HEPLANO

HEPLANO Build — Privacy Policy

Deutsch  ·  English

Last updated: October 4, 2026

1. Data controller

The controller responsible for the processing of personal data in connection with HEPLANO Build is:

HEPLANO
Owner: Jürgen Heuft
Heinrich-Heine-Str. 15
50389 Wesseling
Germany
Email: dev@heplano.com

2. Data processing at a glance

HEPLANO Build is a locally operating application for documenting construction and work progress.

The project data you enter within the app is, as a matter of principle, processed and stored exclusively locally on your device. HEPLANO does not operate its own servers or cloud synchronization for this project data.

HEPLANO Build does not use any of its own tracking or analytics services and no personalized advertising.

The project data stored within the app is not transmitted to HEPLANO.

A third-party exception is the optional voice input: for it, your spoken description is, as a rule, processed online by the operating system's speech recognition service (see section 7).

3. Internet connection and app store

HEPLANO Build itself does not establish a connection to any servers or cloud services of its own and does not transmit project data to HEPLANO. The optional voice input does, however, use the operating system's internet connection (see section 7).

An internet connection may be required to purchase or unlock the Premium version. The purchase is processed through the respective app store.

On Android, the purchase is processed via Google Play. A later iOS version may be offered via the Apple App Store.

HEPLANO does not receive complete payment data such as credit card or bank account details as part of the purchase. Payment processing is carried out by the respective app store operator.

The respective app store operator's own privacy policy applies to any processing of personal data it carries out.

When you make a purchase, HEPLANO receives order information from Google (e.g. order ID, date, product, price, country of the billing address), but no payment details such as card or account numbers. The legal basis is Art. 6(1)(b) and (c) GDPR; this information is retained for the statutory retention periods.

4. Permissions

HEPLANO Build only uses the device permissions required for the respective functions.

Depending on the feature used and the platform, the following permissions in particular may be required:

These functions are only used once you actively invoke the respective feature. The app does not access the camera or microphone already at app launch.

HEPLANO Build does not require access to location, contacts, calendar, SMS, or phone functions.

The permissions displayed by the respective operating system may vary depending on the platform and operating system version.

5. Camera and photos

If you use the camera function of HEPLANO Build, photos can be taken for project documentation purposes and stored within the app.

Photos are stored locally on your device and are not transmitted by HEPLANO to any server of its own.

HEPLANO Build does not specifically read a photo's EXIF metadata, such as any GPS information that may be present, and does not use it for its own purposes.

To the extent such metadata is part of a stored image file, it may remain in the file.

If you share a photo with third parties via the operating system's own share, export, or send functions, this metadata may be transmitted together with the photo to the respective recipient. You are responsible for any such disclosure yourself.

Construction site photos may incidentally show uninvolved third parties, for example other trades, passers-by, or vehicle license plates, in addition to your intended documentation. You, as the person taking the photo, are responsible for creating and using such images. Please pay particular attention to the right to one's own image of affected individuals (under German law, §§ 22, 23 Kunsturhebergesetz) and to the GDPR requirements for processing third parties' personal data. Where possible, avoid capturing identifiable individuals or license plates when this is not necessary for the documentation, and obtain consent from affected individuals where required before creating or sharing such images.

6. Employees and working hours

If you add employees within the app to track their working hours, you process personal data relating to those employees — in particular their name and day-by-day start, end, and break times per project. This data is stored exclusively locally on your device and may become part of PDF or JSON reports that you create and share yourself.

You, as the employer or contracting party, are yourself responsible under data protection law for this processing, in particular with regard to the information obligations towards your employees under Art. 13 GDPR and, where applicable to you as an employer, the requirements for processing employee data under German law (§ 26 BDSG) or the equivalent provisions applicable to you. HEPLANO itself never receives or processes this data.

You can completely delete individual employees and their working-time entries within the app at any time (see section 11).

7. Voice input

HEPLANO Build may use the speech recognition provided by the operating system for certain features. The app does not store audio recordings.

Android

On Android, HEPLANO Build uses the operating system's speech recognition and requests offline processing. This request is not a guarantee: in practice, the audio of your spoken description is usually transmitted over the internet to the device's speech recognition service (usually Google) and processed there; voice input then requires an internet connection. Google acts as an independent controller; Google's privacy policy applies (https://policies.google.com/privacy). This may involve a transfer to the USA; Google LLC is certified under the EU-US Data Privacy Framework. HEPLANO Build has no influence over this processing.

HEPLANO Build points out this online processing in the app before voice input is first used. Only after you have confirmed this notice does the app request the microphone permission and start recording. Voice input is voluntary and optional; you can type descriptions instead at any time. The legal basis for providing this feature is Art. 6(1)(b) GDPR. You can revoke the microphone permission at any time in the Android settings.

iOS

On iOS, on-device speech recognition is explicitly required. If it is not available for the language in use or for the specific device, speech recognition is not performed. In this case, there is no automatic fallback to processing via an online service.

