Privacy Policy

1. Who we are

DeviceFlow is developed and operated by Felix Schroeder Ventures. We are the data controller for personal data collected through this website.

2. What data we collect and why

When you sign up for the DeviceFlow beta through the form on this website, we collect:

  • Name — so we can address you personally in correspondence.
  • Email address — to send you the beta invite (Mac app download link and Android test link) and occasional updates about the beta program.

We do not collect any other personal data through this website. The DeviceFlow apps themselves do not transmit any data to us — all communication between the Mac and Android apps happens exclusively on your local network.

3. Legal basis

We process your name and email address on the basis of your explicit consent (Article 6(1)(a) GDPR). You give this consent by ticking the checkbox in the signup form. You can withdraw your consent at any time — see section 6.

4. Where your data is stored

We use the following processors to handle your data:

Vercel Inc.

The website and its form endpoints are hosted on Vercel (Vercel Inc., US). Form submissions are processed by Vercel serverless functions before being forwarded to our Google Sheet. Vercel is covered by Standard Contractual Clauses under Article 46 GDPR. See vercel.com/legal/privacy-policy.

Google Sheets & Gmail (Google LLC)

Submissions are stored in a private Google Sheet, accessible only to us, and a notification email is sent via Gmail. Google LLC is a US-based processor covered by a Data Processing Agreement and Standard Contractual Clauses under Article 46 GDPR.

Paddle (Paddle.com Market Limited)

Payments are processed by Paddle (paddle.com), incorporated in England and Wales. Paddle acts as the Merchant of Record for all transactions and processes billing data (name, email, payment details) on your behalf. To display localised prices, your IP address is forwarded to Paddle's API server-side — it is not stored by us and is used solely for currency and tax localisation. Paddle is GDPR-compliant and uses Standard Contractual Clauses for data transfers. Their privacy policy is available at paddle.com/legal/privacy. Paddle's JavaScript SDK is loaded only on the checkout page and sets cookies strictly necessary for fraud prevention and checkout session management.

We do not share your data with any other third parties, and we do not sell or rent your email address.

5. How long we keep your data

We keep your name and email address for the duration of the beta program or until you request deletion, whichever comes first. When the beta ends, we will delete all beta signup data within 30 days.

6. Your rights

Under GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Portability — receive your data in a machine-readable format.
  • Withdraw consent — withdraw your consent to processing at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, use the contact form — we will respond within 30 days.

7. Cookies and tracking

This website uses Umami, a privacy-focused, open-source analytics tool. Umami does not use cookies, does not track individual users across sessions, and does not share any data with third parties. It collects only anonymised, aggregated page view and event data (such as which pages are visited and which buttons are clicked) to help us understand how the website is used. No personal data is transmitted to Umami. Umami is self-hosted by Umami Software Inc.; their privacy policy is available at umami.is/privacy.

The only cookies set on this site come from Paddle, our payment processor. Paddle's JavaScript SDK is loaded on the checkout page and sets cookies strictly necessary for fraud prevention and checkout session management. Localised prices on the main page are fetched server-side and require no client-side scripts from Paddle.

8. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In Germany: Bundesbeauftragter für den Datenschutz (BfDI).

9. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Beta users will be notified by email if changes affect how their data is processed.