Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for this website and the SimPosture apps is:

No data protection officer is appointed, none being required by law.

2. Principle: processing on your device

SimPosture is built so that your content never leaves your device. Photos you take or select, and the posture analysis computed from them, are processed locally and nowhere else. There is no user account, no sign-up and no server that images or measurements would be transmitted to.

Personal data does arise when you visit this website — that is technically unavoidable and described below.

3. Visiting the website (server log files)

This website is hosted on GitHub Pages. When you open it, your browser transmits technically necessary data to the host's servers, where it is stored in log files:

• IP address of the requesting device
• date and time of access
• page or file requested
• volume of data transferred and the status of the request
• browser type, browser version and operating system
• the previously visited page, where applicable (referrer)

Purpose: delivering the website and keeping its operation stable and secure.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in providing the service securely and free of technical faults.

Recipients and transfer to a third country: the host is GitHub, Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA, a company based in the United States. The data named above is therefore transferred to a third country. GitHub is certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision of 10 July 2023 and, in addition, on standard contractual clauses. For details of GitHub's processing see the GitHub Privacy Statement.

Retention: the host alone decides how long the data is stored. This website is operated as a purely static offering without a server of our own; the controller can neither access the log files nor configure their retention, and does not evaluate them. The GitHub Privacy Statement linked above therefore governs.

4. Using the web app

The application available at simposture.com/app runs entirely in your device's browser.

• On the first visit the program files are loaded from the host (see section 3). After that no connection is required; the app works offline.
• Photos are processed in the browser and are not uploaded.
• A service worker stores the program files in your browser's cache so the app is available offline. No personal data is stored in the process.
• Your browser's local storage (localStorage) holds technical settings only, such as your choice of language and theme. This information stays on your device and is not transmitted.
• Retention: cache and settings remain on your device until you clear the site data in your browser. Since neither ever leaves your device, there is nothing for the controller to delete.
• No cookies are set for analytics or advertising.

5. Using the Android and iOS apps

The mobile apps process photos and analysis results exclusively on your device. Nothing is transmitted to the controller or to third parties.

• Camera access: the app asks for the camera permission in order to take a picture of your seating position. The picture is evaluated locally. You can revoke the permission at any time in your device's system settings.
• Photo library access: only when you start it, and separately in each direction. If you pick an existing image, the system handles the selection and the app receives only the image you picked — it has no access to the rest of your library. If you save a rating, the app puts the generated image there; on iOS it asks for a permission that allows adding only, never reading. You can revoke it at any time in your device's system settings.
• Local storage: settings and — where you create them — your own profiles are stored locally on the device and are removed when you uninstall the app.

Obtaining the app from the stores: if you download the app from the Google Play Store or the Apple App Store, the respective operators (Google Ireland Limited and Apple Distribution International Ltd.) process data on their own responsibility as part of the download. The controller has no influence on that processing; the store operators' privacy notices apply.

6. No tracking, no analytics services

SimPosture uses no analytics, tracking, advertising or crash-reporting services, neither on the website nor in the apps. No usage profiles are created and no data is passed to third parties. No external fonts or other third-party content are loaded.

7. Contacting us

If you contact us by e-mail, your details are processed in order to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering) or Art. 6(1)(b) GDPR where the enquiry is directed at a contract. The data is deleted once the enquiry has been dealt with conclusively and no statutory retention periods apply.

8. Your rights

You have the following rights vis-à-vis the controller:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to the address given in section 1 is enough to exercise them.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for the controller is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart (baden-wuerttemberg.datenschutz.de).

10. Changes to this policy

This privacy policy will be adjusted when changes to SimPosture or to the legal framework make it necessary. The version available on this page at the time applies.

11. Governing version

This privacy policy is available in German and English — use the language switch at the foot of the page. The German version is legally binding; in case of divergence, it prevails.