Privacy Policy

Last updated: October 2026

1. Data Controller

Michael Welzel
Dorfstraße 26-28
09114 Chemnitz, Germany
Email: info@kreativorgan.de

2. Overview

Rechnung Direkt is an invoicing application for Mac, iPad and iPhone. The app does not require an account, and your business data never resides on our servers. We only process personal data ourselves in the cases described in this policy: when you send feedback from the app (section 4), when you visit this website or download the demo version (sections 6 and 7), and when you write to us (section 8).

3. Your Data in the App

3.1 Storage on Your Device

All data you enter in Rechnung Direkt (invoices, quotes, customers, items, expenses with receipts and suppliers, as well as bank details such as IBANs and SEPA direct debit mandates) is stored locally on your device. We have no access to this data.

3.2 iCloud Synchronization

If you have iCloud enabled on your device, Rechnung Direkt uses Apple CloudKit to sync your data between your own devices. The assignment of document numbers across your devices also runs through it. The data is stored in your private iCloud area, encrypted in transit and at rest, and we have no access to it at any time. If you enable Apple's Advanced Data Protection for iCloud, your data is additionally end-to-end encrypted, so that not even Apple can read it. For more information, please refer to Apple's Privacy Policy.

3.3 Camera, Text Recognition and App Lock

The app only uses the camera when you scan a receipt. Text recognition on receipts and reading incoming e-invoices take place entirely on your device. For the app lock, the app uses Face ID, Touch ID or your device passcode through Apple's interface. The app only learns whether unlocking succeeded and never receives biometric data.

3.4 Crash Reports via Apple

If you have agreed in your device's privacy settings to share analytics with app developers, Apple provides us with crash reports and usage statistics that are not linked to you. The legal basis is your consent given to Apple (Art. 6(1)(a) GDPR). You can change this setting at any time under "Analytics & Improvements".

4. Feedback & Wishes (App and Demo Version)

In the "Feedback & Wishes" area you can submit wishes, vote for other users' wishes and report bugs. For this purpose we operate our own server in Germany (feedback.rechnungdirekt.com). No other providers are involved. Using this area is voluntary. As long as you do not open it, the app does not transmit anything to this server.

The following data is processed:

  • Random identifier: When you first open the area, the app creates a random identifier and stores it in your device's keychain. It is transmitted whenever the list is loaded and when you submit or vote, so that you can see your own entries and votes and misuse can be limited. It has no connection to your Apple ID or to your business data.
  • Your entries: title and description of your wishes and bug reports, and your votes.
  • Email address (optional): only if you provide it, so that we can reply to follow-up questions.
  • Device information, for bug reports only: app version, system version, device model, and language and region. The form shows this information before you send it.
  • IP address: technically required for every request. The server uses it briefly to limit the number of requests per connection and does not store it together with your entries.

Visibility: After our review, wishes become visible to all users of the app (title, description, number of votes and, where applicable, our reply), without email address and without identifier. Please do not include personal data in your wishes. Bug reports are only visible to you and to us.

Purpose and legal basis: We process this data to improve the app and to handle bug reports. This is our legitimate interest under Art. 6(1)(f) GDPR. We process your email address on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

Retention: We keep entries and votes as long as the feedback area exists or until you request their deletion. We keep your email address until you withdraw your consent or request deletion. Please tell us the title of your entry or the email address you provided.

5. No Tracking, No Advertising

Rechnung Direkt contains no tracking tools, no analytics SDKs and no advertising. The app does not use an advertising identifier and does not share data with advertising networks or other third parties.

6. This Website

Hosting: This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Whenever a page is requested, the server technically processes your IP address, date and time, the requested address, the previously visited page (referrer), browser and operating system information (user agent), the amount of data transferred and the status code (server log files). This serves to deliver the pages, to keep them stable and to defend against attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Hostinger processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Log files are only kept as long as necessary for these purposes and are deleted afterwards.

No cookies and no third-party content: This website sets no cookies, stores nothing in your browser and uses no analytics or tracking services. We serve the fonts ourselves, and no content is loaded from other providers. Links to the App Store lead to Apple, where Apple's privacy policy applies.

7. Demo Version for Mac

You download the demo version from this website; section 6 applies. The demo version stores your data only locally on your Mac, without iCloud.

Update check: The demo version can look for new versions. It only does so automatically if you have agreed to this in the app, and manually at any time via the menu. It retrieves the file https://rechnungdirekt.com/demo/appcast.xml from this website and, for technical reasons, transmits your IP address and, in the user agent, the name and version of the app and of the update component (Sparkle). No further information about your device is sent. Like any page request, the request is recorded in the server log files (section 6). The legal basis is our legitimate interest in providing bug fixes and security updates (Art. 6(1)(f) GDPR).

Feedback in the demo version works as described in section 4.

8. Contact by Email

If you write to us, we process your email address, your name and the content of your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns a purchase or the use of the app, otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Messages are stored by our email provider on our behalf. We delete them once your request has been dealt with, unless statutory retention obligations (for example for business correspondence) apply.

9. App Store Purchase

Rechnung Direkt is purchased through the Apple App Store. Payment processing is handled exclusively by Apple. We do not receive any payment data or personal account information from Apple. Apple's Privacy Policy applies.

10. Your Rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

An informal message to info@kreativorgan.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example in your country of residence or with the authority responsible for us: Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden, Germany (postal address: Postfach 11 01 32, 01330 Dresden), datenschutz.sachsen.de.

Right to Object (Art. 21 GDPR)

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. An informal message to info@kreativorgan.de is sufficient.

11. Deleting Your Data

You delete the data in the app by removing the app from your device. You remove the data in iCloud in your device's settings under your name, "iCloud" and "Manage Storage" for Rechnung Direkt. We delete entries, votes and your email address in the feedback area on request (see section 4). The random feedback identifier remains stored in your device's keychain even if you delete the app. Without your entries on our server it cannot be attributed to any person.

12. Changes to This Privacy Policy

We update this privacy policy when the app, the website or the legal situation changes. The current version is always available on this page.