Privacy Policy

1. Controller

Name

Peter Hildel

Address

Gustav-Adolf-Str. 19, 90513 Zirndorf, Germany

Email

info@hildel.com

Controller within the meaning of Art. 4(7) GDPR for the processing described below. There is no statutory obligation to appoint a data protection officer.

2. Scanning cards (camera and photos)

To add a card you can use the camera or choose images with the system photo picker. iOS asks for camera access the first time you scan. The photo picker only gives iFoldy the images you select; it does not grant access to your library.

Edge detection, perspective correction and text recognition run entirely on your device with Apple’s frameworks (AVFoundation, Vision, Core Image). No image is uploaded or analysed by an external service.

Before saving, you cover card numbers and security codes with opaque masks and confirm both sides. Only these masked images, the name you give the card and its position in the wallet are stored. The images use iOS’s complete file protection and are excluded from iCloud and computer backups.

3. Notes and settings stored on your device

The folded note, your card order and pocket assignments, the chosen example collection, the cover name and logo, the side-pocket selection, the ID window, linked apps and Apple Wallet hints per card, and your wallet settings (material, wear, layout, card arrangement, retaining band, sounds, haptics, theme and language) are saved in iFoldy’s own storage on your device.

None of this is transmitted. Deleting the app removes all of it.

4. Photos, receipts, cover logo and linked apps

• Wallet photos — you pick single images with the system photo picker; iFoldy gets no access to your library. A downsized copy without metadata, your crop and caption are stored locally. Originals stay unchanged.
• Receipts — scanned with the system document camera or chosen from photos. Text recognition runs on the device. Images and recognised text are stored locally.
• Cover logo — an image you import for the cover is stored locally as part of the personalization.
• Linked apps — a card can open another app or a Shortcut you set up. iFoldy only opens that link and passes on no card images or text; what the other app does is governed by its own privacy policy. A Shortcut prompt you copy goes to the clipboard only when you tap Copy.
• Stamp cards — names, shops, rewards, stamps, redemption notes and any photos you add for the Food & Loyalty pocket are stored locally.
• Food app search — only if you start a search for a food app, the search text and your App Store region are sent to Apple’s search service, and app icons are loaded temporarily. Apple processes this as an independent controller.

Photos and receipts use complete file protection, are excluded from backups and are never synchronised by iFoldy.

5. Reminders, Calendar and Contacts

• Reminders — only if you choose “Connect to Reminders” on the note. iFoldy shows the list you pick, adds tasks and marks them complete in Apple’s Reminders store. Synchronisation happens through the accounts configured on your device (for example iCloud), not through iFoldy.
• Calendar — only when you open the pocket calendar. Events are read to display your week; iFoldy does not create, change or delete events and does not store them.
• Contacts — only when you open the business cards. Contacts are read on the device to display them; iFoldy does not save copies of contact data.

You can revoke each permission at any time in Settings → Privacy & Security.

6. Paper map and location

The paper map uses Apple Maps (MapKit). When you search for a place or request a route, the search text, the selected start and destination and, if you choose “Current location”, your position are sent to Apple to return results. Apple processes this data as an independent controller under its privacy policy; I receive none of it.

Location access is requested only when you use your current position on the map, and only while the app is in use.

7. No tracking

iFoldy contains no analytics or crash-reporting SDK, no advertising and no tracking of any kind. Nothing is sold or shared for advertising.

If you have enabled “Share with App Developers” in iOS, Apple may provide me with anonymised crash reports and usage statistics. You control this in Settings → Privacy & Security → Analytics & Improvements.

8. App Store, iFoldy Pro and TestFlight

When you obtain iFoldy through the App Store, Apple processes the data needed for the download and your Apple Account as an independent controller. I receive only aggregated sales and download figures.

iFoldy Pro is a one-time in-app purchase handled entirely by Apple. The app uses Apple’s StoreKit to load the price and to check the signed purchase on your device; I run no purchase server and receive no payment or account data.

If you test iFoldy through TestFlight, Apple shares with me the email address you were invited with and, if you choose to send them, crash reports, feedback and screenshots, plus basic usage figures such as installs and sessions. This is governed by Apple’s TestFlight terms; you can stop testing at any time.

9. Contacting me

If you email me, I process your email address, your message and anything you include (for example your device model) to answer it. Legal basis: Art. 6(1)(b) GDPR where your request relates to using the app, otherwise Art. 6(1)(f) GDPR. Emails are deleted once the matter is resolved, unless statutory retention periods apply.

10. This website

This website is static and hosted on GitHub Pages (GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit it, GitHub processes technical connection data — IP address, time of request, requested file, referrer and user agent — in server logs, which is necessary to deliver the page. Legal basis: Art. 6(1)(f) GDPR. GitHub may process data in the USA; transfers are based on the EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

The site sets no cookies, uses no analytics and loads no external fonts or scripts. Your light/dark preference is stored locally in your browser and never leaves your device. The only other connection is the TestFlight form, and only when you press Send.

11. TestFlight sign-up on this website

When you enter your email address in the TestFlight form and press Send, your address and the page language are sent to the form service FormSubmit (formsubmit.co), which forwards them to me by email. Your connection data (such as your IP address) also reaches FormSubmit. FormSubmit may process data outside the EU; its own privacy information is on formsubmit.co.

I use your address only to invite you to the iFoldy beta via Apple TestFlight and, if needed, to write to you about the beta. Legal basis: Art. 6(1)(b) GDPR, because you ask to take part. I delete your address when the beta ends or as soon as you ask me to, and you can leave the beta in TestFlight at any time.

12. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). One email to info@hildel.com is enough. Apart from beta sign-ups and emails, iFoldy stores no personal data on my side.

You also have the right to lodge a complaint with a supervisory authority — for me that is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

13. Changes

If iFoldy gains features that change how data is handled, this page will be updated before those features ship. The date at the top shows the current version.