HobbytoryPrivacy Policy
In short
- Hobbytory has no accounts, no ads, no tracking and no analytics.
- Your data stays on your device and, if you use iCloud, in your own private iCloud. As the developer, I cannot access it.
- The app only contacts third-party services when you use a feature that needs them, such as an ISBN lookup or AI recognition with your own key.
Controller
Waldemar Schmidt
Josef-Schulte-Str. 7
26871 Papenburg
Germany
Email: mail@hobbytory.app
What the app stores
Everything you enter in Hobbytory: storage units, bins, parts, books, records, groups, notes, quantities, links and photos. This data is stored
- locally on your device, and
- if you are signed in to iCloud, in the private CloudKit database of your iCloud account so it syncs between your devices. This database belongs to your Apple Account and is provided by Apple. As the developer, I cannot see it.
Settings such as appearance or sort order are stored on the device. Your Anthropic API key and Discogs token are stored in the device keychain; they are not synced via iCloud and never sent to me.
If you create a backup, share a CSV list or set up the Markdown export to a folder, the data goes where you choose. The app does not send it anywhere else.
Permissions
- Camera: to scan labels, barcodes and component bags and to take photos of your items. Images are only saved if you add them to an entry.
- Photos: through the iOS photo picker, the app only sees the images you select.
- NFC: to read and write the NFC tags on your bins. The tags only contain a short code.
- Local network: only if you set up an LED display (ESP32) in your shelf. The app then talks directly to that device on your network.
Services the app uses at your request
For these requests, the service necessarily sees your IP address and the content of the request. The service’s own privacy policy also applies.
| Service | When | What is sent |
|---|---|---|
| Anthropic (Claude), USA | Only when you use AI recognition with your own API key | The photo(s) you select for recognition and an instruction describing what to recognize. The request runs through your Anthropic account. Anthropic privacy policy |
| Discogs (Zink Media, LLC), USA | When you search for records | Search term, barcode or catalog number; your personal Discogs token if you entered one. Cover images are loaded from Discogs. Discogs privacy policy |
| German National Library (DNB), Germany | When you look up a book by ISBN | The ISBN; cover images are loaded. DNB privacy policy |
| Open Library (Internet Archive), USA | When you look up a book by ISBN | The ISBN; cover images are loaded. Internet Archive terms |
| Google Books (Google), USA | When you look up a book by ISBN | The ISBN; thumbnails are loaded. Google privacy policy |
| Apple iCloud / CloudKit | When you are signed in to iCloud | Your entries, to sync them between your devices, in your private database. Apple privacy policy |
Links in entries (for example to LCSC or Discogs) are only opened in the browser when you tap them.
Legal basis
Data is processed because you use the respective feature of the app (Art. 6(1)(b) GDPR). Data is sent to Anthropic only at your explicit request, using your own account. For services in the USA, access by US authorities cannot be ruled out.
TestFlight and App Store
If you test Hobbytory via TestFlight, Apple provides me with crash reports, usage figures (such as installs and sessions) and any feedback you send through TestFlight, together with the email address or name you were invited with. I only use this to fix bugs and improve the app. Downloads from the App Store are subject to Apple’s terms.
This website
The website hobbytory.app is run on Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, date and time, the requested address and details about your browser in order to deliver the pages and protect them against attacks. I do not analyze this data.
The website sets no cookies, uses no analytics and loads no fonts, scripts or other content from third-party servers.
The legal basis is my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare privacy policy
If you write to mail@hobbytory.app, Cloudflare (Email Routing) forwards your message to my mailbox at Proton (Proton AG, Switzerland). I only use your details to reply, for example with a TestFlight invite, and delete the email once it is no longer needed. The legal basis is Art. 6(1)(b) or (f) GDPR.
Deletion
You delete entries directly in the app. Removing the app deletes the local data. You can delete the data in your iCloud in iOS Settings under [Your Name] › iCloud › Manage Storage.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Since I receive no data from the app, this only concerns TestFlight information and emails you send me. You may also lodge a complaint with a data protection supervisory authority.
Changes
If new features process data differently, I will update this policy. The version on this page applies.