Privacy Policy

Last updated: 14 October 2026 · Deutsche Fassung ↓

This policy explains how Deutschtec GmbH (Am Fuchsbau 13, 15345 Petershagen/Eggersdorf, Germany) processes personal data when you use Deutschtec. We are the controller under the GDPR.

1. Data we process

• Account data: your email and authentication identifiers.
• Content: the questions you submit, attachments/voice you provide, and the answers generated.
• Billing data: credit purchases and balances (card data is handled by our payment processor, not stored by us).
• Technical data: usage logs needed to run and secure the service.
• App usage data (iOS and Android apps): which screens you open and which features you use (for example starting or repeating a generation, opening History, choosing a model), sign-in and purchase outcomes, app version, operating system and device model, approximate region derived from the IP address, and a random app-instance identifier generated by Google Firebase. We do not send the text of your questions, files, or your email address to Google Analytics, and we do not use the advertising identifier.

2. Why and on what legal basis

We process data to provide the service (Art. 6(1)(b) GDPR, contract), to keep it secure and prevent abuse (Art. 6(1)(f), legitimate interests), and to comply with legal obligations such as tax (Art. 6(1)(c)). App usage measurement with Google Analytics for Firebase and the Firebase configuration service rests on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future.

With a separate choice in the iOS and Android apps, Meta Platforms Ireland Limited can receive app events, such as screen views, sign-ups, feature use and purchase outcomes, to measure Facebook and Instagram campaigns. We do not send chat content, prompts, files, email addresses, asset IDs or workspace IDs to Meta. Automatic app event logging and advertising ID collection are disabled. This measurement relies on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); you can withdraw it in the app’s Settings. Declining does not limit the service.

3. AI processing & sub-processors

To answer your question we transmit your prompt to third-party AI and infrastructure providers, which may include: Amazon Web Services (hosting and storage, Frankfurt), Runware (our standard model, used for the free Auto answer), OpenRouter and Cerebras (AI models), OpenAI and Groq (speech-to-text and embeddings), media-generation providers such as Hypereal and fal.ai (when you request images, video, or audio), Kie.ai (music generation with Suno only), Exa and Jina (web search and result ranking, when a question needs current sources), Composio (only when you connect an app) and E2B (only when code is executed), Original Pictures (provenance marking of generated images), Langfuse (request diagnostics and cost tracing), Stripe (web payments), Apple App Store and Google Play (in-app purchases in the mobile apps), RevenueCat, Inc. (processing and status of those in-app purchases and subscriptions, linked to a random account identifier, not your email), Sentry (error diagnostics, EU region), Google Ireland Limited (Google Analytics for Firebase, to understand how the mobile apps are used, and Firebase Remote Config, to deliver settings such as update notices to the apps), and Cloudflare (delivery and security). With your consent, our marketing website also uses Google Tag Manager, Google Analytics 4, the Meta Pixel and Google Ads conversion tracking (see section 8). We do not use your prompts or answers to train our own models, and we use providers under terms intended to prevent training on your content where available.

4. Where data is stored

Our core infrastructure runs in the EU (AWS Frankfurt, eu-central-1). Some sub-processors may process data outside the EU under appropriate safeguards (e.g. EU Standard Contractual Clauses). This includes Google, which may process Firebase data in the United States and other countries.

5. Retention

Conversation history is retained while your account is active so you can revisit it. You can delete individual conversations, your stored memories, or all of your data at any time from the app’s Settings, and deleting your account removes your content. Billing records are kept as long as required by law (e.g. tax retention periods). Google Analytics event data is kept for at most 14 months and is then deleted automatically.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You can export or delete your data from the app’s Settings, or contact us. You may also lodge a complaint with a supervisory authority.

7. Security

We use encryption in transit, access controls, and EU hosting. No method is perfectly secure, but we take reasonable measures to protect your data.

8. Cookies & local storage

By default we use only essential, first-party cookies/local storage, for example, to keep you signed in and to remember your cookie choice. No consent is required for these.

Your cookie choice is stored in a first-party cookie (dt_consent) set for .deutschtec.ai, so that one decision applies to both the website and the web app. We also keep a record of the choice itself: the categories you selected, the version of this notice they applied to, the time, and a salted, irreversible hash of your IP address (never the address itself). We keep that record because we must be able to demonstrate that consent was given (Art. 7(1) GDPR); it is not used to identify or track you.

We group cookies into three categories:

• Strictly necessary (always active, no consent required, § 25(2) TDDDG): keeping you signed in, security, and remembering your cookie choice. This also includes the dt_ref cookie described below.
• Analytics (consent required): Google Analytics 4 via the Firebase SDK, provided by Google Ireland Limited. Purpose: to understand which pages are used and where visitors drop off. We collect pseudonymous usage data (pages viewed, clicks, device, browser, approximate location from the truncated IP address). Cookies: _ga, _ga_*, kept for up to 2 years; event data is retained for 14 months. If you decline, none of this is loaded.
• Marketing (consent required): the Meta Pixel (Meta Platforms Ireland Limited) and Google Ads conversion tracking and remarketing (Google Ireland Limited), both via Google Tag Manager, which is loaded only with this consent. Purpose: to measure whether our ads lead to visits, sign-ups or app installs, and to show our ads again to people who visited our website, on Facebook, Instagram and the Google ad network. We process online identifiers, page views and events such as sign-up or purchase. For collection through the Meta Pixel we are joint controllers with Meta (Art. 26 GDPR); the agreement is at facebook.com/legal/controller_addendum. Cookies: _fbp (90 days), _gcl_au (90 days). If you decline, none of this is loaded.

The legal basis for analytics and marketing is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Consent is voluntary; you can use the website fully without it. You can withdraw or change it at any time, with effect for the future, via the Cookie settings link in the footer.

Google and Meta may process data in the USA. Both are certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023); standard contractual clauses apply in addition. See Google’s privacy policy and Meta’s privacy policy.

All scripts, fonts and libraries used by this website are served from our own servers. No third-party host receives a request from your browser before you have consented.

9. Referral links

If you open an invitation link such as deutschtec.ai/r/EXAMPLE, we record that the link was opened so that the person who invited you can be credited. This is strictly necessary to provide the referral you explicitly requested by following the link (§ 25(2) TDDDG), and it is therefore not part of the analytics consent above.

We store: the referral code, the time, the campaign parameters contained in the link, and salted, irreversible hashes of your IP address and browser user-agent. We never store your IP address itself, and the hashes cannot be reversed back to it. They are used only to detect abuse of the referral programme (for example, many fake sign-ups from one origin). We also set a first-party cookie (dt_ref) that remembers the referral code until you sign up, or for 30 days, whichever comes first. It is not used for advertising and is not shared with anyone.

If you create an account, the record that you were referred is kept for as long as your account exists, because it determines a reward. See the Referral Programme Terms.

10. Contact

Privacy requests (access, rectification, erasure, portability, objection): info@deutschtec.ai. Company details in our Impressum.