English translation provided for convenience. The legally binding version is the German privacy policy.
Last updated
October 2026
Controller
KimaraCode - Güven GökdemirGebäude P-H-502
Leopoldstr. 2-8
32051 Herford
Germany
Contact
Phone: +49 15678 309509
Email: support@kimaracode.com
Overview
This is a static website for KimaraCode, its products, and app support pages. It has no user accounts, no forms, no newsletter, and no payment functions. No advertising or social media tracking services are used.
Accessing the website
When you access this website, technically necessary access data are processed so that the page can be delivered, secured, and analyzed in case of errors. This may include in particular IP address, date and time of access, requested URL, referrer, browser and operating system information, HTTP status, transferred data volume and routing- and security-related technical information.
The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient operation of the website.
Hosting and CDN
This website is delivered via Cloudflare Pages and Cloudflare services for DNS, SSL, and CDN. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Cloudflare processes access data of website visitors, in particular for delivering the website, securing data traffic and detecting technical disruptions or abusive access.
Cloudflare Network Error Logging headers may be delivered for this website. Supporting browsers may send technical error reports to Cloudflare when network errors occur, for example information about the affected URL, time, error type, protocol and connection data. The headers may currently remain valid for up to 7 days.
Cloudflare may process data outside the European Union. Where required, transfers are based on the EU-US Data Privacy Framework where the recipient is certified for it, and additionally on EU Standard Contractual Clauses. The applicable safeguards can be reviewed in the Cloudflare Data Processing Addendum.
Further information: Cloudflare Privacy Policy (opens in a new tab) and Cloudflare Data Processing Addendum (opens in a new tab).
Traffic statistics
We do not use an analytics script, tracking pixel or similar technology on this website. Cloudflare creates aggregated traffic statistics on the server side from the access data it already processes when delivering the website (see “Hosting and CDN”), for example the number of requests, transferred data volume, HTTP status codes and the countries requests come from. No script is loaded in your browser for this, and nothing is stored on or read from your device.
We only see these statistics in aggregated form and use them to monitor the stability, security and reach of the website. The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient operation of the website.
Preferences (LocalStorage)
To restore your choices on subsequent visits, we store two technically necessary entries in your browser’s LocalStorage:
lang: your language preference (deoren), set when you switch via the EN/DE toggle.kc-theme: your theme preference (lightordark), set when you switch via the appearance toggle in the header.
No personal data is processed and no data is transmitted to a server. The legal basis is § 25 (2) no. 2 TDDDG (strictly necessary for the telemedia service you explicitly requested). You can delete the entries at any time via your browser settings.
Contacting us
If you contact us by email or telephone, we process the data you provide, such as name, email address, telephone number, message content, and technical communication data. The purpose is to handle your inquiry.
The legal basis is Art. 6 (1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1)(f) GDPR. Our legitimate interest lies in answering inquiries and conducting communication in a traceable manner.
For email communication we use mailbox.org. The provider is Heinlein Hosting GmbH, Schwedter Straße 8/9B, 10119 Berlin, Germany. Further information: mailbox.org Data Protection (opens in a new tab).
Voluntary Android test
If you email us to join the closed Android test for Haushaltsbuch, we process only the email address of your Google Play Account, your confirmation that you are at least 18 years old, and your test-related communications. We use these data to invite you, manage participation, and respond to messages about the test.
The legal basis is your consent under Art. 6 (1)(a) GDPR. You may withdraw your consent and leave the test at any time by email. This does not affect the lawfulness of processing before withdrawal.
To send the invitation, we add the email address to a private tester list in Google Play Console. Google processes this detail as the provider of Google Play. For users in the European Economic Area, Google services are generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: Google Privacy Policy (opens in a new tab).
Participation is voluntary. Without the Google Play email address and confirmation that you are at least 18, we cannot send an invitation. We remove the email address from the tester list when you leave or the list is no longer needed. The retention period described below applies to email correspondence.
Retention period
We store personal data only for as long as is necessary for the respective purpose.
Simple contact inquiries are deleted once they have been dealt with and no further retention is required, usually no later than 12 months after the last communication. If a message becomes business or tax-relevant correspondence, we store it according to statutory retention obligations, usually for 6 years; accounting records may usually have to be retained for 8 years.
We do not operate our own web server with our own server log files. Access data and security logs are processed by Cloudflare according to Cloudflare’s product-specific retention periods and the selected account settings. We use such data only for technical review, security and error analysis.
Recipients
Personal data are only passed on to service providers insofar as this is necessary for the operation of the website or the handling of your inquiry. Beyond this, transfer may occur if we are legally obliged to do so or need to assert, exercise or defend legal claims.
Required data
The processing of technical access data is necessary so that the website can be accessed and delivered securely. Contacting us by email or telephone is voluntary. If you do not provide the information required to handle your inquiry, we may not be able to answer it, or may only be able to answer it in a limited way.
Automated decisions
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
Your rights
Under the GDPR, you have in particular the right to information, rectification, erasure, restriction of processing, data portability, and to object to processing based on Art. 6 (1)(f) GDPR. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, a message to support@kimaracode.com is sufficient.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2-4, 40213 Düsseldorf, Email: poststelle@ldi.nrw.de, Website: https://www.ldi.nrw.de/ (opens in a new tab).
Changes
We adapt this privacy policy when the website, services used or legal requirements change.