Introduction
This privacy policy outlines how your data is handled when you use our mobile application, DoublyCheck (the "App"), and visit our website, doublycheck.app (the "Website"). We take your privacy very seriously. Our philosophy is to collect as little data as possible and to be transparent about what we do.
The App is designed to be a private, on-device utility. We do not have user accounts, and we do not track you.
1. Data Controller
The entity responsible for data processing (the "Data Controller") in accordance with the EU General Data Protection Regulation (GDPR) is:
Caspari e.U.
Millergasse 19/20
1060 Vienna
Austria
For any questions regarding data protection, please contact us at: contact@doublycheck.app.
2. Data Processing in the DoublyCheck App
a. Scanned Data (IBANs, Crypto Addresses, etc.)
What is processed: The core function of the App is to scan and store text, such as IBANs or cryptocurrency addresses.
How it is processed: This data is processed and stored exclusively on your device. It is never sent to our servers or to any third party. The data is stored in an encrypted format on your device. To further protect your privacy, the App's data is excluded from automatic device backups (both on iOS and Android).
Legal Basis: The processing of this data is necessary for the performance of the App's services, which you request by using it (Art. 6(1)(b) GDPR).
Retention Period: This data remains on your device until you manually delete it within the App or uninstall the App.
b. Technical Data (Google ML Kit)
What is processed: The App uses Google's ML Kit framework for its on-device text recognition capabilities. According to Google's terms, the input data you scan (images and text) is processed on-device and is not sent to Google.
However, the ML Kit library may contact Google servers to download updated models and to send anonymized metrics about the performance and utilization of the API within our App. This data does not include your personal information or the content you scan.
Purpose: Google uses this metric data to measure performance, debug, maintain, and improve their APIs.
Legal Basis: We process this technical data based on our legitimate interest (Art. 6(1)(f) GDPR) in using a robust and reliable third-party library to provide the App's core functionality.
For more information, please refer to the ML Kit Terms of Service and Google's Privacy Policy.
3. In-App Purchases
The App may offer premium features via in-app purchases. These transactions are processed securely by the respective platform holders, Apple (App Store) and Google (Play Store).
We do not receive any of your personal payment information, such as your credit card number. We only receive anonymous confirmation that a purchase was completed. For details, please refer to the privacy policies of Apple and Google.
4. Data Processing on our Website
a. Hosting via Cloudflare
Our Website is a static site hosted via Cloudflare Pages. When you visit our Website, your browser connects to Cloudflare's servers. In this process, your IP address and other technical data (e.g., browser type, requested page) are logged by Cloudflare. This is necessary for providing the website content and for security purposes, such as DDoS mitigation.
Legal Basis: This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure and reliable website. For more details, see Cloudflare's Privacy Policy.
b. Content Delivery Networks (CDNs)
Our Website may use third-party CDNs to deliver assets like fonts, CSS, or JavaScript files efficiently. When your browser loads these files, it makes a direct request to the CDN provider (e.g., Google Fonts). This request includes your IP address. This is done to improve website loading times. Should you choose to self-host these assets, this data transfer would not occur.
c. Embedded YouTube Videos
Our Website includes embedded videos from YouTube. We use YouTube's privacy-enhanced mode for these videos (via the "youtube-nocookie.com" domain).
According to YouTube, this mode means that YouTube will not store information about visitors on our Website unless they choose to play the video. When you click on a YouTube video to watch it, you are consenting to your data being transferred to Google (as the operator of YouTube) and to cookies being set by YouTube. This may include transferring your data to servers in the United States.
Once you play a video, your interaction falls under YouTube's data processing policies. For more information on how Google and YouTube handle your data, please see Google's Privacy Policy.
Legal Basis: Our legitimate interest (Art. 6(1)(f) GDPR) in making our product more accessible and understandable through video demonstrations serves as the legal basis for embedding the videos. The actual playback and associated data transfer are based on your consent (Art. 6(1)(a) GDPR), which you provide by clicking on the video.
5. Your Rights as a Data Subject
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: You can ask for a copy of the data held about you.
- Right to Rectification: You can correct inaccurate data. Within the App, you can edit stored entries directly.
- Right to Erasure: You can request that we delete your data. In the context of our App, you can do this by deleting the data within the App or by uninstalling it.
- Right to Restriction of Processing: You can request to limit how your data is processed.
- Right to Object: You can object to the processing of your data, for instance, where it is based on legitimate interests.
- Right to Data Portability: You can request a machine-readable copy of your data.
To exercise these rights, please contact us at contact@doublycheck.app. You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Österreichische Datenschutzbehörde (www.dsb.gv.at).
6. Changes to This Privacy Policy
We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.