Werkbank Privacy Policy

1. Controller

Send privacy requests to cosmo@cittasana.de. No data protection officer has been appointed.

2. Local app data

Werkbank processes the tasks, projects, life and responsibility areas, labels, time records, customer and pipeline data, and related settings that you enter on your device. This data is used solely for the productivity, planning and analysis features you choose.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the app. Settings and technically necessary diagnostic states are processed under Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the app.

3. iCloud synchronisation

When iCloud is available for Werkbank and your Apple Account, Werkbank can synchronise its data between your devices using Apple CloudKit. The data is held in the private iCloud area of your Apple Account; we do not operate a server for this and cannot access your content. Availability, storage and transmission are also governed by your Apple settings and Apple’s privacy terms.

4. Microphone and speech recognition

Voice input starts only after your action and requires the system permissions for microphone and speech recognition. Werkbank does not store the audio. If your device supports on-device recognition for the selected language, Werkbank requires local processing. Otherwise, Apple may process the audio on its servers. Werkbank stores only the resulting text if you choose to use it as app content.

5. Calendar

Calendar access is used only after you grant permission. Werkbank can then read calendars and events you select and create, update or delete focus blocks. Calendar data remains in your chosen system calendar and its accounts; Werkbank does not transmit it to a service operated by us.

6. GitHub integration

GitHub is optional. If you connect your account, Werkbank communicates directly with the GitHub API to load your profile, repositories, issues, pull requests and comments, and to send status changes or comments that you initiate. The access token is stored in Apple Keychain. API responses may be cached locally for offline use; disconnecting GitHub removes the token and cache from Werkbank.

GitHub is responsible for its own processing under its terms. Its privacy statement explains which data GitHub processes and whether data may be transferred outside the EEA.

7. Local breakdown, analysis and system features

Task breakdown and time analysis in the released app run locally using rules or Apple technologies available on the device. Werkbank does not send task or project data to us for these features. Notifications, widgets, Live Activities and App Intents use Apple system features and are controlled through your system permissions.

8. Support requests

If you contact us by email, we process your email address, name, message, voluntary attachments and technically necessary communication data. We do so to handle your request under Article 6(1)(b) GDPR and to document communication and prevent misuse under Article 6(1)(f) GDPR.

Support communication is generally deleted twelve months after the request is closed, unless statutory retention duties or the establishment, exercise or defence of legal claims require longer storage.

9. Visiting this website

These Werkbank pages are hosted on cittasana.de. The Cittasana website privacy policy additionally applies to technical access data, cookies and optional website analytics. Website processing is separate from data held in the Werkbank app.

10. Retention and deletion in the app

Local Werkbank data remains stored until you delete it in the app or remove the app and its data. With iCloud synchronisation enabled, deletion may be propagated to synchronised devices according to your Apple configuration. Content you submitted to GitHub may also need to be deleted on GitHub.

11. Your rights

Subject to the GDPR, you have rights including access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time for the future. You may also complain to a competent data protection authority. The Bavarian State Office for Data Protection Supervision is generally the competent authority for us.

Werkbank does not make decisions producing legal or similarly significant effects based solely on automated processing.

12. Changes

We update this policy when features or legal requirements change. The current version is always available on this page.