Privacy Policy for the OcheBuddy App and the website ochebuddy.app under the General Data Protection Regulation (GDPR)
OcheBuddy is a fully offline app. No personal data is transmitted to our servers. All scores and statistics are stored exclusively locally on your device. In-app purchases are processed via the Apple App Store – we receive no payment data. To improve stability you can optionally enable a crash reporting service (Sentry, servers in the EU) that collects anonymous technical error data; this is disabled by default and only transmits data after you have explicitly enabled it in the app settings. We use no advertising or tracking services.
We take the protection of your personal data very seriously and treat it confidentially in accordance with applicable data protection laws and this Privacy Policy. This Privacy Policy applies to the OcheBuddy mobile app (hereinafter "App") for iOS, as well as to the website ochebuddy.app (hereinafter "Website"). It explains the nature, purpose and scope of data collection in connection with the use of the App. We note that data transmission over the internet may have security vulnerabilities. Complete protection of data from access by third parties is not possible.
The controller responsible for data processing in connection with this App and Website is:
Andreij Markus Mannhardt
Gustav-Freytag-Str. 9, 75428 Illingen
Germany
E-mail: contact@ochebuddy.app
Website: https://ochebuddy.app
The "controller" is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
For questions about data protection or to exercise your rights, please contact:
E-mail: contact@ochebuddy.app
We typically respond within 5 business days.
Note: As OcheBuddy is operated by a sole developer and no regular automated processing of personal data of more than 20 persons takes place, there is no obligation under § 38 BDSG in conjunction with Art. 37 GDPR to appoint a Data Protection Officer.
Unless otherwise specified in this Privacy Policy: locally stored app data (player data, scores, statistics) remains on your device until you delete it manually or uninstall the App. Personal data received via email contact will be deleted after completion of the request, but no later than after the expiry of statutory limitation periods (generally 3 years from the end of the year in which contact occurred). Where a statutory retention obligation exists, the data will not be deleted before the expiry of the relevant retention period.
Processing of personal data is only permissible where a valid legal basis exists. Where we process data, this is done:
The applicable legal basis is specified at the relevant points in this Privacy Policy.
The App communicates with third-party services (Apple App Store) exclusively via encrypted HTTPS connections (Transport Layer Security, TLS). Locally stored App data is protected by the operating system's built-in device encryption (iOS: AES-256 encryption via Secure Enclave). A separate end-to-end encryption by OcheBuddy is not required for local data, as no data is transmitted to our servers.
We reserve the right to amend these privacy provisions in compliance with applicable law at any time, in particular when the App is updated with new features. The current version is always available at https://ochebuddy.app/en/privacy.html. In the case of material changes affecting your rights, you will be notified via an in-app message.
The GDPR grants data subjects certain rights regarding the processing of their personal data. Since OcheBuddy collects very little personal data, most of these rights are primarily to be exercised against Apple Inc. as controller for the store processes. With regard to data that remains with us (email correspondence), you have the following rights:
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of data processing carried out prior to the withdrawal is not affected by the withdrawal. Withdrawal can be made informally by email to contact@ochebuddy.app.
Where data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you; this also applies to profiling based on those provisions. The legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR). Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The competent supervisory authority for the controller is:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Lautenschlagerstr. 20, 70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de/
The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
You have the right at any time, free of charge, to obtain information about your stored personal data, their origin and recipients, and the purpose of data processing, as well as the right to rectification or erasure of such data. Local App data can be deleted by you at any time within the App under Settings → Delete Data. For data stored in connection with an email contact, please write to contact@ochebuddy.app.
You have the right to request restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:
Where the processing of your personal data has been restricted, such data may – apart from storage – only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, in a structured, commonly used and machine-readable format, and to have it transferred to you or to a third party. Where you request the direct transfer of data to another controller, this will only be done to the extent technically feasible. For local App data: this data is on your device and can be exported directly from the app via the backup function.
OcheBuddy requires the following device permissions to provide its services. The App has been designed to operate with a minimum of device permissions and does not request any unnecessary access rights.
| Permission | Required | Purpose |
|---|---|---|
| Internet access | ✓ Yes | Exclusively for processing in-app purchases via Apple StoreKit. No independent data transmission by OcheBuddy. |
| Audio output | ✓ Yes | For the darts caller feature (text-to-speech output via the system TTS). No audio data is recorded or transmitted. |
| Local storage | ✓ Yes | Storage of player data, scores and statistics exclusively on the device (AsyncStorage/device storage). |
| Camera | ✗ No | Not used by OcheBuddy. |
| Microphone (recording) | ✗ No | Not used by OcheBuddy. TTS output does not require a microphone. |
| Location data | ✗ No | Not used by OcheBuddy. |
| Contacts | ✗ No | Not used by OcheBuddy. |
| Photos / media library | ✗ No | Not used by OcheBuddy. PDF exports are saved in the App's own storage area, not in the photo library. |
| Bluetooth / NFC | ✗ No | Not used by OcheBuddy. |
The legal basis for access to required device functions is the performance of the user agreement for the App pursuant to Art. 6(1)(b) GDPR. On iOS, access rights are requested by the operating system via a permission dialog on first use.
When using OcheBuddy, the following data is stored locally on your device:
This data is stored exclusively locally on your device and never transmitted to our servers. It does not leave your device. OcheBuddy Pro does not require an internet connection for saving statistics.
Legal basis: Art. 6(1)(b) GDPR (contract performance – provision of App features).
Retention period: until manual deletion by you (Settings → Delete Data) or uninstallation of the App.
