HEPLANO Build — Privacy Policy
Last updated: September 20, 2026
1. Data controller
The controller responsible for the processing of personal data in connection with HEPLANO Build is:
HEPLANO
Owner: Jürgen Heuft
Heinrich-Heine-Str. 15
50389 Wesseling
Germany
Email: dev@heplano.com
2. Data processing at a glance
HEPLANO Build is a locally operating application for documenting construction and work progress.
The project data you enter within the app is, as a matter of principle, processed and stored exclusively locally on your device. HEPLANO does not operate its own servers or cloud synchronization for this project data.
HEPLANO Build does not use any of its own tracking or analytics services and no personalized advertising.
The project data stored within the app is not transmitted to HEPLANO.
3. Internet connection and app store
HEPLANO Build itself does not establish a connection to any servers or cloud services of its own and does not transmit project data to HEPLANO.
An internet connection may be required to purchase or unlock the Premium version. The purchase is processed through the respective app store.
For the planned Android version, the purchase will be processed via Google Play once it is published in the store. A later iOS version may be offered via the Apple App Store.
HEPLANO does not receive complete payment data such as credit card or bank account details as part of the purchase. Payment processing is carried out by the respective app store operator.
The respective app store operator's own privacy policy applies to any processing of personal data it carries out.
4. Permissions
HEPLANO Build only uses the device permissions required for the respective functions.
Depending on the feature used and the platform, the following permissions in particular may be required:
- Camera
- Microphone
- Biometric authentication
These functions are only used once you actively invoke the respective feature. The app does not access the camera or microphone already at app launch.
HEPLANO Build does not require access to location, contacts, calendar, SMS, or phone functions.
The permissions displayed by the respective operating system may vary depending on the platform and operating system version.
5. Camera and photos
If you use the camera function of HEPLANO Build, photos can be taken for project documentation purposes and stored within the app.
Photos are stored locally on your device and are not transmitted by HEPLANO to any server of its own.
HEPLANO Build does not specifically read a photo's EXIF metadata, such as any GPS information that may be present, and does not use it for its own purposes.
To the extent such metadata is part of a stored image file, it may remain in the file.
If you share a photo with third parties via the operating system's own share, export, or send functions, this metadata may be transmitted together with the photo to the respective recipient. You are responsible for any such disclosure yourself.
Construction site photos may incidentally show uninvolved third parties, for example other trades, passers-by, or vehicle license plates, in addition to your intended documentation. You, as the person taking the photo, are responsible for creating and using such images. Please pay particular attention to the right to one's own image of affected individuals (under German law, §§ 22, 23 Kunsturhebergesetz) and to the GDPR requirements for processing third parties' personal data. Where possible, avoid capturing identifiable individuals or license plates when this is not necessary for the documentation, and obtain consent from affected individuals where required before creating or sharing such images.
6. Employees and working hours
If you add employees within the app to track their working hours, you process personal data relating to those employees — in particular their name and day-by-day start, end, and break times per project. This data is stored exclusively locally on your device and may become part of PDF or JSON reports that you create and share yourself.
You, as the employer or contracting party, are yourself responsible under data protection law for this processing, in particular with regard to the information obligations towards your employees under Art. 13 GDPR and, where applicable to you as an employer, the requirements for processing employee data under German law (§ 26 BDSG) or the equivalent provisions applicable to you. HEPLANO itself never receives or processes this data.
You can completely delete individual employees and their working-time entries within the app at any time (see section 11).
7. Voice input
HEPLANO Build may use the speech recognition provided by the operating system for certain features. The app does not store audio recordings.
Android
On devices running Android 12 or higher, the operating system's on-device speech recognition is used, provided it is available for the language in use.
If on-device speech recognition is not available, HEPLANO Build uses the operating system's standard speech recognition with a preference for offline processing. However, this preference is not a guarantee of exclusively local processing.
In this case, speech recognition may also be processed via an online service, depending on the device, operating system, language, and the respective provider's settings. HEPLANO Build has no influence over this processing.
iOS
On iOS, on-device speech recognition is explicitly required. If it is not available for the language in use or for the specific device, speech recognition is not performed. In this case, there is no automatic fallback to processing via an online service.
