Privacy Policy

for the BrushBeats app and this website · Last updated September 18, 2026

1. Controller

Name

Raphael Feichtenschlager

Address

Thalhausen 18, 5152 Michaelbeuern, Austria

Contact

feichten.code@gmail.com

BrushBeats is a private, non-commercial project. No data protection officer has been appointed, as none is required.

2. Data on your device

The app stores points, levels, streaks, unlocked effects, your settings, the pressure calibration and the times of your recent brushing sessions. This data lives only in the app’s storage on your iPhone and is never transmitted, not even to the developer. Deleting the app deletes this data.

3. Bluetooth

BrushBeats connects to your toothbrush via Bluetooth and receives its brushing status, pressure and brushing time. These values are processed on your iPhone only, to drive the display and calculate points. You grant Bluetooth access through iOS and can revoke it in the Settings at any time.

4. Music library

If you want to choose your own songs, the app asks for access to your music library. It then reads title, artist and duration to show you a list and plays the song you pick. Nothing is transmitted. The included tracks work without this access.

5. Reminders

If you want, BrushBeats reminds you in the evening if you haven’t brushed yet. These notifications are scheduled directly on your iPhone. There is no push server and no device identifier sent to third parties. You can turn notifications off in the iOS Settings at any time.

6. App Store and TestFlight

BrushBeats is distributed through Apple Inc.’s App Store and TestFlight. Apple processes data for downloads, installation and updates under its own privacy policy. If you have agreed in iOS to share analytics with app developers, Apple provides anonymized crash reports and usage statistics. These do not contain information that identifies you personally.

7. This website

When you visit brushbeats.paneldex.com, your browser necessarily transmits your IP address, date and time, the requested page and the browser type. The server processes this data to deliver the page and keeps it briefly in logs to ensure operation and detect attacks. The legal basis is the legitimate interest in secure operation (Art. 6(1)(f) GDPR). The website sets no cookies and loads nothing from third-party servers.

Recipients: Hetzner Online GmbH, Gunzenhausen, Germany, operates the server in a data center in the EU. Cloudflare, Inc., USA, provides name resolution (DNS) for the domain. Website traffic does not pass through Cloudflare.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Since the app does not send any data to the developer, the developer usually holds no data about you. For any request, contact feichten.code@gmail.com.

You can also lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

9. Changes

If the app changes in a way that affects how data is processed, this policy will be updated. The version published here applies.