Privacy Policy
Last updated: July 30, 2026
Overview
This policy explains how Kurcz Software GmbH processes personal data when you use kurczsoftware.com, a Kurcz account, or a Kurcz app. It also explains which app data stays only on your device.
Controller
Kurcz Software GmbH Widmaierstraße 60, 70567 Stuttgart, Germany Email:
What is collected
• Website and waitlist: email address, language, contact submissions, referral-link visits and inviter/invitee relationships, referral qualification history, UTM context, and product interactions such as pages viewed or buttons clicked. • Kurcz account: email address, profile choices, active app/device sessions, and small app data you choose to sync. Daily Widget sync includes subscriptions and progress, notification preferences, interests, and theme choices. • Optional app analytics and diagnostics: a random installation identifier, product interactions, app and OS version, locale, theme, performance, crash, and hang diagnostics. Apps send these to PostHog EU Cloud and Kurcz's first-party Convex analytics only after you opt in; if you sign in they may be linked to your account. • Daily Widget community safety: pack content, creator identity, reports, moderation decisions, and report reasons. Hiding a creator is stored only on your device. • Timezones: your ordered city list and time-zone identifiers are included only in account sync when you sign in; selected cities and search queries are never included in analytics. • llypa: selected apps, Screen Time reports, opening budgets, pickups, challenges, and usage history stay on your device and are never included in analytics. • Steppya: step counts, Health and Motion data, step history, and your exact daily goal stay on your device and are never included in analytics.
Why it's processed (legal basis)
• Waitlist, marketing email, and optional app analytics: your consent (Art. 6(1)(a) GDPR). Withdraw it by unsubscribing or turning analytics off in the app. • Account, sync, purchases, entitlements, and referral rewards: providing the service or promotion you request (Art. 6(1)(b) GDPR). • Site security, payment and referral fraud prevention, and essential operations: Kurcz Software's legitimate interests (Art. 6(1)(f) GDPR).
Processors
Kurcz Software uses Convex (database), Vercel (hosting and web performance), Resend (email), PostHog EU Cloud (optional product analytics), Paddle (web and Mac payments), and Apple (iOS payments). EU regions are selected where offered. Data processing agreements and appropriate transfer safeguards apply.
Cookies
Essential first-party storage keeps sessions, security state, language, and preferences. The site does not use advertising cookies. Native app analytics is controlled by the in-app consent switch.
Retention
Account data is kept while your account exists; use the direct Delete account section at /account#delete-account to permanently delete the account and associated personal data. Referral lineage is removed when either linked account is deleted. Payment providers may retain transaction records under their legal obligations; Kurcz removes its account-linked billing and entitlement data on account deletion except records it must retain by law. Waitlist email-delivery records are deleted within 30 days. After you unsubscribe, we retain your account and the minimum opt-out record needed to honor that choice until account deletion or a deletion request. Analytics and security records are retained only as long as needed for those purposes. Turning analytics off stops collection immediately and deletes unsent PostHog and Convex events queued on the device.
Your rights
You may access, correct, erase, restrict, or port your data, withdraw consent, and object to processing. Delete a Kurcz account directly at /account#delete-account, turn app analytics off in Settings, or email . You may also complain to a data protection authority.