Privacy Policy

Hosting & Server Log Files

The website is hosted by Vercel Inc. (USA). When the pages are accessed, technically necessary access data is processed automatically (including IP address, date and time, the page accessed, browser type and operating system) to ensure secure and stable operation. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). Any associated transfer to the USA takes place on the basis of appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses).

Newsletter Sign-up

When you sign up for our newsletter, we process your email address in order to send you occasional updates on products, talks and innovation. Sign-up takes place via thedouble opt-in procedure: you first receive an email in which you confirm your sign-up.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time — via the unsubscribe link in every newsletter email or by sending us a message. Your data is stored until you withdraw your consent.

Dispatch and management are handled by our processor EmailOctopus(Octopus Group Ltd, United Kingdom). To protect the sign-up form from automated misuse (spam), we use Google reCAPTCHA (Google Ireland Ltd / Google LLC, USA); the legal basis is our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR).

Reach Measurement (Vercel Web Analytics)

To improve our offering, we record usage of the website in aggregated form usingVercel Web Analytics (Vercel Inc., USA). This service iscookieless, uses no persistent identifiers, does not track you across multiple websites and does not create personal profiles. Only anonymised, aggregated metrics are processed, such as page views, referrers and approximate region of origin. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6(1)(f) GDPR); any transfer to the USA is based on appropriate safeguards (EU-US Data Privacy Framework / standard contractual clauses).

Beyond this — apart from the newsletter form — we do not use any marketing or tracking cookies.

Data Collection and Processing

The “DinBrudi” app processes data exclusively to provide you with the offered features. For the processing of your voice recordings and texts, only the OpenAI API is used. The legal basis is the provision of the features you have requested (Art. 6(1)(b) GDPR).

Purpose of Data Processing

The data is processed in order to:

• transcribe conversations,
• generate to-dos,
• create conversation summaries,
• and make the results available to you as a user for export.

Processing via the OpenAI API

To provide these features, your voice recordings and texts are transmitted via an encrypted connection to the OpenAI API (OpenAI, L.L.C., USA). OpenAI processes this data on our behalf exclusively to provide the feature and, in accordance with its terms, does not use API data to train its models. OpenAI may store the data briefly to detect misuse. The transfer to the USA is based on appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses). No further disclosure to third parties takes place.

Data Storage

DinBrudi does not store any data permanently on its own servers. All data is only processed temporarily and stored locally on your device. As soon as processing is complete, the audio file is automatically deleted, and only the transcript, the summary and the to-dos remain locally on your device — unless you actively export them.

We do not back up the data anywhere. If the app does not work for any reason or data loss occurs – e.g. due to technical problems, crashes or other unforeseeable events –, we accept no liability for the loss of your data. We recommend that you regularly export important results in order to back them up elsewhere.

Telemetry Data and App Improvement

In order to continuously improve the “DinBrudi” app, we evaluate anonymous telemetry data. This includes information such as usage behaviour (e.g. which features are used and how often), technical data (e.g. app version, device type, operating system) and crash reports.

The telemetry data contains no personal data or content from your recordings, transcripts or summaries. Collection takes place via Apple's app analytics and only if you have consented to this at the operating system level (iOS setting “Share with App Developers”). The data is anonymised and is used exclusively to improve the stability, usability and performance of the app. You can withdraw this sharing at any time in your iOS settings or delete the app.

Security

We use appropriate technical measures to protect your data during processing. Communication between the app and the OpenAI API takes place via encrypted connections.

Your Rights

You have the statutory rights to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent you have given (e.g. to the newsletter) at any time with effect for the future.

Note on DinBrudi: Since the app stores no data on external servers and all content remains locally on your device (except during the temporary processing by the OpenAI API), we have no access to this data. You can view, edit or delete it directly in the app; editing or deletion by us is not possible due to a lack of access. You can stop using the app at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority — in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority responsible for you.

Contact

If you have any questions about data processing or about exercising your rights, you can contact us at any time:
General: bedo@hmz.swiss
DinBrudi app: dinbrudi@hmz.swiss

Changes to This Privacy Policy

This privacy policy may be amended from time to time to meet legal requirements or changes to the website and app. We recommend that you review it regularly.