Privacy policy
This policy covers the website unforget-app.de (part A) and the macOS app Unforget (part B). The short version: the app processes everything locally on your Mac and has no network access — we never get to see any of your events.
Please note: this is a courtesy translation. The provider is based in Germany, so the German version is the legally binding one.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Greenstein Designagentur
Owner: Rene Grebenstein
Wallstr. 1, 31134 Hildesheim, Germany
Phone: +49 5121 29 520 22
Email: hallo@greenstein.design
There is no statutory obligation to appoint a data protection officer. For any privacy questions, please contact the address above directly.
Part A — the website unforget-app.de
2. Hosting and server log files
This website is operated and hosted by Greenstein Designagentur itself (address see section 1). The data arising when the site is accessed is not passed to an external hosting provider; a data processing agreement under Art. 28 GDPR is therefore not required.
When you access the website, information transmitted by your browser is automatically stored in the server log file:
- IP address of the requesting device
- date and time of access
- name and URL of the file retrieved
- volume of data transferred and status message
- browser type, browser version and operating system
- referrer URL, where transmitted
Purpose: technically flawless delivery of the website, system security and defence against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Retention: 6 months. The IP address is truncated as it is stored, so the log data is anonymised. After that it is deleted automatically. This data is not combined with other sources.
3. SSL/TLS encryption
For security reasons this website uses TLS encryption. You can recognise it by the “https://” in your browser's address bar. While encryption is active, the data you transmit to us cannot readily be read by third parties.
5. Contact by email
There is no contact form on this website. If you write to us by email — via the support address, for instance — we process your details (sender address, name, content of the message and any information volunteered) solely in order to handle your enquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering enquiries); for enquiries relating to a contract, additionally Art. 6(1)(b) GDPR.
Retention: we delete enquiries once they are settled and no statutory retention obligations apply. Statutory periods apply to correspondence relevant under tax or commercial law (§ 147 AO, § 257 HGB).
Mailbox: likewise operated by Greenstein Designagentur itself.
6. Links to external services
This website links to external offerings. Data is only transmitted to the respective provider (in particular your IP address) once you click such a link. Before that, nothing happens — these are plain links, not embedded content.
- Mac App Store (Apple)
- Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. Apple's privacy policy applies.
- Buy Me a Coffee (voluntary support)
- Buy Me a Coffee, operator of the platform buymeacoffee.com. If you contribute there, the provider processes your payment and contact data on its own responsibility. We only receive the information that a contribution was made and in what amount, plus the name or message you entered there. The provider's privacy policy applies.
- renegrebenstein.de and greenstein.design
- The controller's own offerings, each with its own privacy policy.
Part B — the macOS app “Unforget”
7. Principle: everything stays on your device
Unforget is a purely offline application. The app runs in the macOS app sandbox and holds no entitlement for network access. It technically cannot transmit any data to us or to third parties — there is no server, no cloud, no user account and no registration.
All processing of calendar and settings data takes place exclusively on your Mac. As the provider we receive no personal data in the process. The app is labelled accordingly on the App Store with the privacy note “No data collected”.
In so far as this local processing constitutes processing by us within the meaning of the GDPR at all, it is carried out to perform the usage agreement for the app (Art. 6(1)(b) GDPR) and on the basis of your express grant of calendar access (Art. 6(1)(a) GDPR).
8. Access to calendar data
In order to remind you of events, the app needs read access to your calendars. You grant that access yourself via the macOS system dialog; without it the app shows no events.
Data processed: title, start and end time, location, notes and video conference links of events in the coming 48 hours, plus calendar name and participation status (in order to skip declined invitations).
Nature of processing: events are read through the EventKit system interface and held in memory in order to calculate the next alerts and display them in the alert. They are not stored in a database of our own, not exported and not transmitted. When the app quits, they disappear from memory.
Withdrawal: you can revoke calendar access at any time under System Settings → Privacy & Security → Calendars. The app loses access immediately.
9. Settings and your own reminders
Your settings (for example alert stages, follow-up, tone, quiet hours, language, excluded calendars and keywords) as well as the quick reminders you create yourself are stored locally in the app's sandbox container on your Mac.
This data does not leave your device. It is removed entirely when you delete the app. If you make iCloud backups of your Mac, the sandbox container may form part of that backup — Apple's privacy policy is decisive for that.
10. Spoken announcements
If you enable spoken announcements, Unforget reads out the event title and time. Only the speech synthesis built into macOS is used for this. No processing by online speech services takes place, nothing is recorded, and the app has no access to the microphone.
11. No tracking, no advertising, no third-party SDKs
Unforget contains no analytics frameworks, no advertising networks, no third-party crash reporting services and no SDKs from other providers. Neither usage statistics nor device identifiers are collected, locally or remotely. There is no profiling and no automated decision-making within the meaning of Art. 22 GDPR.
12. Feedback function in the app
Via the menu item Send feedback… you can send us a message. The app merely prepares an email in your default mail client — it sends nothing itself. Whether and what you send is your decision.
Only technical details that help with troubleshooting are prefilled: app version, macOS version and the selected language. No event content is included. Once you send the mail, section 5 of this policy applies to the processing (legal basis Art. 6(1)(f) GDPR).
13. Obtaining the app from the Mac App Store
The app is downloaded via the Mac App Store. In doing so Apple processes data such as your Apple Account identifier, download and possibly crash information, on its own responsibility. We have no influence over that processing; Apple's privacy policy applies.
As the developer we see only aggregated, anonymous statistics in App Store Connect (such as the number of downloads per country). We cannot draw conclusions about individual people from that. If you have allowed Apple in System Settings to share diagnostic and usage data with developers, anonymised crash reports may additionally reach us; you grant or revoke that permission directly with Apple.
14. Permissions at a glance
- Calendars (required)
- Read access, in order to display events and calculate alerts. Revocable at any time in System Settings.
- Network
- Not requested. The app holds no network entitlement.
- Microphone, camera, contacts, location, photos, full disk access
- Not requested and technically not usable.
Deleting the app removes all locally stored data. A separate deletion request is not needed, because nothing is stored with us.
Part C — general information
15. Your rights as a data subject
You have the following rights against us with regard to personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
An informal message to hallo@greenstein.design is enough to exercise them. Please bear in mind: since the app itself transmits no data to us, as a rule we hold no data at all about users of the app.
16. Right to complain to a supervisory authority
Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
lfd.niedersachsen.de
17. Transfers to third countries
We do not transfer personal data to countries outside the EU or the EEA. If you click an external link (see section 6), the respective provider may process data in third countries — in particular Apple and Buy Me a Coffee, with registered offices and/or server locations including the USA. That happens under their own responsibility and on the basis of the safeguards used by those providers, such as standard contractual clauses or the EU-US Data Privacy Framework.
18. Currency and changes to this policy
This privacy policy is currently valid. As the app and the website develop further, or due to changed legal requirements, an amendment may become necessary. The current version is always available at unforget-app.de/en/privacy.