Privacy Policy
Last updated: October 20, 2026
This privacy policy explains which personal data is processed when you use the iOS app “CostRadar” (the “App”) and this website. In short: CostRadar does not require an account, contains no ads, no analytics or tracking tools, and we have no access to the data you enter in the App.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Hilmar HerbelEsswurmstr. 21
81371 München
Germany
Email: feedback@geofency.com
2. Data processing in the App
2.1 Data you enter
The subscriptions, costs, categories, notes and other information you enter in the App are stored locally on your device only. The same applies to App settings such as reminder time, appearance, currency or manually set exchange rates. This data is not transmitted to us; we have no access to it.
2.2 iCloud sync
If you are signed in to iCloud on your device, the App syncs your subscriptions via Apple’s CloudKit service in your private iCloud database so they are available on all your devices. The data is stored by Apple and can only be accessed with your Apple Account – we as the developer cannot see it. To deliver changes to your other devices promptly, Apple may send the App invisible push notifications.
The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Data may be transferred to Apple Inc. in the USA; Apple Inc. is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR (providing the feature you requested). You can turn off syncing at any time by signing out of iCloud or disabling iCloud for CostRadar in iOS Settings. For more information, see Apple’s Privacy Policy.
2.3 Exchange rates
If you enter subscriptions in a foreign currency, the App regularly downloads current reference rates from the Frankfurter service (api.frankfurter.dev), which provides the reference rates published by the European Central Bank. The request contains no data from your subscriptions – only your device’s IP address, which is technically required, is transmitted. If you have no foreign-currency subscriptions, no request is made. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is showing you accurate conversions.
2.4 App search and app icons
When adding a subscription, you can search the App Store for apps to use their name and icon. For this, your search term and your region’s country code are sent to Apple’s iTunes Search API (itunes.apple.com). Selected app icons are loaded from Apple’s servers for display. This technically requires your device’s IP address to be transmitted to Apple. The search only runs when you actively use it. The legal basis is Art. 6(1)(b) GDPR.
2.5 Reminders
Reminders about upcoming renewals are scheduled as local notifications directly on your device. No server is used and no data is transmitted to us. You can revoke the notification permission at any time in iOS Settings.
2.6 In-app purchases
Purchases of CostRadar Pro are handled entirely by Apple’s App Store. We receive no payment data and no information about your identity. The App only checks on your device via Apple’s StoreKit whether a valid purchase exists. The legal basis is Art. 6(1)(b) GDPR. Apple’s Privacy Policy applies.
2.7 Crash reports and statistics from Apple
If you have agreed in iOS Settings to share analytics with app developers, Apple provides us with anonymized crash reports and aggregated usage statistics via App Store Connect. This data cannot be traced back to you. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in iOS Settings under “Privacy & Security” › “Analytics & Improvements”.
2.8 No tracking
The App contains no ads, no third-party analytics, tracking or advertising SDKs, and does not track you across apps or websites owned by other companies.
3. Data processing on this website
3.1 Hosting and server log files
When you visit this website, our hosting provider automatically stores information transmitted by your browser in server log files: IP address, date and time of access, page requested, referrer URL, browser type and operating system. This data is required to deliver the website securely and reliably and is only stored for as long as necessary for this purpose. The legal basis is Art. 6(1)(f) GDPR.
3.2 No cookies, no external content
This website does not set cookies, does not use analytics tools and does not load any content (such as fonts or scripts) from third parties. If you choose a language with the EN/DE switcher, only that choice is stored locally in your browser (local storage) so the site is shown in that language next time; it is not transmitted to us.
4. Contact by email
If you contact us by email, we process your email address and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to the use of the App, otherwise Art. 6(1)(f) GDPR. We delete the data once your request has been fully handled, unless statutory retention obligations apply.
5. Retention and deletion
The data you enter in the App remains stored until you delete it in the App or remove the App. Deleting the App removes the locally stored data. Data stored in iCloud can additionally be deleted in iOS Settings under “[Your Name]” › “iCloud” › “Manage Storage”.
6. Your rights
Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)). Please note that we have no access to the data in the App or in your iCloud – you can view, change and delete it yourself at any time.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence.
7. Changes to this privacy policy
We update this privacy policy when the App, this website or the legal situation changes. The version published here applies.
In case of discrepancies, the German version prevails.