Privacy Policy

for the app PillenKompass and the website pillenkompass.bk-apps.online

0. Data processing on this website

Hosting

This website is hosted by:
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
(Hetzner Privacy Policy)

When this website is accessed, server log files are automatically recorded. These may contain the following data:

  • IP address of the accessing device
  • Date and time of access
  • Requested URL
  • Referrer URL (previously visited page)
  • Browser / user agent used
  • HTTP status code

This data is processed solely for the operation and security of the server. It is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure server operation).
Retention period: Server logs are deleted after a maximum of 30 days.

No cookies, no tracking

This website does not set cookies and does not use any analytics or tracking tools. No user behavior is recorded. A cookie banner is therefore not required.

External links

This website contains a link to the Google Play Store. When this link is accessed, the Google Privacy Policy applies. We have no influence over the data processing by Google.

1. Controller

Benedikt Koßmann
Schaurain 4 1/2
83101 Rohrdorf
Germany
Email: info@stavau.com

2. Principle: your data stays on your device

PillenKompass stores your health data and all entries exclusively locally on your device. There is no user account, no proprietary cloud synchronization, and no analytics or advertising SDK in the app.

An external connection exists only for Plus: when you open the “Plus” screen, buy Plus or restore a purchase – and after a purchase or a purchase attempt that was not cancelled, also when the app starts (duration and details in section 3.2). If you never open this screen and buy nothing, the app does not connect to RevenueCat. Health data is never transmitted.

3. What data is processed?

3.1 Data stored locally on your device

Contraception data
Intake status, contraceptive method, cycle scheme, pack start, self-entered dates (change date, insertion date, check-up date)
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

Symptom data (Plus)
Recorded symptoms, intensity, free-text notes
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

Event log (Plus)
Contraception-related events and notes
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

Bleeding entries
Bleeding, spotting or no bleeding, recorded per calendar day
Legal basis: Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR

How consent is obtained: Consent under Art. 9(2)(a) GDPR is explicitly requested in the app – during onboarding (step 5), when the Plus features Symptom Tracking and Situation Log are opened for the first time, and when a bleeding entry is recorded for the first time. Consent is voluntary; without consent, all core features (reminders, calendar, statistics) remain fully available. You can withdraw consent at any time (Settings → Privacy & Security → Withdraw consent).

App settings
Reminder time, display options, notification texts, app lock (biometrics/device passcode), stock level
Legal basis: Art. 6(1)(b) GDPR

Travel mode data
Home time zone, current time zone
Legal basis: Art. 6(1)(a) GDPR

Subscription status
Plan, expiry date, product ID
Legal basis: Art. 6(1)(b) GDPR

Important: This data generally does not leave your device. It is stored in a local database on your device and is only accessible within the app.

3.2 Plus screen, purchases and subscriptions

The app handles purchases and subscriptions of Plus via the respective app store and the service RevenueCat (RevenueCat Inc., USA). A connection to RevenueCat is made only in these cases:

  • you open the “Plus” screen – also via a locked Plus item – so that prices and offers can be shown and the status of an existing subscription can be checked;
  • you buy Plus or tap “Restore purchases”;
  • you have bought or restored Plus on this device: then the app checks the status of your subscription at every start and every return to the app – while it runs and until 60 days after the end of the last known term, so that renewals, cancellations, payment problems and refunds are recognised;
  • a purchase attempt was not cancelled (e.g. a pending payment, an error during the purchase or the app was closed during the purchase) and no subscription is known yet: then the app likewise checks at every start and every return to the app – until 60 days after this purchase attempt, so that a purchase that may have been concluded can be confirmed or refunded.

If you never open the Plus screen and buy nothing, the app does not connect to RevenueCat. If you have only viewed the Plus screen and bought nothing, the app no longer makes requests from the next start onwards. As long as the app is still open afterwards, the RevenueCat software library built into the app may make further requests, for example when you return to the app.

The following is transmitted during these connections:

  • your IP address (technically unavoidable with any internet connection);
  • a random identifier that is created at the first contact and stored in the app. It contains no name, no email address and no advertising ID;
  • technical details: platform (Android or iOS), operating system version, device model, app version, app identifier, language setting and the country of your app store account;
  • on iOS additionally the identifier that Apple assigns for all apps of the same provider (identifierForVendor);
  • for a purchase or a restore additionally: purchase receipt or receipt token, product ID, subscription period and subscription status.

On Android, after a purchase the RevenueCat software library additionally stores the random identifier in the Block Store of Google Play services, which can be backed up with the backup of your Google account. This allows a purchase to be matched again via “Restore purchases” after a reinstallation or on a new device.

RevenueCat creates one record per installation that had contact. Among other things, it contains when the installation first and last had contact, with which app version, on which platform and in which country. Health data – intakes, cycle, symptoms, events, bleeding entries, notes – is never transmitted. Without an internet connection no request takes place; reminders and entries still work.

Purpose: showing prices and offers, checking the status of an existing subscription, processing the purchase and restoring purchases.
Legal basis: Art. 6(1)(b) GDPR – when you open the Plus screen, as a pre-contractual measure at your request; for a purchase, a restore and an active subscription, to perform and process the subscription contract, and after a subscription has ended or after a purchase attempt that was not cancelled, to process a contract that may have been concluded (confirmation, refund).

RevenueCat processes personal data as a processor for the respective app provider.
Recipients: Apple App Store / Google Play / RevenueCat
Third-country transfer: Where processing takes place in the USA, it is based on appropriate safeguards, in particular Standard Contractual Clauses.

3.3 Data export

You can export your data yourself at any time:

  • JSON backup - app data including bleeding entries, optionally password-encrypted
  • CSV (Plus) - intakes, events, symptoms, bleeding entries, depending on selection
  • PDF (Plus) - formatted report

Exported files are stored locally on your device or shared via system functions. You are responsible for any further processing after export.

4. What data is not collected?

  • No analytics or advertising SDK and no usage analytics in the app
  • No advertising IDs
  • No disclosure of health data to third parties
  • No user account and no registration
  • No proprietary cloud synchronization
  • No proprietary push backend for reminders

5. Permissions

  • Notifications - local reminders within the app
  • Exact alarm - precise local scheduling of reminders
  • Biometrics - optional app lock via device functions
  • Internet - only for the Plus screen, purchases, restoring purchases and the subscription status (see 3.2)
  • Vibration - a noticeable reminder on a silent device
  • Full-screen notification - reminder on the lock screen
  • Autostart - restoring local reminders after device restart

6. Storage period

  • Local app data: until deleted by you or until the app is uninstalled
  • Purchase and subscription data at the respective app store: according to its requirements
  • Records at RevenueCat (even if you have only opened the Plus screen): I delete such records on request; an automatic retention period has not yet been set up.

You can delete data within the app. Uninstalling the app generally removes locally stored data, unless the operating system stores it otherwise.

7. Your rights

Under the GDPR, you have in particular the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future

Since essential health data is stored locally on your device, you can exercise many of these rights directly yourself, for example through correction, export, or deletion within the app.

If you have questions about privacy, contact: info@stavau.com

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

9. Not a medical device

PillenKompass is a reminder and tracking tool. The app does not provide medical advice, diagnoses, risk assessments, or treatment recommendations. The information displayed serves solely for personal organization and documentation.

10. Changes to this privacy policy

This privacy policy may be updated when the app is further developed. The currently published version shall apply.

Version date: October 2026