Note on iCloud Backups: If you have enabled iCloud Backup on your device, locally stored App data may be included in your iCloud backup. This processing is carried out by Apple Inc. and is subject to Apple's privacy policy. OcheBuddy has no influence over this.
OcheBuddy offers two paid in-app purchases:
Both purchases are processed entirely via the app store platform of the respective operating system:
OcheBuddy receives from Apple only a technical purchase confirmation (success/failure of the transaction and a signed purchase receipt for validation). We never receive your payment data (credit card number, bank details, etc.), your full name, or your Apple ID.
Legal basis: Art. 6(1)(b) GDPR (contract performance – processing of the in-app purchase).
Retention period: The purchase confirmation is stored locally on your device to enable permanent unlocking of Pro features. When switching devices, the purchase can be revalidated via Settings → Restore Purchase (communication with Apple servers).
OcheBuddy Pro offers a PDF export of game statistics after the end of a game. The PDF document is generated entirely locally on your device – no game data is transmitted to external servers. The generated PDF is saved in the App's own documents area on your device and can be shared or saved from there. OcheBuddy has no further access to the document after it has been created.
Legal basis: Art. 6(1)(b) GDPR (provision of a Pro feature).
When you contact us by email (e.g. via support@ochebuddy.app or contact@ochebuddy.app), your enquiry including all personal data arising from it (in particular your email address and the content of your message) will be stored and processed for the purpose of handling your request. We do not pass this data on without your consent.
Legal basis: Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract (e.g. support enquiry regarding a purchase); in all other cases Art. 6(1)(f) GDPR (legitimate interest in effectively handling enquiries directed to us).
Retention period: Data you send us will remain with us until you request deletion or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory retention periods remain unaffected.
When our Website is accessed, the web server stores technical connection data (IP address, date and time of access, page accessed, browser and operating system used) in server log files. This data is not merged with other data sources and is automatically deleted by our hosting provider Mittwald after 60 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the Website).
Our Website is hosted by: Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. For details, please refer to Mittwald's privacy policy: https://www.mittwald.de/datenschutz.
The use of Mittwald is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable possible presentation of our Website. We have concluded a Data Processing Agreement (DPA) with Mittwald, which ensures that Mittwald processes the personal data of our Website visitors only in accordance with our instructions and in compliance with the GDPR.
OcheBuddy uses no analytics, tracking or advertising tools whatsoever. No usage statistics, behavioural profiles, device identifiers or other behaviour-related data are collected, stored or transmitted to third parties. The App contains no advertising.
In particular, the following services are not used:
No pseudonymised user profiles are created. The App operates entirely offline and requires no internet connection for any of its core features.
Note on crash reports: For purely technical error diagnostics you can enable the Sentry service. It creates no usage or behavioural profiles, serves solely to keep the App stable, and is disabled by default – data is only transmitted if you explicitly enable the feature in the app settings. See § 6 (3) for details.
OcheBuddy is available on the Apple App Store for iPhone and iPad (iOS 17 or later). The download and installation of the App as well as the processing of in-app purchases take place via the Apple App Store. Apple Inc. processes personal data in accordance with its privacy policy. We have no influence over this processing.
Provider: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
Privacy: https://www.apple.com/legal/privacy/
OcheBuddy was developed using React Native (Meta Platforms, Inc.) and the Expo framework (Expo, Inc., San Francisco, USA). In an installed production version of the App (as available on the App Store), these frameworks do not transmit any telemetry or usage data to the developers of these frameworks. React Native and Expo are pure development frameworks; the published App runs only the compiled runtime libraries, which carry out no independent data collection.
To identify and fix technical errors, we offer the optional crash reporting service Sentry within the App. Only if you have enabled the feature in the app settings and a crash or technical error occurs, anonymous diagnostic data is collected and transmitted: error/stack trace information, app version, operating system version, device model, and a limited event trail (up to 50 so-called breadcrumbs) of the actions immediately preceding the event. When the feature is enabled, a limited amount of performance data is also collected as a sample (approximately 20%). No cross-device session or usage tracking takes place.
No user identifier, advertising ID or personal profile data is transmitted. The storage of IP addresses is disabled in the Sentry project settings. Processing takes place in Sentry's EU data region (data centre located within the European Union).
The transmission of crash and error reports is disabled by default. You can enable it in the App under Settings → Privacy → "Send crash reports" and disable it again at any time. As long as this switch is off (the default state), no diagnostic data leaves your device.
Provider: Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Privacy information: https://sentry.io/privacy/
Legal basis: Art. 6(1)(a) GDPR (your consent). You give this consent by enabling the switch described above; the feature is switched off by default. You can withdraw your consent at any time with effect for the future by switching it off again. The lawfulness of processing carried out on the basis of consent until withdrawal remains unaffected.
We have concluded a Data Processing Agreement (DPA) with Sentry pursuant to Art. 28 GDPR. Where processing takes place by the US-based provider, it is safeguarded by the EU Standard Contractual Clauses (SCC) incorporated into the DPA.
The fonts used on the Website are installed locally. No connection is established with Google servers when accessing the Website. For more information about Google Fonts, see https://developers.google.com/fonts/faq.
The OcheBuddy source code contains technical preparations for an optional cloud synchronisation feature, which in future will allow users to synchronise their game statistics across devices. This feature is based on the Supabase platform (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992; European data processing: Supabase GmbH, Germany). At present, this feature is completely disabled – no data is transmitted to Supabase servers.
Should cloud synchronisation be activated in a future version of the App, the following will apply:
Version of this Privacy Policy:
The current version is always available at https://ochebuddy.app/en/privacy.html.