Privacy

This is a courtesy translation. The German version is legally binding.

Last updated: 22 September 2026

This statement applies to the website handschlag.dev and to the iPhone app Handschlag. The two are treated separately, because they differ a great deal: the website is an ordinary website. The app processes your business data almost entirely on your device.

The most important thing first

Your quotes, customers and business details do not leave your iPhone. There is no account, no registration and no server of ours on which that data is stored. We cannot see your quotes, because they never reach us.

Controller

Part 1: The website

Hosting and server log files

The website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When a page is requested, Vercel processes technically necessary connection data, including your IP address, date and time, the address requested and details of your browser and operating system. That is technically unavoidable for delivering a website.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a secure and functioning site. For the transfer to the USA, the EU Commission’s standard contractual clauses are in place with Vercel.

Fonts

The typeface “Geist” is bundled with Next.js and served from our own server, not loaded from Google Fonts at runtime. Opening the page therefore establishes no connection to Google Fonts.

Audience measurement (Vercel Web Analytics)

We count page views with Vercel Web Analytics. This service sets no cookies and stores nothing on your device; there is no recognition across several websites. What is recorded is the page viewed, the referrer, an approximate origin at country level, and device type and browser. The IP address is used only briefly to derive an anonymous identifier and is not stored.

Because no information is stored on or read from your device in the process, § 25 TDDDG does not apply; the processing rests on Art. 6(1)(f) GDPR, our legitimate interest in knowing which content is read.

Google Analytics and Google Ads

We use Google Analytics 4 and, once an Ads account is linked, Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in Consent Mode v2. The tag may load with storage defaulted to “denied”. Cookies and advertising or analytics identifiers are set only after you agree in the banner. Without consent, storage and ad measurement stay blocked; Google may then receive cookieless pings for modelling only.

After consent we record page views, referrer, coarse technical details, and events such as waitlist signup and App Store clicks. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, revocable at any time via “Cookie settings” in the footer. Google may transfer data to the USA; the EU Commission’s standard contractual clauses are in place for that.

Waitlist (Typeform)

The waitlist is shown only where the app is not yet on the App Store. If you submit the form, Typeform S.L. (Carrer de Bac de Roda 163, 08018 Barcelona, Spain) collects the email address and, if given, your trade, and provides the entry to us. The purpose is a single message once Handschlag is available in your country. The legal basis is your consent under Art. 6(1)(a) GDPR, which you can revoke at any time, informally, at feedback@re-entry.ai.

There is no newsletter. Typeform may use sub-processors; details are in Typeform’s privacy policy. We delete the entry at the latest three months after the app’s launch in Germany and Austria, or immediately after your revocation.

Storage in the browser

If you make a choice in the consent banner, it is stored under the key handschlag.consent in your browser’s local storage, so that you are not asked again on every visit. It is not a cookie and the value is not transmitted.

Part 2: The app

What stays on the device

Business details, customer data, quotes, line items, prices and the event log are stored exclusively in the app’s local database on your iPhone. Nothing is transmitted to us. When the app is deleted, that data is removed with it.

Microphone and speech recognition

The microphone is used only during a dictation. Speech recognition and the conversion into quote line items run with the built-in facilities of iOS on the device. No audio is transmitted and no audio is stored; only the text of the line items produced is stored, locally.

Address search and location

For address entry the app uses Apple’s map service. The search text you enter goes to Apple, as in any maps app. If you tap “Use location”, your position is determined once, immediately converted into an address and then discarded; it is neither stored nor transmitted to us. Apple is responsible for that processing.

Purchases

Subscriptions run entirely through Apple’s in-app purchase. We receive no payment data. The app only reads whether a valid entitlement exists.

Anonymous usage statistics: voluntary, off by default

Under Settings → Statistics you can switch on “Anonymous usage statistics”. The switch is off by default. While it is off, the statistics module is not even started and nothing leaves the device.

If it is on, a filtered copy of the event log that is kept locally anyway is transmitted to Amplitude, Inc. (USA). What is transmitted is exclusively:

Not transmitted: customer names, addresses, service texts, dictations, quote numbers, actual amounts, your IP address, your location, your language and your device model. A user ID is never set, and the cross-app Apple identifier (IDFV) is switched off; what remains is a random identifier that applies only to this installation and disappears with uninstallation.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can switch the setting off again at any time; the transmission ends immediately. For the transfer to the USA, the provider’s standard contractual clauses apply.

Feedback

If you tap “Send feedback” in the app, your email program opens with a prepared message to us. Nothing is sent automatically; you decide what the email says and whether you send it.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can revoke consent you have given at any time with effect for the future.

For data that exists only on your iPhone, you exercise these rights directly yourself: you can change or delete any quote in the app and remove all data along with the app. We have no access to it.

You can also complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us, because our registered seat is in Hesse, is:

Changes

If what is processed changes, this statement is adjusted beforehand. The date at the top shows the current version.