anonymous. Local mode therefore does not promise complete absence of Apple connections. Upload of contract contents and attachments is gated on enabled sync in the reviewed flow.
7. Optional contract sync through CloudKit
When you enable sync and iCloud is available for the build, DueWink transfers contract data, amounts, deadlines, reminder settings and attachments to your Apple Account’s private CloudKit database. Contract IDs, revisions, technical deletion markers and change information support sync. Local storage paths and the internal local user ID are removed from contract payloads. Contract contents use CloudKit encrypted fields. Attachments are additionally AES-GCM-encrypted before upload; the corresponding attachment key is held in an encrypted CloudKit field. The local vault key is not uploaded for this. This is not a blanket promise of identical end-to-end encryption for every Apple configuration.
8. Apple, background sync and recipients
CloudKit is provided by Apple. For users in Germany, Apple’s iCloud terms identify Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple describes a private CloudKit database as accessible to the respective user by default; DueWink does not run a separate external cloud database for this. Enabled sync uses technical change subscriptions and may register for silent Apple push notifications. iOS controls background execution. Contract contents and prices are not sent as the text of visible deadline reminders. Apple also processes its own account, connection and operational data. Apple’s role for its own services must be distinguished from any processing on behalf of the provider; technical use alone does not establish a particular contractual role. iCloud terms (German regional version) · Apple privacy.
9. International processing
Cloudflare and Apple may process data internationally, including in the United States. Storage exclusively in Germany or the EU is not promised. Cloudflare describes safeguards for restricted international transfers through the standard contractual clauses and additional measures in its Data Processing Addendum. Apple also describes standard contractual clauses for EEA transfers and other safeguards in its privacy information. Actual processing depends on the service and account settings. Information about safeguards is available through the provider links in this notice and on request at support.m.andersen@icloud.com. Complete end-to-end encryption of all hosting, email or Apple service data is not promised.
10. Permissions and reminders
Camera and photo selection support requested imports; the file picker grants selected files. The described features do not request location, contacts or calendar access. The local device time zone is used for scheduling, not as GPS location. Visible reminders require notification permission. They contain a general message; the technical payload references the contract, not its provider or price. Up to 60 upcoming reminders are scheduled per device. You can revoke permissions in iOS Settings. Permissions apply per device; the operating system may delay or suppress delivery.
11. Storage, deletion and safety copies
Contracts remain in the active vault until deleted. Delete individual contracts in their details or all contracts in your profile. With sync enabled, deletions propagate to the cloud and other devices after successful synchronisation; pending operations and conflicts may delay this. Encrypted local safety copies are made before certain operations, including “Delete all contracts”. Remove those copies separately in your profile. Deleting a cloud contract removes its payload, attachment and attachment key from the active record. A technical deletion marker containing identifiers and revision remains for synchronisation. The described app version has no automatic expiry for these markers and no verified complete cloud-zone deletion method. Markers may therefore remain after deletion of contract contents. Immediate or complete removal of all cloud data and historical backups is not promised. Remaining copies and deletion markers are technical limits of the described app version, not a restriction of your statutory rights. A valid deletion request is assessed according to its actual scope and legal requirements; technical limits do not replace handling the request.
12. Disabling iCloud, uninstalling and backups
Disabling contract sync deletes neither local nor already uploaded cloud data. A different Apple Account pauses sync. Uninstalling and offloading an iOS app are distinct and do not confirm deletion of all cloud data. The reviewed iOS code excludes the vault and cloud upload staging directory from ordinary device backups. This does not guarantee treatment of historical backups, every operating system version or other file copies. Local safety copies require the device-bound key and are not portable recovery backups. Original files and Apple backups managed independently by the user must be considered separately.
13. Website and Cloudflare Pages
This static website is hosted on Cloudflare Pages Free, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes IP addresses, requested addresses, timing and technical HTTP/connection data for delivery, security and troubleshooting. Our purpose is reliable, secure website operation, based on Article 6(1)(f) GDPR. Cloudflare’s Self-Serve Agreement incorporates its Data Processing Addendum for the processing described there; its own account, security and legally required processing must be distinguished. Cloudflare operates a global network. Retention follows the relevant technical operational and security purposes and legal requirements; we do not claim an unconfirmed fixed log deletion period or maintain our own visitor database. This website embeds no advertising trackers, external fonts, contact forms or additional message receiving service. Web Analytics and Zaraz are not used for this website; its delivered security policy restricts executable scripts to its own website script and blocks additional network connections from it. Technical hosting processing remains separate. The email link opens your email application; the website sends no messages itself. GitHub is used only for private source management; GitHub Pages is disabled. Cloudflare terms · Cloudflare DPA · Cloudflare privacy.
