Data protection and privacy policy of SimpleumSafe App

The Simpleum Media GmbH – the developers of the app SimpleumSafe – take the protection of your personal data very seriously.
The data protection and privacy policy will tell you what information is collected and used. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
Simpleum Media GmbH, Hamburg, Germany – (also “Simpleum”, “we”, “our”, “us”) operates the website simpleum.com (also “website”) and the Applications SimpleumSafe and SimpleumCheck (also “app”).

This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter “data”) within our online offer and the associated websites, functions and contents as well as external online presences, such as our social media profile (hereinafter collectively referred to as “online offer”).

With regard to the terminology used, such as “processing” or “responsible person”, we refer to the definitions in article 4 of the General Data Protection Regulation (GDPR).

Responsible organization

The responsible organization in the sense of the data protection laws is:

Simpleum Media GmbH
Poßmoorweg 35
22301 Hamburg
Germany
info@simpleum.com

Contact and Support form

When you submit a support request through the SimpleumSafe app, the app transfers the email address, subject, and message content you entered, as well as the selected request type, the app and product version, and automatically added technical diagnostic information. Depending on the platform, this may include, for example, information about the app edition, processor platform, or available storage space.

The contents of your safes and any files or credentials stored in them are not transferred automatically. Attachments are also not transferred automatically at present. Please do not include confidential content, passwords, or personal data that is not necessary for handling your request.

The support request is transferred over an encrypted connection to a Simpleum-operated support endpoint at hooks.simpleum.com and forwarded from there to our Zammad ticket system.

Zammad helpdesk

We use “Zammad Hosted” provided by Zammad GmbH, Marienstraße 18, 10117 Berlin, Germany, to manage and process support requests. Zammad processes support data on our behalf. We have entered into a data processing agreement with Zammad pursuant to Article 28 GDPR. According to the provider, all hosted plans use data centers located exclusively in Germany.

The legal basis is Article 6(1)(b) GDPR where your request relates to the performance of a contract or pre-contractual measures. General support requests, bug reports, and suggestions for improvement are processed on the basis of our legitimate interest in providing secure and efficient customer support pursuant to Article 6(1)(f) GDPR.

We retain support requests for as long as necessary to process them, answer possible follow-up questions, and establish, exercise, or defend legal claims. We regularly review whether continued retention is necessary, at least every two years. Statutory retention obligations remain unaffected.

In September 2026, we switched our helpdesk system from Freshdesk to Zammad. Support data stored in the previous helpdesk was transferred to Zammad so that we can continue to process and manage support cases. The purpose of the processing has not changed as a result.

Subscribe to Newsletter

SimpleumSafe app users can choose to subscribe to our newsletter. The newsletter system is operated by Simpleum Media GmbH itself on Strato AG servers in Germany. The email address provided will be saved. Subscribing to the newsletter is completely voluntary and the user can unsubscribe at any time.

FAQ articles

If the SimpleumSafe app encounters a significant error, it automatically references our FAQ section at simpleum.com for potential solutions. This process involves displaying a relevant FAQ link within the app, offering immediate help. No personal data is transmitted during this process, ensuring user privacy. This feature is designed to enhance user experience by providing quick, accessible solutions to common issues.

In-App Purchase / Subscription

The app uses the RevenueCat product from Revenue Cat, Inc. (hereinafter “RevenueCat”) based at 633 Tarava St. Suite 101, San Francisco, CA 94116 USA to manage and analyze in-app purchases.

The transmission takes place in accordance with the provisions of Art. 46 GDPR. RevenueCat saves or processes the data and prepares it for Simpleum Media GmbH in a web interface. RevenueCat stores the data in the USA or Europe and is subject to the EU GDPR (EU 2016/679) via DPA: https://www.revenuecat.com/dpa

You agree to the data collection by the app and the transmission to RevenueCat. If the third-party provider does not want the specified data to be saved, the app should not be used.

To have your own data in the APP or in RevenueCat deleted from the database, you can send an email to support@simpleum.com (with the note “Deletion of my data in RevenueCat”). If this does not happen, the data will be deleted at the latest after the statutory retention periods. Reference is made to the General Terms and Conditions and Privacy Policy of RevenueCat:

Terms and Conditions: https://www.revenuecat.com/terms Privacy Policy: https://www.revenuecat.com/privacy

The data that is stored by RevenueCat and prepared for analysis can be viewed under the following link: https://www.revenuecat.com/dpa

Data analysis

If you access our app, your behavior can be statistically evaluated with the help of certain analysis tools and analyzed to improve our offers. When using such tools, we ensure compliance with statutory data protection regulations. When using external service providers (processors), we ensure through appropriate contracts with the service providers that the data processing complies with German and European data protection standards.

Firebase Crashlytics / Firebase Crash Reporting

We use Firebase Crashlytics / Firebase Crash Reporting (hereinafter Google Firebase) to analyze user behavior and to report on the stability and improvement of the app. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Firebase includes various functions that enable us to analyze your in-app behavior. In this way we can, for example, analyze your screen views and button presses. We can also determine which functions within our APP are used frequently or rarely. For these purposes, Google Firebase stores i.a. the number and duration of sessions, operating systems, device models, region and a number of other data. You can find a detailed overview of the data collected by Google Firebase at: support.google.com/firebase/answer/6318039

Google Firebase Crashlytics / Firebase Crash Reporting is used to improve the stability and app. This collects information about the device used and how our app is used (e.g. the timestamp of when the app was started and when the crash occurred), which enables us to diagnose and solve problems. The data is stored anonymously. The stored data is located on servers in the EU.

The use of Firebase Crashlytics / Firebase Crash Reporting may require the forwarding of your personal data to the USA. The storage period for the data collected in this way can be found in the data protection regulations of the provider.

Google Firebase Crashlytics / Firebase Crash Reporting is used to optimize this app and to improve our offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

For more information about Google Firebase, visit: https://firebase.google.com/ https://firebase.google.com/terms/crashlytics/ https://firebase.google.com/support/privacy/

Functional Statistics

The app uses features of the Posthog service to anonymously analyze and optimize user behavior and the user-friendliness of our app. The provider is Posthog Inc., 965 Mission Street, San Francisco, CA 94103, USA. The transmitted IP address is not saved. No personal data is stored.

The legal basis for processing your data is Article 6 (1) (b) GDPR. PostHog transfers and stores data exclusively on servers in the EU, but is a US company. We have concluded a data processing agreement with PostHog.

Further information can be found in Posthog’s privacy policy: https://posthog.com/privacy

Web addresses used

Web address Usage Operator
simpleum.com Search/display FAQ articles Simpleum
services.simpleum.com Subscribe to the newsletter Simpleum
hooks.simpleum.com Encrypted transfer of support requests to the Simpleum support endpoint Simpleum
api.revenuecat.com Manage and restore subscriptions and one-time purchases RevenueCat
paywalls.com Runtime adjustments of colors, layout and text of the purchase dialogs (paywall) RevenueCat
crashlytics.com Reporting crashes and errors Google
app-measurement.com Reporting of errors, performance behavior Google
googleapis.com Reporting crashes and errors Google
eu.i.posthog.com Counting of events PostHog
Local network Exchange of synchronization configuration and device-to-device synchronization Local

Status: September 3, 2026