As of 4 October 2026
Hanno Welsch, Mörikestraße 19, 66459 Kirkel, Deutschland, phone +49 6849 224464, e-mail ds@ihanwel.net.
All entries (title, description, picture, appointment, reminder, created by/at) are stored on this device. The app does not read contacts, location or the photo library; a picture is only used when you select it yourself.
For sign-in and the shared list the server ihanwel.net (operator: see controller, hosted in a German data centre) stores: e-mail address, display name, per device a random identifier, the device name, its public encryption key and the time of last use, and the memberships (who shares whose list). Whoever joins by invitation code has no e-mail account; the server then stores only the entered name and a random identifier. Legal basis is the performance of the user relationship (Art. 6 (1) (b) GDPR).
To confirm the e-mail address and for invitations the server sends e-mails to the given addresses. The confirmation code is stored only as a hash and for at most 15 minutes.
So that all devices and invited people see the same list, entries and pictures are stored on the server – exclusively encrypted. Each list has a random list key that exists only on the members' devices; the server keeps it only wrapped separately for each device (ECDH P-256). Content (title, description, appointment, reminder, created by) and picture are encrypted with AES-256-CBC and HMAC-SHA256. The server cannot read them; it only sees which account created or changed an entry when, and whether a picture exists. Members of the list see your e-mail address and display name as creator. So that the list is not lost after reinstalling the owner's device, the list key is additionally stored on the server encrypted with a key known only to the server, and handed out only to a device of the owner confirmed by e-mail code. The operator could technically access entries this way, but does not.
The web server technically logs accesses (IP address, time, requested path) for at most 14 days for troubleshooting and security (Art. 6 (1) (f) GDPR). Contents of entries are not logged.
Reminders are scheduled locally on the device (no third-party push services). The device asks once for permission to show notifications.
Deleted entries and pictures are removed from the server immediately. In Setup you can delete the account on the server; this removes e-mail address, name, devices, invitations and your list with all entries. Entries on the device disappear when signing out or uninstalling.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Please send requests to ds@ihanwel.net.