Privacy

Your data. Explained transparently.

Last updated: 1 November 2026 · For the Takings app and this website

This is a translation for convenience. If the translation and the German version differ, the German version prevails.

1. Controller and contact

You will find further provider details in the legal notice (German).

2. Your store data stays on your Mac

Takings does not need its own Takings account. Sales reports, subscription reports, reviews, report archives, settings and AI drafts are stored locally in the app data folder on your Mac. This data is not uploaded to a Takings server. The developer does not receive it automatically.

Takings stores private App Store Connect keys and optional Google service account keys in the macOS Keychain, bound to the device. Takings contains no advertising or usage analytics trackers. Plus purchase management is separate and is described in section 4.

3. Connections to Apple, the ECB and optionally Google

For the features you use, Takings makes direct connections to the following services:

• Apple: App Store Connect for sales and subscription reports, app information and reviews; iTunes Lookup for public metadata, star ratings and app icons. For authentication, a time-limited signed access token is created from your private key.
• European Central Bank: public exchange rates for currency conversion. Your sales reports are not transmitted for this.
• Google, only after setup: OAuth to sign in the service account, Cloud Storage for original reports and the Play Developer API for reviews. Without a configured Google connection, these requests are not made.

With such requests, the respective providers receive technically necessary connection data, in particular your IP address and the requested resources. The providers’ terms and privacy notices also apply to your use of your store accounts.

Apple privacy · Google privacy · ECB privacy

4. Takings Plus: Apple and RevenueCat

When purchases are enabled, Takings uses Apple and RevenueCat, Inc. to show offers, process or verify purchases, restore purchases and manage the Plus entitlement. RevenueCat may process a pseudonymous app user ID and technical connection data as soon as the purchase connection is initialized, even before you subscribe.

The categories processed include purchase and transaction information, product and subscription status, a pseudonymous RevenueCat customer ID and technical information such as app/SDK version, operating system and IP address. Apple manages payment data; Takings does not receive full credit card details. Your store sales reports, reviews and private API keys are not sent to RevenueCat.

The processing serves to provide and verify the purchased features (Art. 6(1)(b) GDPR) and a reliable entitlement management protected against abuse (Art. 6(1)(f) GDPR). Legally required retention may rely on Art. 6(1)(c) GDPR. Purchase and entitlement data are needed for as long as the subscription is managed, purchases are restored or legal obligations must be met. You can send us deletion requests; mandatory retention obligations remain.

RevenueCat is a provider in the USA. For processing outside the EEA, the agreed transfer safeguards apply, in particular EU Standard Contractual Clauses in the data processing agreement. The applicable contractual safeguards are described in the linked data processing agreement.

RevenueCat privacy · RevenueCat data processing and transfer safeguards · App Store and privacy

5. On-device AI with Apple Intelligence

Optional AI insights and reply drafts use Apple’s on-device Foundation Models model. The facts and review texts used for this are not sent to an external AI service for this feature. Drafts and summaries stay stored locally. Takings does not publish replies. The feature requires macOS 26, a supported device and Apple Intelligence turned on.

6. Retention and deletion

Local reports, reviews, archives, settings and drafts stay on your Mac until you remove them. Local connection logs are cleaned up automatically after seven days. Private keys are deleted from the Keychain when you remove the associated connection.

Under “Settings → General → Data” you can empty the report store and open the data folder. A complete clean-up of all locally stored data and keys is described in our deletion guide. Independent backups and data at Apple, Google or RevenueCat are not deleted automatically by this. Deleting the app does not cancel a subscription.

You can revoke API keys with Apple or Google and turn off optional notifications in Takings and macOS. There is no Takings account whose deletion you would need to request. For support or purchase data you can contact takings@einfachsystem.de.

7. This website

The website does not include analytics tools, advertising pixels or external fonts. It does not set cookies and uses no registration. Fonts, graphics and scripts are loaded from the same website. Links to external services only connect to those services when you open them.

If you switch between automatic, light and dark appearance in the footer, your browser stores this choice locally on your device (local storage, entry “takings-theme”). The entry is read only by this website, contains no personal data and is not transmitted to us. It is necessary for the function you requested (Section 25(2) no. 2 TDDDG); you can delete it at any time in your browser settings.

The website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. When the website is accessed, the hosting provider processes technically necessary data on our behalf in server log files, such as IP address, time of access, requested address, browser information and HTTP status. This serves the delivery and security of the website; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Without this processing the website cannot be delivered. A data processing agreement under Art. 28 GDPR exists with the hosting provider. According to the intended configuration, server log files are deleted after seven days at the latest.

netcup privacy

8. Email and support

When you contact us by email, we process your email address, the content of your message and any attachments you send voluntarily to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related matters, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). Please do not send private API keys.

We store requests only for as long as handling them and, where applicable, legal obligations require. After final handling, requests are deleted as soon as no statutory retention obligations remain.

9. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the provider is the State Commissioner for Data Protection and Access to Information of Brandenburg (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg).

For requests, contact takings@einfachsystem.de. We have no remote access to reports and keys stored only on your Mac. Takings does not make automated decisions with legal or similarly significant effect.

10. Changes

If data processing or services change, we will update this notice. The date at the top shows the version’s effective date.