Everything you enter is stored encrypted on your iPhone only. The app contacts just one server: to load the public list of German embassies, it downloads it from the Federal Foreign Office, without your destination or card contents. No account, no cloud, no advertising, no tracking.

The app does not need an account, and we do not run any servers for it. The app contains no advertising, no tracking, and no analytics.

All data you enter (e.g., ID and passport numbers, expiry dates, phone numbers, addresses, and notes) stays on your device. It is stored encrypted; the key is kept in your device's keychain and is not included in device backups.

Parat includes the public directory of German missions abroad from the open data interface of the Federal Foreign Office (Auswärtiges Amt). When you choose a destination or an embassy or open the directory in the settings, the app downloads the current version directly from the Federal Foreign Office's server (auswaertiges-amt.de), at most once a day or when you pull down the list to refresh it. For technical reasons, the server receives your IP address, the time of the request, and a generic identifier of the app and operating system (app name, build number, and the versions of iOS and its network components). The complete directory is always downloaded; your destination, your card contents, and other entries are not transmitted, and no cookies are used. We have no access to this data. The Federal Foreign Office's privacy policy applies to its processing.

If you turn on the app lock, iOS handles the check entirely. The app only learns whether the check was successful and has no access to your biometric data.

If you use "Aus Foto lesen" (read from photo) for a passport or ID card, you take a photo of the document or pick one with the iOS photo picker. The app receives only this one photo and has no access to your photo library. Text recognition runs on your device; the photo is neither stored nor transmitted, and only the recognized details such as name, document number, and dates are filled in. The app asks for camera access when you first take a photo; you can revoke it at any time in the iOS settings.

Reminders about expiry dates and the annual check are scheduled locally on your device; no server is involved.

Cards, printouts, and backup files only leave your device if you print or share them yourself (e.g., via AirPrint, AirDrop, or the share sheet). Printouts and shared images contain only the entries you have released for them; entries marked as confidential are always excluded. Backup files contain all your cards and are encrypted with a password you choose.

If you write to us from the app, your mail app opens. The message includes the app version, iOS version, device model, and the number of your cards, but never card contents. You can see this information before sending and remove it. We only use your message and e-mail address to answer your request.

You get the app through the Apple App Store. Apple is responsible for download, payment, and updates; we have no access to that data. Apple's privacy policy applies: https://www.apple.com/legal/privacy/

If you have turned on "Share with App Developers" in the iOS settings, Apple provides us with anonymous crash reports and usage statistics. They do not identify you.

Whatever happens only on your device or in your private iCloud does not reach us; we do not process that data.

Loading the directory of German missions abroad is based on Art. 6(1)(f) GDPR; our legitimate interest is showing you current contact details for embassies.

If you e-mail us, we process your address and message to answer you (Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR).

What the app stores on your device stays there until you delete it in the app or remove the app. Data in your iCloud can be deleted in your device's iCloud settings.

We delete e-mails to us once your request has been resolved, unless statutory retention obligations apply.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Since we do not keep accounts and the app does not identify you, we often cannot attribute data to a person (Art. 11 GDPR). Write to us anyway; we are happy to help.

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: the data protection authority of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, https://www.lfd.niedersachsen.de

Nikita Aurelian Schulz (PODSchu). The full address is in the legal notice (Impressum) on this page.

For questions about data protection: contact.schulzpod@gmail.com