Privacy Policy

Last updated: January 27, 2025

1. Introduction

This Privacy Policy explains how React Technologies GmbH ("we", "us", or "our") collects, uses, and protects your information when you use our EquityRichCashPoor iOS application and our website at appference.com (collectively, the "Services").

We are committed to protecting your privacy. Our Services are designed with a privacy-first approach — your data stays on your device.

2. Data Controller

The data controller responsible for your personal data is:

React Technologies GmbH
Freihamer Str. 5a
82166 Gräfelfing
Germany

Email: [email protected]

3. Data We Collect

iOS Application

Our EquityRichCashPoor app is designed to keep your data on your device. We do not collect, store, or transmit your personal data to our servers.

  • Stripe API Key: If you choose to connect your Stripe account, your read-only API key (restricted to subscription data) is stored securely in Apple's Keychain on your device. This key is used to fetch your MRR data directly from Stripe's servers — we never see or store this key.
  • Financial Calculations: Your MRR data, ARR multiples, and company valuations are calculated entirely on your device and are never transmitted to us.
  • App Settings: Your preferences and settings are stored locally on your device.

Website

Our website is a static site hosted on Cloudflare. We do not use analytics tracking or marketing cookies. Cloudflare may collect technical logs (IP addresses, browser type) for security and performance purposes as part of their hosting service.

4. How We Use Your Data

Since we do not collect personal data from the app, there is no data for us to use. All processing happens locally on your device:

  • Your Stripe API key is used solely to fetch subscription data from Stripe
  • Your MRR and valuation calculations are performed on-device
  • No data is sent to our servers

5. Data Storage and Security

Your Stripe API key is stored in Apple's Keychain, which provides hardware-backed encryption on iOS devices. All other app data is stored in your device's secure storage.

We do not operate servers that store your personal data. The app communicates directly with Stripe's API using your API key.

6. Third-Party Services

Our Services interact with the following third parties:

  • Apple: The app is distributed through the App Store. Apple may collect usage data as described in their privacy policy.
  • Stripe: When you enter your API key, the app makes direct requests to Stripe's API. Your data is subject to Stripe's Privacy Policy.
  • Cloudflare: Our website is hosted on Cloudflare, which may collect technical data for security purposes as described in their Privacy Policy.

7. Cookies

Our website uses only technically necessary cookies provided by Cloudflare for security and performance purposes. We do not use analytics, advertising, or tracking cookies.

8. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of Access: You can request information about your personal data we process.
  • Right to Rectification: You can request correction of inaccurate data.
  • Right to Erasure: You can request deletion of your personal data.
  • Right to Restriction: You can request limited processing of your data.
  • Right to Data Portability: You can request your data in a machine-readable format.
  • Right to Object: You can object to certain types of processing.
  • Right to Lodge a Complaint: You can file a complaint with a supervisory authority. In Germany, you may contact the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Since we do not collect personal data from the app, most of these rights are automatically fulfilled. All your data remains on your device and under your control.

9. Data Retention

All app data is stored on your device and remains there until you delete the app or clear its data. We do not retain any personal data on our servers.

10. Children's Privacy

Our Services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]