01
Controller
Fabian Krüger
Bahnhofstraße 31
83278 Traunstein, Germany
Email: support-emplore@pm.me
02
What data is collected?
The app stores only what is genuinely necessary.
- Data you enter yourself: emotions, thoughts, and actions. This content is encrypted before you save it.
- Device information: operating system and app version for technical improvements.
- Email address: stored unencrypted for account management.
- Encryption: personal entries such as emotion logs, empathy entries, and mood data are stored securely, encrypted, and pseudonymized.
03
Legal basis for processing
- Your consent pursuant to Art. 6(1)(a) GDPR.
- Performance of a contract pursuant to Art. 6(1)(b) GDPR to provide the app.
- Legitimate interests pursuant to Art. 6(1)(f) GDPR for app security and technical stability.
04
Storage and deletion of data
Your data belongs to you. You can delete it at any time.
Retention periods:
- Emotion data: for as long as you use the app.
- Account data: until the account is deleted.
- Technical logs: for a maximum of 30 days.
Delete data in the app via the menu item “Delete data”.
Delete your account completely in the settings if you want to remove all account data.
05
Security and processors
Server location: Frankfurt, Germany.
Processors pursuant to Art. 28 GDPR:
- Cloud provider: Appwrite (appwrite.io).
- Purpose: secure storage and synchronization of data.
- Location: EU / Germany.
- DPA concluded: processing takes place only on documented instructions.
Security measures include SSL/TLS encryption for transfers, end-to-end encryption for your entries, pseudonymization, regular security updates, and Appwrite certifications such as ISO 27001 / SOC 2.
A unique secret key is generated during registration. It is shown only once, cannot be restored later, encrypts your entries, and pseudonymizes your user ID.
Data is stored locally on your device by default. Transfer to Appwrite servers in Frankfurt takes place only on your instruction and in encrypted form.
06
International data transfers
- Processing takes place exclusively within the EU.
- Primary server location: Frankfurt, Germany.
- Backup servers are located in EU member states.
- No transfers to third countries outside the EU are currently planned.
- If this changes in the future, adequacy decisions or EU standard contractual clauses under Art. 46 GDPR will be used and users will be informed in advance.
07
Sharing with third parties
Clear answer: no.
- Your data is never sold.
- Your data is never shared for third-party marketing purposes.
- The only exceptions are legal obligations or technical processing by contracted service providers such as Appwrite.
- Processors may use the data only for storage and synchronization, not for their own purposes.
08
Your GDPR rights
- Access to stored data.
- Rectification of inaccurate data.
- Erasure of unwanted data.
- Data portability upon request.
- Objection to processing.
- Restriction of processing.
- Right to lodge a complaint with the competent supervisory authority.
09
Changes to this privacy policy
If something changes, you will be informed in the app in due time.
Last updated: July 29, 2025
10
Questions?
I am happy to help.
Fabian Krüger
Bahnhofstraße 31
83278 Traunstein, Germany
Email: support-emplore@pm.me
Response time: within 48 hours