Privacy policy

Last updated: 23 July 2026

1. Controller

The controller for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

DNX DigitalerNachlass GmbH
Auflegerstraße 42
81735 Munich
Germany

Email: datenschutz@digitalernachlass.app

2. General information

This privacy policy explains which personal data is processed when you use the desktop and mobile applications of DigitalerNachlass.App.

DigitalerNachlass.App follows a local-first approach. By default, your estate data is processed and stored solely in encrypted form on your own devices. Data is transferred to our infrastructure only if you expressly activate the corresponding online features.

Personal data means any information relating to an identified or identifiable natural person.

3. Local data processing

By default, the data you enter is processed solely locally on your device.

This includes in particular:

Master data
Estate information
Contacts
Documents
Access credentials
Releases and permissions
Settings

This data is stored in encrypted form and, as a rule, does not leave your device.

Legal basis

Article 6(1)(b) GDPR.

4. Encryption

All estate data is stored in encrypted form by default.

Cryptographic keys are generated and managed exclusively on your devices. Our infrastructure does not process unencrypted estate data.

5. Data sovereignty

DigitalerNachlass.App was developed so that you retain control over your data at all times.

By default, estate data is stored solely in encrypted form on your own devices. Use of the online features is voluntary and can be deactivated at any time.

Even when online features are activated, only those personal data are processed that are required to provide the respective feature.

6. Online features

Some features use the DigitalerNachlass infrastructure.

These include in particular:

User account
Sign-in
Passkeys
Device management
Synchronisation (if activated)
Key management
Estate activation
Distribution of encrypted vaults
Updating the estate catalogue
Push notifications

These features are used only if you activate them.

Depending on the feature, the following data in particular may be processed:

Email address
Encrypted authentication information
Device information
Synchronisation information
Login timestamps
Security-relevant events

Legal basis

Article 6(1)(b) GDPR.

7. Authentication

For signing in and managing user accounts, we use our own authentication infrastructure.

In particular, the following are processed:

Email address
Encrypted authentication information
Passkeys (if used)
Device information
Login timestamps
Security-relevant events

Processing serves solely the secure provision of your user account.

8. Server operation and log data

To provide the online features, we operate our own servers exclusively in Germany.

When accessing our infrastructure, the following data in particular may be processed:

IP address
Time of the request
API endpoints accessed
Device information
Technical errors
Security-relevant events

This data is processed solely in order to

ensure the secure operation of the infrastructure,
analyse errors,
detect and prevent misuse, and
maintain the availability of our services.

Legal basis

Article 6(1)(f) GDPR.

9. Mobile app

The mobile app is used in particular for

key management,
confirming security-relevant processes,
estate activation,
receiving push notifications, and
using other activated online features.

For push notifications, we use Firebase Cloud Messaging (FCM) from Google LLC.

Device-specific push tokens and technical delivery information are processed solely as required to deliver push notifications.

Push notifications generally do not contain estate data or other confidential content.

Legal basis

Article 6(1)(b) GDPR.

10. Service providers used

To provide our online features, we use the following service providers:

Hetzner Online GmbH

Our server infrastructure is operated exclusively on servers of Hetzner Online GmbH in Germany.

Cloudflare, Inc.

To protect our infrastructure and to provide secure HTTPS connections, we use Cloudflare as a DNS service and reverse proxy.

In particular, IP addresses and technical connection data may be processed.

The actual processing of your estate data takes place exclusively within the DigitalerNachlass infrastructure.

Further information is available at:
https://www.cloudflare.com/privacypolicy/

Google LLC – Firebase Cloud Messaging

For push notifications in the mobile app, we use Firebase Cloud Messaging.

Push tokens and technical delivery information are processed.

Further information is available at:
https://firebase.google.com/support/privacy

Own SMTP server

For sending transactional emails, for example for registration, password reset, or security-related notifications, we operate our own SMTP server.

In particular, the following are processed:

Email address
Subject
Content of the respective email

11. Transfers to third countries

Our servers are operated exclusively in Germany.

Where individual service providers process personal data outside the European Union or the European Economic Area, this is done solely on the basis of the statutory requirements of the GDPR, in particular using appropriate safeguards such as the Standard Contractual Clauses of the European Commission.

12. No advertising and no tracking

DigitalerNachlass.App does not use

advertising networks,
marketing cookies,
analytics or tracking services to create usage profiles, or
personalised advertising.

Your usage behaviour is not evaluated for advertising or marketing purposes.

13. Disclosure of data

Personal data is disclosed only

where required to provide the features you use,
where we are legally obliged to do so, or
where you have expressly consented.

Data is not disclosed for advertising or marketing purposes.

14. Retention period

Locally stored estate data remains on your devices until you delete it yourself.

Data relating to your user account is stored for as long as the user account exists or legal retention obligations require otherwise.

Technical log data is stored only for as long as required for the secure operation of our infrastructure.

15. Automated decision-making

Decision-making based solely on automated processing, including profiling within the meaning of Article 22 GDPR, does not take place.

16. Your rights

Under the General Data Protection Regulation, you have in particular the following rights:

access to information about the processing of your personal data,
rectification of inaccurate data,
erasure of your data,
restriction of processing,
data portability,
withdrawal of consent given, with effect for the future,
objection to the processing of personal data in accordance with the statutory provisions, and
complaint to a competent data protection supervisory authority.

To exercise your rights, an informal message to the following address is sufficient:

datenschutz@digitalernachlass.app

17. Changes to this privacy policy

We update this privacy policy when legal requirements change or when new or changed features of DigitalerNachlass.App make this necessary.

The current version of this privacy policy is available within DigitalerNachlass.App and on our website.