Privacy Policy for Klausa
In short
This policy applies to the iOS app Klausa.
- No account required
- Your data stays on your device
- No tracking across other companies' apps or websites
- Recordings and texts are never uploaded
- Only internet connection: an optional model download you start yourself – without your content
- No ads
- No sharing with third parties
Controller
The controller responsible for data processing under the GDPR is:
Jeremiah Stüve
Lomerstraße 69
22047 Hamburg
Germany
+49 162 5844811
business@jeremiah-stueve.com
Data on your device
Whatever you enter in Klausa is stored locally on your iPhone. I have no access to it and it is not transmitted to me.
You can delete the data at any time in the app or by uninstalling the app. If device backups (iCloud or computer) are enabled, the data may be included in them; Apple's terms apply to those.
Microphone, recordings and speech recognition
Klausa only uses the microphone if you allow it and start a recording. The recording is stored as an audio file locally on your device. Files you import (via Files or the share sheet) are also stored only locally.
Speech recognition runs entirely on your device. Audio and text are not sent to me or third parties. Language packs for Apple's speech recognition are downloaded by iOS itself; no recordings or texts are transmitted.
Summaries are created by a language model on your device (Apple Foundation Models). Nothing leaves the device here either. Results are drafts and may contain errors.
The legal basis is providing the feature you asked for (Art. 6(1)(b) GDPR). If you record conversations with other people, you need their consent; recording without permission may be a criminal offence.
You can change microphone access at any time in iOS Settings › Privacy & Security › Microphone. You delete recordings and texts in the app or by uninstalling it.
In-app purchases
Purchases and subscriptions are handled entirely by Apple through the App Store. I never receive payment details, only whether a purchase is valid so the purchased features can be unlocked (Art. 6(1)(b) GDPR).
Optional model download
Only if you start it in the app does Klausa download a Whisper speech recognition model (190–574 MB) from huggingface.co (Hugging Face, Inc., USA). This is the app's only internet connection.
The provider only receives the connection data technically needed (IP address, time, requested file, technical identifier of the iOS networking stack). No recordings, texts or identifiers of yours are transmitted. The provider acts as an independent controller, not as a processor; its privacy policy applies. The legal basis is providing the feature you asked for (Art. 6(1)(b) GDPR). Without this download the app works completely offline.
App Store
When you download Klausa, Apple processes data such as your Apple ID and payment information as an independent controller. Apple also provides me with anonymised statistics (e.g. downloads, crash reports from users who opted to share with developers). Details: Apple's privacy policy.
Contacting me by email
When you email me, I process your email address, your name (if given) and the content of your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where the request concerns the use of an app, otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
My email is stored and processed by checkdomain GmbH (Lübeck, Germany) as a data processor.
I delete your message once your request has been resolved, unless statutory retention obligations apply.
Children
Klausa is not directed at children under 13. I do not knowingly collect data from children.
Your rights
Under the GDPR you have the right to
- access the data stored about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17) and restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent at any time with effect for the future (Art. 7(3))
An informal email to business@jeremiah-stueve.com is enough.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is: The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
Changes
I update this policy when the law or the features change. The version published here always applies.