DE EN

Last updated

Privacy

We build apps without trackers and a website without profiles. This statement describes which data is processed nonetheless — and why. The first part covers this website; after that come sections for Stacco, Piuma, Mirino, Quitto and Tasto.

Last updated: 18 October 2026.

Controller

Sebastian Wiegemann
hyperzero
Promenadenweg 19b
45219 Essen
Germany

Email: [email protected]

What we don’t do

  • We do not set tracking cookies.
  • We do not use Google Analytics, Facebook Pixel, TikTok Tag, Hotjar or comparable profiling tools.
  • We do not sell data. There is no data we could sell.
  • We do not run a newsletter or a marketing email system.

Hosting

This website is delivered through Cloudflare Pages. When a page is requested, Cloudflare processes technical data (IP address, timestamp, requested URL, user-agent) that is required to operate a website. The processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in operating the website securely and reliably).

Cloudflare is a company based in the USA (Cloudflare, Inc.), so data may be transferred to the USA. The basis for this is the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR); Cloudflare is certified under it. We have data processing agreements (Art. 28 GDPR) with Cloudflare and with IONOS. Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/.

Fonts

The fonts of this website are served by the website itself, together with the pages. Your browser connects to no third party for them.

Reach measurement

We do not use any reach measurement — not even a cookieless one.

Server logs

hyperzero does not run a server of its own, does not store server logs itself and has no access to logs of individual visitors. When the pages are delivered, Cloudflare processes the technical data (IP address, timestamp, requested URL, user-agent) and retains it according to Cloudflare’s own retention periods. Those periods are set out in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/.

Appearance: light or dark

When you click the switch for light or dark mode at the top, your browser stores that choice in local storage (localStorage, entry hz-theme). This only happens once you use the switch. The entry stays on your device and is not sent to us. It is needed so the site looks the way you chose; you do not need to consent to it (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.

In the footer we link to our profiles on Bluesky, Instagram and X. These are plain links, not embedded content: nothing is transferred to these providers before you click. After the click, the privacy policy of the respective provider applies.

Email contact

If you write to us by email, we process the contents of the email and your email address to handle the request. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest in answering enquiries).

Our mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Emails to us are received and stored there.

Emails are deleted once the matter is resolved or, if tax or commercial retention obligations apply, archived for the duration of those obligations.

Contact form

On the contact page you can write to us through a form. For that we process your email address and your message, and your name only if you enter it. Without an email address we cannot reply. When you send the form, Cloudflare also processes your IP address for technical reasons (see the “Hosting” section).

We use these details only to answer your enquiry. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest in answering enquiries).

The form is processed through Cloudflare: Cloudflare receives the message, and the form forwards it immediately as an email to our mailbox at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). We do not store the message on the website itself, and we do not write its contents to any log. To protect against automated abuse, the form contains a hidden field and also sends how many milliseconds passed between loading the page and sending the form. This value is not stored.

The message is treated like an email: we delete it once the matter is resolved or, if tax or commercial retention obligations apply, archive it for the duration of those obligations.

Apps

Stacco, Piuma, Mirino, Quitto and Tasto each have a section of their own here. The controller is always the one named above.

Crash reports: If you allow sharing analytics with app developers in the settings of iOS, iPadOS or macOS, Apple may pass anonymised crash reports on to us. This runs solely through Apple; the reports contain nothing that would let us identify you. Without that permission we receive none.

Stacco

Last updated: 18 October 2026.

In short: Stacco does not process any personal data on hyperzero servers — there are no hyperzero servers. The app makes no internet connections: not for your notes, not for telemetry, not for anything else. No analytics, no tracking, no ad networks, no third-party crash reporting. Stacco does not build profiles, does not collect device IDs, and has no account and no sign-up.

Where your data lives: All notes — text, formatting, color, desktop position and the note history (earlier versions) — are stored in a local database inside the app’s sandbox on your Mac. None of it leaves the device. Stacco does not sync with iCloud or any other service.

