for the iPadOS & iOS App GitResa

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:

2. General Information about GitResa

GitResa is a native Git client and code editor engineered for iPadOS and iOS. Built strictly according to the principle of "Privacy by Design", the application operates primarily locally and fully offline on your device.

GitResa allows you to clone Git repositories, manage branches, commit changes, edit code, and organize repositories both inside internal app storage and within external directories (Files app). Protecting your source code, private data, and authentication credentials is our highest priority.

3. Local Storage on the iPad

GitResa stores all data required for its operations exclusively locally on your device:

• Repositories & Source Code: All code files, branches, commit trees, tags, and version histories remain entirely inside the local filesystem of your device.
• Git Author Identities: Your configured author credentials (name and email address for commit authorship) are stored locally in repository configurations or app settings.
• Credentials & Keys (Keychain): Sensitive authentication data (passwords, Personal Access Tokens, SSH keys, and SSH passphrases) are securely encrypted and stored within the hardware-backed iOS Keychain.

The iOS Keychain utilizes the device's hardware security architecture (Apple Secure Enclave). These credentials never leave your iPad without authorization and are inaccessible to other third-party apps.

4. File System Access (Security-Scoped Bookmarks)

GitResa supports managing repositories in external directories via the iOS/iPadOS Files app (e.g., on external storage devices or user-chosen folders). For this, the app uses Apple's official sandbox security mechanism (Security-Scoped Bookmarks):

• Access is restricted strictly to the specific folder that you explicitly select and grant permission for using the system Document Picker.
• GitResa has no access or insight into any other files, folders, or system directories on your iPad.
• You can revoke access to external directories at any time by removing the repository from GitResa or revoking permissions in the system settings.

5. No Data Collection, No Tracking, No Advertising

We believe in absolute data privacy. The developer collects, stores, and evaluates zero personal data:

• No Tracking & No Telemetry: No analytics SDKs, tracking tools, or crash reporting services are integrated into the app. No usage or diagnostic telemetry is sent to us.
• No Advertising: The app is completely ad-free and contains no advertising networks.
• No Developer Servers: There are no backend servers operated by the developer for synchronizing or transmitting your data, code, or repositories.

6. In-App Subscriptions & Payment Processing via Apple (StoreKit)

The standard free tier of GitResa allows managing up to one (1) repository. An optional annual auto-renewing subscription ("GitResa Pro" for €9.90 / year) is available to unlock unlimited repository management.

All in-app purchases and subscription lifecycles are processed via Apple's native StoreKit 2 framework:

• All financial transactions and billing information are handled exclusively by Apple Inc. (Apple Media Services / App Store).
• The developer never receives or stores your payment details, credit card information, or bank data.
• Apple supplies the app only with a cryptographically signed, pseudonymous transaction entitlement verifying whether the Pro subscription is active on your device.

For details on how Apple processes your data, please refer to Apple's Privacy Policy at apple.com/legal/privacy.

7. Network Connections to Git Remotes

GitResa only initiates external network connections when you actively trigger a Git operation targeting an external remote server (e.g., clone, fetch, pull, or push):

• Typical remote endpoints include GitHub, GitLab, Bitbucket, or your self-hosted Git servers.
• All connections occur exclusively upon your direct command directly between your device and the remote host.
• Data transmission is end-to-end encrypted using industry-standard protocols (HTTPS via TLS or SSH).
• The processing of data on the remote host (such as commit history, source files, and user accounts) is governed by the respective hosting provider or your own server policies.

8. Legal Basis for Processing (Art. 6 GDPR)

• Performance of Contract: The local processing, execution of Git operations, and verification of Pro subscriptions are required for the performance of our contract with you regarding the use of the app (Art. 6(1)(b) GDPR).
• Data Security & Keychain: Encrypted storage of access tokens and credentials in the iOS Keychain is based on our legitimate interest in ensuring maximum security and integrity of your authentication data (Art. 6(1)(f) GDPR).

9. Data Retention and Deletion

All repositories, code files, credentials, and settings remain solely on your device until you decide to delete them:

• You can delete individual repositories and stored credentials directly within GitResa at any time.
• Uninstalling the app removes all sandbox data stored by the app on your device.
• Because the developer does not receive or store any user data, no developer-side data records exist to be retained or deleted.

10. Disclosure of Data to Third Parties

No personal data is shared, sold, or transferred to third parties by the developer.

Transaction records related to the Pro subscription are processed exclusively by Apple Inc. as part of App Store purchases. During Git remote operations, data is transmitted strictly between your device and the Git remote server you designated.

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding personal data:

• Right of Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)

Since the developer does not collect or hold any of your personal data, you can inspect, modify, or erase all data directly on your device. For questions regarding data protection, please contact the details provided in Section 1.

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR (Art. 77 GDPR).

The lead supervisory authority responsible for the developer is:

13. Data Security

GitResa relies on modern, state-of-the-art security mechanisms provided by iPadOS and iOS:

• Keychain Encryption: Passwords, access tokens, and SSH keys are stored in the hardware-encrypted iOS Keychain.
• Transport Encryption: All communication with remote Git repositories is encrypted via standard SSH or TLS/HTTPS.
• App Sandboxing: The application executes in an isolated sandbox, requiring explicit user selection to interact with external storage.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or features of GitResa. The current version will always remain accessible at this web address.