Privacy policy

Last updated: 13/10/2026

This is a translation. Only the German version is legally binding.

1. Controller

The controller responsible for processing personal data in connection with the TravelReport app is the operator of sacasoft.com (see also legal notice):

Herwig David
Ihner Straße 35
66798 Wallerfangen
Germany
Email: privacy@sacasoft.com

No data protection officer has been appointed. There is no obligation to do so: we do not systematically monitor people, do not process special categories of personal data on a large scale (Art. 37 GDPR) and do not have 20 people constantly engaged in processing personal data (Section 38 of the German Federal Data Protection Act, BDSG).

2. Principle: your travel reports stay on your device

The TravelReport app stores all content exclusively locally in a database in the app's data area on your device. There is no user account, and travel reports are not transferred to us or to third parties; we do not operate a server for this. The app contains no advertising and no analytics or tracking services. It exchanges only the information needed for the purchase of the full version with the App Store or Google Play (section 5).

3. Which data the app processes

  • the content you enter: travel reports, details of the days of the trip, private notes, accommodation (e.g. name, address, phone number, email address and website of an accommodation), restaurants and restaurant visits (e.g. name, address, rating) and expenses,
  • your settings (default currency, language),
  • the licence status (free version or full version) and, after a purchase of the full version, the purchase ID provided by the store (App Store: original transaction ID; Google Play: order number). This information is stored only on the device, shown under “About TravelReport” and not included in the app's backup files.

Your entries may contain personal data of other people (e.g. the name and telephone number of a contact person at an accommodation). Please only record such information if you are entitled to do so.

The data stored in the app is generally deleted when you uninstall the app. Depending on your device settings, however, it may remain in operating system backups (e.g. iCloud Backup or Google backup); the privacy policies of Apple or Google apply to these.

4. PDF and backup

The app only creates PDF files when you trigger this. They are saved on the device and passed to a PDF app on your device for viewing; they are only passed on further if you do so yourself from there. The same applies to backup files (full version): they are only created when you trigger “Backup” and are only saved or passed on to the place you select in the save dialog or the share menu (e.g. a folder on the device, cloud storage or email). A backup contains all details of the travel report, including your private notes; the app does not encrypt the backup file. Storage or transfer via the service you choose takes place outside the app; the privacy policy of that service applies. The app keeps only the file of the most recent backup and deletes it with the next backup. With “Restore”, the app reads only the file you select yourself and stores its content locally on your device.

5. Purchase of the full version

Purchase, payment and refunds of the full version (one-off purchase, no subscription) are handled by Apple (App Store) or Google (Google Play) under their own responsibility. We do not receive your payment details. At startup and on “Restore purchases”, the app asks the respective store whether the full version has been purchased and saves the result locally (section 3); nothing is transferred to us. Apple and Google may also process data outside the EU/EEA. The privacy policies of Apple and Google respectively apply.

6. Internet connection of the app

The app only connects to the App Store or Google Play (purchase of the full version). It does not retrieve exchange rates, maps or other online services and does not send crash or usage reports. It opens links (e.g. to this website) in your device's browser; for pages of this website, it passes the language set in the app as part of the address.

7. This website

The privacy policy of sacasoft.com applies to visits to this website itself (e.g. access data and the selected language).

8. Legal bases and storage period

For each processing operation, we state the purpose, legal basis and storage period. The app processes the content of your travel reports only on your device; we do not receive it.

  • Content in the app (travel reports, settings, PDF and backup files) – Purpose: the app's functions on your device. This data only leaves your device if you pass it on yourself; we do not process it. Storage period: until you delete it in the app or uninstall the app; PDF files until uninstallation; of backups, the app keeps only the most recent file (section 4).
  • Purchase check and licence status – Purpose: unlocking the full version you purchased. Legal basis: Art. 6(1)(b) GDPR (contract). Storage period: the purchase ID remains stored as long as the store confirms the purchase; if a successful check no longer reports a purchase (e.g. after a refund), the app deletes it. It is also deleted when the app is uninstalled.
  • Enquiries by email – Purpose: processing your enquiry. Legal basis: Art. 6(1)(b) GDPR for enquiries about using the app or the purchase of the full version; Art. 6(1)(c) GDPR for enquiries about your rights (section 9); otherwise Art. 6(1)(f) GDPR (legitimate interest in answering). Storage period: We store your enquiry for as long as necessary to process it. We then delete the data unless statutory retention obligations apply or further storage is necessary for the establishment, exercise or defence of legal claims.
  • Language in links to this website – Purpose: displaying the page in your language. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an understandable presentation). Storage period: the app stores nothing for this; section 7 applies to visiting the website.

Recipients: emails to the contact address are stored by the email provider IONOS SE (Montabaur, Germany), which processes them on our behalf as a processor under Art. 28 GDPR; processing takes place in the EU. Beyond this, we only pass on your data if we are legally obliged to do so.

You are under no legal or contractual obligation to provide us with personal data. Without your email address, however, we cannot answer your enquiry, and without the purchase check with the store, the app cannot unlock the full version.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

Neither the app nor these pages use analytics, tracking or advertising measures; consent is therefore not required. Should this change, we will ask for your consent beforehand and update this privacy policy.

The app is intended for travellers of all ages and has no minimum age; it does not ask for age and has no age verification. Content also stays on the device for minors; we only process personal data of minors if they write to us themselves. Purchases in the app are subject to the family and parental control settings of the respective store (e.g. purchase approval by parents).

9. Your rights

You have the right of access, rectification, erasure and restriction of processing of your personal data, the right to data portability and the right to object to processing (Art. 15–21 GDPR). As the app does not transfer your content to us, we generally hold no data about you. You can also lodge a complaint with a data protection supervisory authority.

Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR (section 8), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to the contact address is sufficient.

We do not obtain consent (section 8). Should we ask for consent in the future, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR); processing carried out until then remains lawful.

The supervisory authority responsible for us is the Unabhängiges Datenschutzzentrum Saarland (Independent Data Protection Centre Saarland). You may also contact the supervisory authority of your place of residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

10. Contact

Please send questions about data protection to: privacy@sacasoft.com