The recognized text is then processed by HEPLANO Build and stored locally in line with the feature being used.
HEPLANO does not receive any voice recordings and does not transmit the voice data captured within the app to any server of its own.
8. Biometric authentication
If you use the biometric app lock, authentication is carried out via the biometric function provided by the operating system.
HEPLANO Build does not receive any biometric characteristics such as fingerprints or facial data in the process.
The app only receives the result of whether authentication by the operating system was successful.
9. Local storage and security
The project data stored by HEPLANO Build is stored locally on your device.
The local database is stored in encrypted form. The key used for database encryption is kept protected in the device's secure system storage.
The app lock uses the security mechanisms provided by the operating system.
Manually created backups are additionally encrypted. Depending on the backup method chosen, encryption is performed using a password you set yourself or a randomly generated, device-bound key.
HEPLANO does not have access to the backup keys or passwords used.
10. Backup and restore
Backups are created exclusively by you, manually. HEPLANO Build does not create any automatic backups on its own servers.
The backup file is created locally and encrypted according to the backup method chosen.
If you choose your own backup password, you are responsible for keeping that password safe yourself. If you lose the password and no other means of recovery exists, HEPLANO cannot decrypt the backup.
Backup files you create are not automatically deleted by HEPLANO.
11. Deletion
You can individually delete photos, documentation entries, reports, defects, obstructions, and employees stored within the app using the features provided for that purpose.
Projects can be permanently deleted after being archived as intended.
Since HEPLANO Build does not operate its own servers to store project data, deleting data within the app does not delete any additional data held on HEPLANO servers.
Backup files you have created manually are not automatically deleted when you delete the corresponding data within the app. You are responsible for deleting such backup files yourself.
12. Retention
As a matter of principle, HEPLANO Build does not impose its own retention periods for your project data.
You decide yourself how long to keep or when to delete your locally stored project data.
To the extent statutory retention or documentation obligations apply to your business activity, you are responsible for complying with them yourself.
13. Your data protection rights
To the extent HEPLANO processes personal data as controller, you have, subject to the applicable legal requirements, in particular the right to:
- access information about the processing of your personal data,
- rectification of inaccurate data,
- erasure,
- restriction of processing,
- object to certain processing,
- data portability, to the extent the legal requirements for this are met.
Because the project data you store within the app is, as a matter of principle, processed exclusively locally on your device and HEPLANO has no access to it, HEPLANO cannot handle data-subject requests relating to that data on the user's behalf.
For personal data that you yourself capture within the app and process as part of your own business activity, you are, as a matter of principle, yourself responsible under data protection law.
To the extent HEPLANO processes personal data as controller, the legal basis depends on the purpose and is, in particular, performance of the usage agreement (Art. 6(1)(b) GDPR) or our legitimate interest in a secure, functioning app (Art. 6(1)(f) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.
14. No analytics or advertising services
HEPLANO Build does not use any of its own analytics or tracking services.
The app contains no personalized advertising.
HEPLANO does not create usage profiles for advertising or analytics purposes.
15. Third parties
HEPLANO Build does not transmit the project data stored within the app to HEPLANO servers or any other cloud services operated by HEPLANO.
Processing of personal data by third parties may occur in particular in connection with the respective app store through which the app is obtained or a Premium feature is purchased.
In addition, when using certain operating-system features — for example speech recognition or the share/export functions provided by the operating system — the respective providers or recipients selected by the user may carry out their own data processing.
The privacy policies of the respective providers or recipients apply to such data processing.
16. Minors
HEPLANO Build is aimed at commercial/professional users and is not specifically designed for children.
HEPLANO does not knowingly collect personal data from children for its own purposes.
17. International use
HEPLANO Build can generally also be used outside Germany, including in Switzerland. For users in Switzerland, the revised Swiss Federal Act on Data Protection (FADP/DSG) applies in addition to the principles described here; the statements above apply there accordingly.
Responsibility under data protection law for personal data that you yourself capture and process within the app is governed by the statutory provisions that apply to you.
Last updated: September 20, 2026