HEPLANO Flow — Privacy Policy
Last updated: September 20, 2026
1. Data controller
The controller responsible for the processing of personal data in connection with HEPLANO Flow is:
HEPLANO
Owner: Jürgen Heuft
Heinrich-Heine-Str. 15
50389 Wesseling
Germany
Email: dev@heplano.com
2. Data processing at a glance
HEPLANO Flow is a locally operating application that helps you build and follow through on daily routines, step by step.
Your routines, schedules, completed runs, statistics, and settings are processed and stored exclusively locally on your device. HEPLANO does not operate its own servers or cloud synchronization for this data. There is no user account and no login.
HEPLANO Flow does not use any of its own tracking or analytics services and no personalized advertising.
The data stored within the app is not transmitted to HEPLANO.
3. Internet connection and app store
HEPLANO Flow itself does not establish a connection to any servers or cloud services of its own and does not transmit app data to HEPLANO.
An internet connection may be required to purchase a Premium subscription or the Premium one-time unlock. The purchase is processed through the respective app store (Google Play or the Apple App Store) once the app is published there.
HEPLANO does not receive complete payment data such as credit card or bank account details as part of the purchase. Payment processing is carried out by the respective app store operator.
The respective app store operator's own privacy policy applies to any processing of personal data it carries out.
4. Permissions
HEPLANO Flow only uses the device permissions required for the respective functions.
Depending on the platform, the following permissions in particular may be required:
- Show notifications (for reminders)
- Schedule exact alarms, and reschedule already-configured reminders after a device restart
HEPLANO Flow does not require access to camera, microphone, location, contacts, calendar, SMS, or phone functions.
The permissions displayed by the respective operating system may vary depending on the platform and operating system version.
5. Reminders and notifications
If you set up a reminder for a routine, HEPLANO Flow schedules a local notification or local alarm on your device for it, using the mechanisms provided by the operating system.
These reminders are managed exclusively on your device; they are not transmitted to HEPLANO or to any external push service.
6. "Today" home screen widget (Android)
If you use the home screen widget, HEPLANO Flow reads and writes the data required for it (e.g. which routines are due today) exclusively locally on your device, via the widget interface provided by the operating system.
This data is not transmitted to HEPLANO.
7. Share feature
At your request, HEPLANO Flow can generate an image summarizing your progress (e.g. streak or consistency). This image is created exclusively locally on your device.
Only once you actively use the share feature does HEPLANO Flow hand the image to the share sheet provided by the operating system. Where the image is passed on from there is your own decision.
8. Local storage and security
The data stored by HEPLANO Flow (routines, schedules, completed runs, settings) is stored locally on your device in a database.
This database itself is not additionally encrypted; protection is provided by your operating system's app sandbox.
9. Backup and restore (Premium feature)
Backups are created exclusively by you, manually. HEPLANO Flow does not create any automatic backups on its own servers.
When creating a backup, you set your own password, which is used to encrypt the backup file (Argon2id for key derivation, AES-256-GCM for encryption). HEPLANO does not store or manage this password.
If you lose the password, HEPLANO cannot decrypt the backup — no recovery mechanism without the password is provided.
You store and manage the backup file yourself, e.g. in your device's file system. HEPLANO Flow does not delete it automatically.
10. Deletion
You can archive or permanently delete individual routines within the app.
Since HEPLANO Flow does not operate its own servers for this data, deleting data within the app does not delete any additional data held on HEPLANO servers.
Backup files you have created manually are not automatically deleted when you delete data within the app. You are responsible for deleting such backup files yourself.
11. Retention
HEPLANO Flow does not impose its own retention periods for your data.
You decide yourself how long to keep or when to delete your locally stored data.
12. Your data protection rights
To the extent HEPLANO processes personal data as controller, you have, subject to the applicable legal requirements, in particular the right to:
- access information about the processing of your personal data,
- rectification of inaccurate data,
- erasure,
- restriction of processing,
- object to certain processing,
- data portability, to the extent the legal requirements for this are met.
Because the data you store within the app is processed exclusively locally on your device and HEPLANO has no access to it, HEPLANO cannot handle data-subject requests relating to that data on the user's behalf.
To the extent HEPLANO processes personal data as controller, the legal basis depends on the purpose and is, in particular, performance of the usage agreement (Art. 6(1)(b) GDPR) or our legitimate interest in a secure, functioning app (Art. 6(1)(f) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.
13. No analytics or advertising services
HEPLANO Flow does not use any of its own analytics or tracking services.
The app contains no personalized advertising.
HEPLANO does not create usage profiles for advertising or analytics purposes.
14. Third parties
HEPLANO Flow does not transmit the data stored within the app to HEPLANO servers or any other cloud services operated by HEPLANO.
Processing of personal data by third parties may occur in particular in connection with the respective app store through which the app is obtained or a Premium feature is purchased.
In addition, when using the share feature provided by the operating system, the recipients selected by the user may carry out their own data processing.
The privacy policies of the respective providers or recipients apply to such data processing.
15. Minors
HEPLANO Flow is aimed at a general audience and is not specifically designed for children.
HEPLANO does not knowingly collect personal data from children for its own purposes.
16. International use
HEPLANO Flow can generally also be used outside Germany, including in Switzerland. For users in Switzerland, the revised Swiss Federal Act on Data Protection (FADP/DSG) applies in addition to the principles described here; the statements above apply there accordingly.
Last updated: September 20, 2026