Legal

Privacy Policy — KarmaBoost

1. Controller

The controller responsible under the EU General Data Protection Regulation (GDPR) is:

Marco Bosse — HIVVEN
Ahornring 69
15749 Mittenwalde
Germany

Email: support@karmaboost.com
Web: https://karmaboost.com/

2. Overview and Principle of Data Minimisation

KarmaBoost follows the principle of data minimisation. The app is intended to work without user accounts, advertising, tracking, profiling, public user profiles, rankings, or social features.

The app does not sell personal data. It does not create a public karma profile. Your entries are intended to remain private and local to your device unless you actively choose to contact us.

3. Data Stored Locally on the Device

KarmaBoost stores the data required for the app experience locally on your device. This may include:

• karma entries about moments you gave or received;
• selected direction, category, effort value, impact value, date and time;
• optional notes entered by you;
• your visual karma cosmos and related app state;
• language, display, onboarding, and app settings.

These data are stored on your device and are deleted when the app is uninstalled, unless the operating system keeps backups according to your device or Google account settings.

4. No Analytics, Ads, or Tracking Services

KarmaBoost does not use analytics or advertising services. In particular, the app uses none of the following:

• no Firebase Analytics, Google Analytics, or comparable analytics tool;
• no advertising networks and no advertising identifiers;
• no third-party SDKs for user analytics or profiling;
• no cross-app tracking;
• no public rankings, scoreboards, or social profile tracking.

5. Website and Server Log Data

When you visit this website, technically unavoidable data may be processed by the web server at the moment of the HTTP request. This may include:

• IP address of the accessing device;
• date and time of the request;
• user agent, browser, operating system, and device information transmitted by your browser;
• requested URL, referrer URL, amount of data transferred, and HTTP status code.

Purpose: delivering the website, ensuring technical operation, and protecting the server against abuse.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in providing a technically functional and secure website.

Hosting provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstrasse 68, 02742 Friedersdorf, Germany. Server infrastructure is operated in Germany. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

6. Contact by Email

If you contact us by email, we process the information you provide in order to handle and answer your request. This includes your email address, message content, technical email metadata, and any information voluntarily included by you.

Purpose: responding to your request, handling support cases, and improving the app.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in handling support and user requests. If you explicitly ask us to contact you or provide information voluntarily, Art. 6(1)(a) GDPR may also apply.

Storage period: Emails are retained until the request has been processed, but no longer than six months after receipt unless statutory retention obligations apply.

7. Google Play and App Store Processing

If you install, update, review, or rate KarmaBoost through Google Play or another app store, the respective platform provider processes data under its own responsibility. We do not receive personal data from private app store usage beyond information made available to developers by the platform in aggregated or technically necessary form.

8. App Permissions

KarmaBoost requests only permissions required for its app functions. In particular, the app is not designed to request access to your location, contacts, photos, microphone, or camera.

If future versions add functions that require additional permissions, this Privacy Policy will be updated before or together with the release of those functions.

9. Children's Privacy

KarmaBoost is not designed to knowingly collect personal data from children. The app requires no user account and no public profile. Users should not enter real names, addresses, contact details, or other sensitive personal information into notes.

If you are a parent or guardian and believe that a child has provided us with personal data by email or another contact channel, please contact us at the address given above. We will delete the relevant data without undue delay unless statutory retention obligations apply.

10. Rights of Data Subjects

To the extent that personal data are processed, you have the following rights under the GDPR:

• right of access under Art. 15 GDPR;
• right to rectification under Art. 16 GDPR;
• right to erasure under Art. 17 GDPR;
• right to restriction of processing under Art. 18 GDPR;
• right to data portability under Art. 20 GDPR, where applicable;
• right to object to processing based on legitimate interests under Art. 21 GDPR;
• right to withdraw consent with effect for the future under Art. 7(3) GDPR.

To exercise these rights, an informal message to support@karmaboost.com is sufficient.

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The competent supervisory authority for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany

12. Changes to This Privacy Policy

This Privacy Policy may be updated if the app, website, hosting setup, app permissions, or legal requirements change. The current version is always available on this website.