Privacy Notice
Last updated: August 19, 2026
1. Controller
The controller for the processing described in this notice is:
Philipp Aigner
Mörmoosen 23
84577 Tüssling
Germany
Email: swdev.pa@gmail.com
2. Scope
This notice applies to the photo2calendar.com website, the /appstore redirect page, and the marketing, help and legal pages published on this domain.
The separate iOS app Photo2Calendar is offered by the same operator. If you use the app, the additional information in sections 7 and 8 applies to image processing and purchase validation in the app.
3. Website access and server log data
When you visit the website, our web server and hosting providers process technically necessary connection data such as IP address, date and time of access, requested URL, referrer URL, browser type, operating system and transferred data volume.
We process this data to deliver the website, maintain stability and security, and analyse technical errors. The legal basis is Art. 6(1)(f) GDPR. Recipients may include our hosting and IT service providers where required for the operation of the website.
Log data is kept only for as long as necessary for those purposes. Longer retention may occur where a specific security or misuse incident has to be investigated.
4. Consent management and locally stored preferences
We use a technically necessary consent signal to remember whether you have consented to optional technologies. This allows us to restore your choice on later visits and to avoid loading consent-based services without your decision.
The storage of this preference is based on the equivalent of strictly necessary storage under section 25(2) no. 2 TDDDG and on Art. 6(1)(f) GDPR for documenting your choice.
5. Google Tag Manager and Google Analytics
We use Google Tag Manager and Google Analytics only if you have explicitly consented. Without your consent, these services are not loaded on this website.
Purpose: audience measurement, technical usage analysis and website optimisation.
Legal basis: Art. 6(1)(a) GDPR and section 25(1) TDDDG.
Recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data categories: online identifiers, cookie IDs, usage data, page views, technical device information and approximate location data. According to Google, IP addresses are not logged or stored in Google Analytics 4.
International transfers: processing in the United States or other countries outside the EEA cannot be ruled out if Google processes data across its group. Google provides additional information at https://policies.google.com/privacy.
Retention: the precise retention period inside Google Analytics depends on the settings of the relevant Google Analytics property. Google documents 2 or 14 months as standard options for event data retention.
Withdrawal: you can withdraw or change your consent at any time for the future by using the “Cookie settings” link in the footer. Where possible, we attempt to delete previously set analytics cookies on this website after a withdrawal. You can also use Google's browser add-on: https://tools.google.com/dlpage/gaoptout.
6. External links, App Store and redirects
Our website contains links to the Apple App Store and provides a redirect page at /appstore. Once you follow such links, you leave our website and the privacy terms of the relevant third party, for example Apple, apply.
7. Image processing in the separate iOS app
If you use the separate Photo2Calendar iOS app and choose or capture an image there, we process the image content, extracted event details and any event information you confirm or correct in order to provide the requested calendar-conversion or ICS-export feature.
Purpose and legal basis: providing the app feature you requested, based on Art. 6(1)(b) GDPR.
Recipients: we use Google Gemini for image analysis. This may involve transfers to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Storage: we do not intend to keep selected images or generated ICS files longer than technically necessary for the immediate processing workflow. Short-lived caches or technical logs at infrastructure providers cannot be fully ruled out.
8. Purchase validation and RevenueCat in the iOS app
Apple processes App Store payments; we do not receive full payment-card details. We use RevenueCat, Inc. to validate purchases, restore access, manage subscription status and recognize customers who bought an earlier paid version of Photo2Calendar.
Data categories: an anonymous app user identifier, App Store receipt, transaction and product information, subscription status, storefront, original app version, IP address and technical app or device information.
Purpose and legal basis: fulfilling the app-access contract, preventing unauthorized access and preserving eligible lifetime access under Art. 6(1)(b) and, where applicable, Art. 6(1)(f) GDPR.
Recipient and international transfer: RevenueCat, Inc., United States. Processing in the United States may occur. RevenueCat provides details about safeguards, subprocessors and retention in its privacy notice.
9. Product analytics with PostHog in the iOS app
We use PostHog EU Cloud to measure whether app features work and where technical errors occur. PostHog processes an anonymous device identifier, technical app and device data, app lifecycle events, feature actions, and broad error reasons.
We do not send flyer images, shared links, recognized text, event titles, or event details to PostHog. Session replay, screen capture, touch capture, and IP-based location collection are disabled. We do not use this data for advertising or cross-app tracking.
Purpose and legal basis: product analytics, error analysis, and reliable operation of the app under Art. 6(1)(f) GDPR.
Recipient: PostHog, Inc. The project uses PostHog's EU Cloud. More information is available in the PostHog privacy notice.
10. Your rights
Subject to the GDPR, you have the right to access, rectify, erase, restrict processing, data portability, object to processing based on Art. 6(1)(f) GDPR, and withdraw consent with effect for the future.
11. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
12. Contact
If you have questions about data protection or want to exercise your rights, contact us at swdev.pa@gmail.com. You can also review our German provider notice and our Terms of Service.