Privacy policy
This privacy policy applies to the iPhone app Surprisely (including its Share extension) and to this website. In short: Surprisely stores your data on your iPhone and in your own iCloud storage. We don’t run servers for the app, use no tracking and no third-party SDKs, and have no access to your content. The German version of this policy is the legally binding one.
1. Controller
Stefan Mücke
Gartenstraße 11
76703 Kraichtal
Germany
Email: stefan@stefanmuecke.de
2. The Surprisely app
2.1 What data the app processes
You create the content in Surprisely yourself: friends (name, optionally birthday and budget), occasions, gift ideas (title, link, price, picture, note, status) and lists. This data is stored on your iPhone and is used solely to provide the app’s features (Art. 6(1)(b) GDPR).
2.2 Sync via iCloud
If you use iCloud, your data is stored via Apple’s CloudKit service in the private database of your iCloud account and synced with your devices. iCloud is provided by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. We have no access to this data. Apple’s privacy policy applies to its processing (apple.com/legal/privacy). Without iCloud, the data stays on your iPhone only.
2.3 Shared lists
When you share a list, it is shared via iCloud with the people who join through your link. Members see the list name, date, wishes, the names of the other members (the name they enter when joining, otherwise their iCloud name) and reservations. For your own wishlist in surprise mode, reservations are never loaded onto your device. Shared lists are stored in the iCloud storage of the person who created them. By joining, members share their display name and reservations with the other members (Art. 6(1)(b) GDPR).
2.4 Contacts
When adding a friend you can pick a contact from your address book. Surprisely uses the iOS contact picker for this and does not need ongoing access to your contacts. Only the name, birthday and identifier of the chosen contact are taken over and stored like the rest of your data on your iPhone and, if enabled, in your iCloud.
2.5 Notifications
Reminders for occasions are scheduled as local notifications on your iPhone. No data is sent to us or to third parties. You can revoke permission at any time in the iOS settings.
2.6 Sharing ideas from other apps
When you pass a link to Surprisely via the Share menu, your iPhone loads that web page directly to read the title, picture and price. As with any normal page visit, the operator of that page receives your IP address and technical details of your device. We do not receive this data.
2.7 Premium subscription
Purchases and subscriptions are handled exclusively by Apple through the App Store. We receive no payment data and no personal details. The app checks on your device, using Apple’s StoreKit, whether a valid subscription exists. Apple’s terms and privacy policy apply to purchases.
2.8 Statistics and crash reports from Apple
Surprisely contains no analytics or tracking tools of its own. If you have agreed in the iOS settings to share analytics with app developers, Apple provides us with aggregated usage statistics and crash reports that do not identify you. You can change this under Settings › Privacy & Security › Analytics & Improvements.
2.9 Export and deletion
You can export your data as a file in the app’s settings and delete individual items in the app. Deleting the app removes the data from your iPhone; to delete the data in iCloud go to Settings › [your name] › iCloud › Manage Account Storage › Surprisely.
3. This website
3.1 Hosting and server log files
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, technically necessary data is processed and briefly stored in server log files: IP address, date and time, page requested, amount of data transferred, referrer, browser and operating system. This is necessary to deliver the website securely and reliably (Art. 6(1)(f) GDPR).
Cloudflare delivers the pages through a global network of data centres and processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR); should it lapse, the European Commission’s standard contractual clauses apply (Art. 46 GDPR). See Cloudflare’s privacy policy for details (cloudflare.com/privacypolicy).
3.2 No cookies, no tracking, no external content
This website sets no cookies and uses no analytics or marketing services. Fonts and images are loaded directly from this website, not from third-party servers. Only your language choice is stored locally in your browser when you switch languages; it never leaves your device. Links to the App Store lead to Apple, where Apple’s privacy policy applies.
3.3 Contact by email
If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose and no statutory retention obligations apply.
4. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Please contact us at the email address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
5. Changes
If the app or this website changes, we will update this privacy policy. The version published here applies.