The recognized text is then processed by HEPLANO Build and stored locally in line with the feature being used.

HEPLANO neither receives nor stores any audio, only the recognized text, and does not transmit the data captured within the app to any server of its own.

8. Biometric authentication

If you use the biometric app lock, authentication is carried out via the biometric function provided by the operating system.

HEPLANO Build does not receive any biometric characteristics such as fingerprints or facial data in the process.

The app only receives the result of whether authentication by the operating system was successful.

9. Local storage and security

The project data stored by HEPLANO Build is stored locally on your device.

The local database is stored in encrypted form. The key used for database encryption is kept protected in the device's secure system storage.

The app lock uses the security mechanisms provided by the operating system.

Exported or shared PDF and JSON reports and shared photos are not encrypted. For sharing and printing, the operating system briefly stores copies in the app's temporary storage; HEPLANO Build deletes them the next time the app starts. You are responsible for keeping exported files safe.

Manually created backups are additionally encrypted. Depending on the backup method chosen, encryption is performed using a password you set yourself or a randomly generated, device-bound key.

HEPLANO does not have access to the backup keys or passwords used.

10. Backup and restore

Backups are created exclusively by you, manually. HEPLANO Build does not create any automatic backups on its own servers.

The backup file is created locally and encrypted according to the backup method chosen.

If you choose your own backup password, you are responsible for keeping that password safe yourself. If you lose the password and no other means of recovery exists, HEPLANO cannot decrypt the backup.

Backup files you create are not automatically deleted by HEPLANO.

11. Deletion

You can individually delete photos, documentation entries, reports, defects, obstructions, and employees stored within the app using the features provided for that purpose.

Projects can be permanently deleted after being archived as intended.

Since HEPLANO Build does not operate its own servers to store project data, deleting data within the app does not delete any additional data held on HEPLANO servers.

Backup files you have created manually are not automatically deleted when you delete the corresponding data within the app. You are responsible for deleting such backup files yourself.

12. Retention

As a matter of principle, HEPLANO Build does not impose its own retention periods for your project data.

You decide yourself how long to keep or when to delete your locally stored project data.

To the extent statutory retention or documentation obligations apply to your business activity, you are responsible for complying with them yourself.

13. Your data protection rights

To the extent HEPLANO processes personal data as controller, you have, subject to the applicable legal requirements, in particular the right to:

Because the project data you store within the app is, as a matter of principle, processed exclusively locally on your device and HEPLANO has no access to it, HEPLANO cannot handle data-subject requests relating to that data on the user's behalf.

For personal data that you yourself capture within the app and process as part of your own business activity, you are, as a matter of principle, yourself responsible under data protection law.

To the extent HEPLANO processes personal data as controller, the legal basis depends on the purpose and is, in particular, performance of the usage agreement (Art. 6(1)(b) GDPR) or our legitimate interest in a secure, functioning app (Art. 6(1)(f) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.

HEPLANO itself processes personal data only in the following cases: (a) if you contact us by email (content, email address) so that we can handle your request (Art. 6(1)(b) or (f) GDPR); the data is deleted once the request is resolved, at the latest after two years, unless a retention obligation applies; (b) order information from Google Play (see section 3); (c) when you open heplano.com from within the app (server log files at our hosting provider, see the privacy policy at https://heplano.com/legal/privacy.html).

To exercise your rights of access, rectification, erasure, restriction, data portability and objection, contact dev@heplano.com. Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

14. No analytics or advertising services

HEPLANO Build does not use any of its own analytics or tracking services.

The app contains no personalized advertising.

HEPLANO does not create usage profiles for advertising or analytics purposes.

15. Third parties

HEPLANO Build does not transmit the project data stored within the app to HEPLANO servers or any other cloud services operated by HEPLANO.

Processing of personal data by third parties may occur in particular in connection with the respective app store through which the app is obtained or a Premium feature is purchased.

In addition, when using certain operating-system features — for example speech recognition or the share/export functions provided by the operating system — the respective providers or recipients selected by the user may carry out their own data processing.

The privacy policies of the respective providers or recipients apply to such data processing.

16. Minors

HEPLANO Build is aimed at commercial/professional users and is not specifically designed for children.

HEPLANO does not knowingly collect personal data from children for its own purposes.

17. International use

HEPLANO Build can generally also be used outside Germany, including in Switzerland. For users in Switzerland, the revised Swiss Federal Act on Data Protection (FADP/DSG) applies in addition to the principles described here; the statements above apply there accordingly.

Responsibility under data protection law for personal data that you yourself capture and process within the app is governed by the statutory provisions that apply to you.

Last updated: October 4, 2026

← Other HEPLANO apps  ·  Back to heplano.com