App Privacy
Learn how Iridium Works GmbH collects, uses, and protects your personal data in their mobile Apps in accordance with the GDPR and applicable data protection laws.
App Privacy Policy
Last Modified: February 16, 2026
Effective Date: February 16, 2026
This privacy policy ("Policy") describes how Iridium Works GmbH ("we", "our", or "us"), located at Moselweißer Straße 4, 56073 Koblenz, Germany, processes your personal data when you use our iOS application "ti-trate" (the "App"). As the controller within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR), this Policy applies when you use ti-trate in your personal capacity.
ti-trate is a habit-tracking app that helps you monitor and gradually reduce unwanted habits. All habit data, incident logs, and analytics are stored exclusively on your local device and are never transmitted to our servers or any third party.
1. Controller
Iridium Works GmbH
Moselweißer Straße 4
56073 Koblenz, Germany
Email: info@iridium-works.com
2. Information We Collect
2.1 Information You Provide via Apple Sign-In
When you sign in to ti-trate using "Sign in with Apple", the following data may be shared with us by Apple, depending on your choices:
- First name (editable by you before sharing)
- Last name (editable by you before sharing)
- Email address (you may choose to share your real email address or use Apple's Hide My Email relay service, which generates a unique, random address that forwards to your personal email)
- A unique, app-specific user identifier provided by Apple
Legal basis: Art. 6(1)(b) GDPR – the processing is necessary for the performance of the contract (provision of the App and your user account).
Recipient: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA, acts as a processor for the authentication service.
International data transfer: Apple Inc. is based in the USA. The data transfer is carried out on the basis of the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR, under which Apple is certified. For further information, see: https://www.apple.com/legal/privacy/
2.2 Locally Stored Data
All habit-tracking data that you create within ti-trate – including incident logs, heatmaps, analytics, goals, and custom configurations – is stored exclusively on your iOS device. This data is not transmitted to us, to Apple, or to any third party. We have no access to this data at any time.
Since this data does not leave your device, it does not constitute processing by us within the meaning of the GDPR. You are solely responsible for the security of your device and for creating backups (e.g., via iCloud, which is governed by Apple's privacy policy).
2.3 Automatically Collected Information
We do not collect any analytics, telemetry, or usage data from within the App. We do not use any tracking tools, advertising SDKs, or third-party analytics services.
Apple may independently collect certain data related to App Store downloads, crash logs, and usage statistics if you have opted into sharing this information with app developers in your iOS settings (Settings > Privacy & Security > Analytics & Improvements). This data collection is governed by Apple's privacy policy and is not within our control.
3. How We Use Your Information
We use the personal data collected via Apple Sign-In exclusively for the following purposes:
- Account management: To create and maintain your user account within the App.
- Communication: To contact you regarding important service-related matters (e.g., security notifications, changes to terms of service) if necessary.
We do not use your personal data for marketing, advertising, profiling, or automated decision-making.
4. Cookies and Similar Technologies
ti-trate is a native iOS application and does not use cookies. The App uses only the technical storage mechanisms provided by iOS (such as the Keychain for authentication tokens), which are strictly necessary for the operation of the App.
Legal basis: § 25(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) – the storage of and access to information on your device is strictly necessary for the provision of the service.
5. Sharing Your Information
We do not sell, rent, or share your personal data with third parties, except:
- Apple Inc.: As described in Section 2.1, Apple processes authentication data as part of the Sign in with Apple service.
- Legal obligations: We may disclose personal data if required by law, court order, or to comply with a legal obligation pursuant to Art. 6(1)(c) GDPR.
- Corporate restructuring: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity in compliance with applicable data protection law.
6. Data Storage and Security
Account data (Apple Sign-In): Your authentication data is processed within Apple's infrastructure, which operates servers within the European Union as well as in the USA. The transfer to the USA is covered by the EU-U.S. Data Privacy Framework (see Section 2.1).
Habit data: All habit-tracking data remains exclusively on your local iOS device. We do not operate any servers that store your habit data.
We implement appropriate technical and organizational measures to protect the limited personal data we process. However, no method of electronic transmission or storage is 100% secure.
7. Retention and Erasure
Your account data is retained for as long as you maintain an active ti-trate account. If you delete your account or uninstall the App, your locally stored data is removed from your device. To request deletion of any account data processed by us, please contact us at the address provided below.
Legal basis for retention: Art. 17 GDPR. Data will be erased upon request unless retention is required by statutory obligations (e.g., tax or commercial law retention periods under §§ 147 AO, 257 HGB).
8. Your Rights Under the GDPR
As a data subject, you have the following rights under the GDPR:
- Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy of that data.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, subject to statutory retention obligations.
- Right to restriction of processing (Art. 18 GDPR): You may request the restriction of processing under certain conditions.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR): You may object to the processing of your personal data for reasons relating to your particular situation.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
- Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The competent authority for Iridium Works GmbH is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP).
9. Children's Privacy
ti-trate is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such data promptly. If you believe that a child under 16 has provided us with personal data, please contact us immediately.
10. Changes to This Policy
We may update this Policy to reflect changes to our data processing practices or legal requirements. Material changes will be communicated to you via email or through a notice within the App prior to the change becoming effective. The date of the latest revision is indicated at the top of this document. Continued use of the App after the effective date of a revised Policy constitutes your acknowledgment of the changes.
11. Contact
If you have any questions about this Policy, wish to exercise your data subject rights, or have concerns about our privacy practices, please contact us at:
Iridium Works GmbH
Moselweißer Straße 4
56073 Koblenz, Germany
Email: info@iridium-works.com
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.
