Privacy Policy

The controller responsible for processing personal data on this website is:

For any question about this policy or about your personal data, write to us at the address above. We answer privacy requests as quickly as we can, and always within the deadlines the GDPR sets.

• This website sets no cookies and runs no analytics or advertising trackers.
• The website has no sign-up forms and stores no personal data in any database.
• If you contact us by email, we use your details only to answer you.
• Our apps are private by design: no accounts, no tracking, and your data stays on your device.

This website is hosted by Vercel Inc., 650 California St, San Francisco, CA 94108, USA. When you visit the site, Vercel automatically processes technical data that your browser sends, such as your IP address, the date and time of your visit, the pages you open, and your browser and operating system. This happens with every website and is needed to deliver the pages to you securely and reliably.

The legal basis for this processing is our legitimate interest in operating a secure and stable website (Art. 6 (1) (f) GDPR). Log data is kept only for as long as is needed for these purposes.

Vercel may process data in the United States. Transfers are safeguarded by the EU standard contractual clauses and Vercel's participation in the EU-US Data Privacy Framework. You can read more in Vercel's privacy policy.

The apps we build are private by design. They require no account, contain no analytics or advertising trackers, and do not send your personal data to us. What you do in the app, such as prayer tracking or journal entries, is stored on your own device.

If an app offers optional paid features, the purchase and any subscription are handled entirely by Apple's App Store or Google Play. We do not receive or store your payment details, and you still do not need an account with us.

Where an app includes AI features, we design them to run on your device wherever possible, and your personal data is never used to train AI models.

Each app ships with its own privacy policy that describes exactly how it works, available in the app stores and inside the app itself.

When you submit the contact form, your name, email address and message are delivered to our inbox as a single email through our email delivery provider Resend (Resend, Inc., USA), acting as our processor under EU standard contractual clauses. We store nothing in a database on this site and use your details only to answer your enquiry. If the delivery service is unavailable, the form instead opens your own email app.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or a possible project with us, and otherwise our legitimate interest in answering messages sent to us (Art. 6 (1) (f) GDPR). We keep correspondence for as long as is needed to deal with your enquiry and any statutory retention periods that apply.

This website does not set cookies and does not use analytics, advertising or social media trackers. Because of this, no cookie consent banner is shown: there is simply nothing to consent to.

The fonts used on this site are served from our own hosting. No request is made to Google Fonts or any other third-party font service when you visit.

If we ever introduce analytics or similar tools, we will update this policy first and, where the law requires it, ask for your consent before anything is loaded.

As a data subject, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Have inaccurate data corrected (Art. 16 GDPR)
• Have your data erased (Art. 17 GDPR)
• Restrict the processing of your data (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw any consent you have given, at any time (Art. 7 (3) GDPR)

To exercise any of these rights, email privacy@smatlabs.io. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden, Germany.

We do not use your personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

We will update this policy whenever the way we handle personal data changes, for example when a product launches or a new tool is introduced. The date at the top of this page shows when it was last revised. The current version is always available at https://smatlabs.io/privacy.