14. Manual language and appearance preferences
The browser may suggest a language switch based on its preferred language; it does not forcibly redirect you. A manual language switch stores only the selected code as ma-language in this browser’s localStorage. A manual appearance choice stores light, dark or system as ma-theme. Existing values are read on page load to restore your chosen display. Without a manual choice, the website code does not create them. Simply dismissing the language suggestion does not store a persistent language decision. They contain no user ID, are not sent by this code, and remain until removed in the browser or by the footer control. The feature serves only the explicitly chosen display. The requested preference function is based on section 25(2)(2) TDDDG and, where personal data is processed, Article 6(1)(f) GDPR for restoring that display. This storage is not used for analytics or advertising.
15. Support through iCloud Mail
You can contact the provider at support.m.andersen@icloud.com. Your email address, message, technical details and optional attachments are read and stored in the configured iCloud Mail inbox to handle your enquiry. Transmission involves your email provider and Apple’s mail service. The website itself sends no messages and uploads no attachments. Ordinary email is not promised to be end-to-end encrypted; do not send passwords, complete contract documents or unnecessary sensitive information. Ordinary support enquiries, including attachments no longer needed, are deleted no later than 90 days after full resolution. This period starts once the enquiry has been finally handled and no necessary follow-up remains outstanding. If particular messages must be retained by law or are specifically needed to establish, exercise or defend legal claims, only the required content is kept longer and is deleted when that reason ends or the statutory period expires. This is an organisational inbox procedure, not automatic website functionality. The period does not promise deletion of Apple’s internal backup copies. For users in Germany, Apple’s iCloud terms name Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. We determine the purpose and retention of our handling of support enquiries; Apple also processes data to provide and secure its mail service under the linked Apple terms and privacy information. No separate agreement concluded with us or special encryption guarantee is asserted here. For telephone enquiries, we process the information you provide and any transmitted caller number to answer your request. This period also applies to associated reply copies and attachments no longer needed that we stored for support; effective deletion must account for trash folders and local support copies. The website does not automatically monitor or delete inbox content. iCloud and iCloud Mail terms · Apple privacy policy.
16. Purposes and legal bases
Where the provider is responsible for processing, requested app functions and related support serve performance of the usage relationship under Article 6(1)(b) GDPR. General enquiries and secure website operation rely on Article 6(1)(f); legitimate interests are answering enquiries and reliable, secure provision. Technical checks of the iCloud account and a pseudonymous account identifier support availability of the requested cloud service and protection against synchronising under the wrong account. Legally required retention or disclosure relies on Article 6(1)(c) together with the applicable obligation. Where separate consent is the basis, Article 6(1)(a) applies and consent may be withdrawn for the future. An iOS permission or iCloud switch is not general consent to arbitrary processing. Your processing of personal documents on your device must be distinguished from the provider receiving such content; do not send sensitive documents to support without a specific need.
17. Rights, complaints and provision of data
Subject to applicable legal conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to Article 6(1)(f) processing on grounds relating to your particular situation; a separate unconditional objection applies to any direct marketing. Consent may be withdrawn for the future. You may complain to a supervisory authority, particularly where you live or work or where the alleged infringement occurred. For this individual provider in Bavaria’s non-public sector, the Bavarian State Office for Data Protection Supervision (BayLDA) is relevant. Provider enquiries: support.m.andersen@icloud.com. No separate DueWink account is required. You are not required to email us contract contents. Without data, permissions or Apple services needed for a specific feature, that feature may be unavailable. We respond to requests without undue delay and normally within one month of receipt. Any legally permitted extension of up to two further months is explained within the first month. Where there are reasonable doubts about identity, only additional information necessary to confirm it is requested.
18. Automated decisions and other services
No advertising, tracking or external AI service for document contents was found in the reviewed app code; the reviewed website includes none either. There is no paid DueWink subscription or in-app purchasing. No automated decision with legal or similarly significant effect, or profiling, is intended in the reviewed flows. Apple’s own App Store, operating system, diagnostics and mail services have separate processing. These notices do not replace the separate review of App Store privacy disclosures and the actual released app.
19. Data provision and CloudKit requests
According to Apple’s developer documentation, Apple’s general “Get a copy of your data” feature does not include data in third-party CloudKit containers. It is therefore not a complete DueWink export or deletion method. The described app version has no general data export function. You may request access, provision or deletion at support.m.andersen@icloud.com. We assess the request and the access methods actually available; we do not claim general access to contract contents in your private CloudKit database. The absence of a general export feature and the deletion limits in section 11 restrict available self-service methods but do not remove your statutory rights. Apple: managing data in CloudKit apps. Please state whether your request concerns our support correspondence or data stored in DueWink, and the action you are requesting. Do not initially send complete contracts, credentials or identity document copies. If there are reasonable doubts about identity, we determine only the evidence necessary. Response periods and complaint options are in section 17. Sending a support request does not itself confirm deletion of every record or cloud copy.
Updated: 22 October 2026