What happens to my entries? (GDPR)

Where is data stored?

• Entries + evaluations: on a German server (hosting in Germany).
• Photos: hosted in EU storage, with encryption.
• AI evaluation: for evaluating your entries, we use specialized AI providers.

Details on hosting, storage providers, AI providers used, transfer mechanisms, and all data processors can be found in our Privacy policy — that’s the complete and legally binding source of truth.

Who can see my data?

• You — via the app + GDPR export.
• We — technically for processing (hosting, evaluation, backups), working with processors under Art. 28 GDPR. The full list is in the Privacy policy.
• Our support — only on your explicit request (e.g. for bug reports), and only the data you share.

We do not sell, share, or license your data to ad networks or data brokers. Exceptions apply only where required by law (e.g. official orders).

Are entries used for AI training?

Not by us. Our AI providers do not use API data under their standard terms to train their models. Details on processing and retention periods are in our Privacy policy.

Your rights (GDPR)

• Access: Profile → Privacy → Export data (JSON export).
• Rectification: you can edit or delete entries.
• Deletion: Profile → Privacy → Delete account (30-day grace period, then hard delete).
• Data portability: the JSON export is machine-readable.
• Objection / complaint: info@karmaflow.app or your competent data protection authority.

Full details: Privacy policy.