1. Introduction

This privacy policy informs you about the type, scope, and purpose of the processing of personal data when using our web application ("Application"). We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

2. Controller

Andreas Bonke

Kieler Ring 35

18437 Stralsund

Germany

E-Mail: mail@andreasbonke.de

3. Hosting of the application

Our web application is hosted on servers operated by Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA). Data processing is therefore carried out by Vercel. Further information on Vercel's data protection practices can be found here: Vercel Privacy Policy.

4. Database

We use the Neon database (Neon, Inc., 548 Market St, PMB 20733, San Francisco, CA 94104, USA) to store your user data. The data is stored in a PostgreSQL database operated by Neon. Processing is carried out to provide our services (Art. 6 (1) lit. b GDPR). Further information on data processing by Neon can be found in the Neon Privacy Policy.

5. Vercel Analytics and Speed Insights

We use Vercel Analytics and Vercel Speed Insights to analyze the use of our application and improve performance. These services are provided by Vercel Inc. and may collect anonymized usage data such as page views, load times, and technical metrics. Processing is based on our legitimate interest in improving our services (Art. 6 (1) lit. f GDPR). The data is anonymized and cannot be directly traced back to you. We do not use Google Analytics. Further information can be found in the Vercel Privacy Policy.

6. Use of GitHub for sign-in

We use the GitHub service (GitHub Inc.) for registration and authentication. Before signing in, you must actively agree to our privacy policy. When you sign in to our application via GitHub, personal data from GitHub is processed and transmitted to us. This includes in particular your GitHub username, email address, and, where applicable, other information you have provided in your GitHub profile.

The use of GitHub is based on your consent (Art. 6 (1) lit. a GDPR) as well as for contract performance (Art. 6 (1) lit. b GDPR). Further information on data processing by GitHub can be found in the GitHub Privacy Statement.

7. Demo account

Kronum offers a shared demo account that lets you test the application without registration. When you sign in to the demo, sample data (areas, projects, milestones, tasks, and activities) is loaded into our database and assigned to your demo session.

Demo data is automatically reset after at most 24 hours. Changes you make in the demo account are not permanent and serve solely for product preview. The shared demo account cannot be deleted; you can sign out at any time.

No personal data is required for demo sign-in. Only a technical session is created to enable access to the application (Art. 6 (1) lit. f GDPR — legitimate interest in product demonstration).

8. Data processing when using the application

When using the application, we process the following personal data:

Usage data: IP address, device type, operating system, date and time of access.

Registration data: GitHub username, email address.

Interaction data: Data generated in the course of using the application (e.g. tasks, projects).

The processing of this data is carried out to provide the application and improve the user experience (Art. 6 (1) lit. b and f GDPR). We currently do not send newsletters and do not use Google Analytics.

9. Storage and deletion of data

We store your personal data only as long as necessary to provide our services or as required by statutory retention obligations. User data is stored in the Neon database.

GitHub users can delete their account at any time in the settings. This irrevocably removes the user record and all linked content (areas, projects, milestones, tasks, and activities) and ends the active session. Demo data is automatically reset at regular intervals. Activities older than 30 days are automatically deleted.

10. Your rights

You have the right to request information about the personal data stored by us at any time. You may also request the correction, blocking, or deletion of your personal data, insofar as this is legally permissible. You also have the right to object to the processing of your personal data and the right to data portability. To exercise your rights, please contact the address given above.

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.