Export and sharing — only on your command:

  • Save as Markdown or as a PNG image: opens the macOS save dialog; you choose the location.
  • Copy or copy as image: places the content on your clipboard.
  • Send to Apple Notes: hands the text to the Notes app on your Mac. What Apple Notes does with it (e.g. iCloud sync of your Apple notes) is governed by Apple’s privacy policy: https://www.apple.com/legal/privacy/.

Stacco never transmits anything on its own. The “More from hyperzero” link in Settings merely opens your browser at hyperzero.de.

AI connection — only if you switch it on: It is off by default. Switched on in Settings, Stacco accepts requests from AI apps running on the same Mac (for example Claude Code or the Claude app). For this Stacco listens only on your Mac’s internal address (127.0.0.1); the connection cannot be reached from your network or the internet, and every request needs the key from your settings. A connected app can create, read, change and file notes, but not delete them. What such an app reads it may pass on to its provider (for Claude, Anthropic). That provider’s privacy policy applies; hyperzero receives nothing. Switch the connection off and it closes at once. To set it up, Stacco puts the key only where you ask it to: on the clipboard (“Copy command”, “Copy settings”) or as the extension file Stacco.mcpb in your Downloads folder (“Add” for the Claude app). Treat it like a password: whoever has it can connect while the connection is switched on.

Purchase: Stacco is a paid app with no in-app purchases. The purchase is processed exclusively by Apple; payment and account information go directly to Apple. hyperzero receives no personal data and no payment data.

Deleting your data: Delete individual notes directly in the app. To remove everything, delete the app and also move the folder ~/Library/Containers/com.hyperzero.stacco to the Trash (step by step on the support page). Since hyperzero does not store any data about you, an access request under Art. 15 GDPR will regularly be answered with “no data on file”. For written confirmation, write to [email protected].

Privacy manifest for Apple: The app bundle contains the PrivacyInfo.xcprivacy file Apple requires. It names two system interfaces and their purpose: storing settings (UserDefaults, reason CA92.1) and measuring time intervals within the app (system boot time, reason 35F9.1). Both serve Stacco-internal functions only — not tracking, fingerprinting or profiling.

Data security: Notes live in the app’s sandbox; other apps have no access without your permission. With FileVault enabled on your Mac they are additionally encrypted on disk. Stacco never asks for passwords and never transmits any.

Piuma

Last updated: 6 October 2026.

In short: Piuma does not process any personal data on hyperzero servers — there are no hyperzero servers. What you write in your pad or clean from the clipboard with a shortcut stays on your Mac. The app has no network access: its sandbox holds no permission for internet connections. No analytics, no tracking, no ad networks, no third-party crash reporting, no profiles, no device IDs, no account.

Where your data lives: All blocks, the time machine, snippets and settings are stored inside the app’s sandbox on your Mac. Text recognition in images and scanned PDFs (Piuma Pro) runs through Apple’s Vision framework on the Mac — no image leaves your device.

iCloud sync (Piuma Pro only, optional): If you switch it on in Settings, Piuma syncs your blocks between your Macs through Apple’s iCloud key-value store — via your personal Apple account, never through a hyperzero server. Sync is off by default. Apple’s privacy policy applies to iCloud storage: https://www.apple.com/legal/privacy/.

Export and sharing — only on your command: Piuma saves content as a file (txt, md, pdf, rtf, html), copies it to the clipboard or hands it to the macOS share menu — each only when you trigger it. Saving uses the sandbox permission for user-selected files; you choose location and format.

Purchase: Piuma is free on the Mac App Store, with an optional one-time in-app purchase “Piuma Pro” ($4.99, no subscription). The purchase is processed exclusively by Apple; payment and account information go directly to Apple. hyperzero receives no personal data and no payment data.

Deleting your data: Delete individual blocks and snippets directly in the app. To remove everything, delete the app and also move the folder ~/Library/Containers/com.hyperzero.piuma to the Trash (step by step on the support page). If iCloud sync was on, that copy stays in your iCloud storage until you remove it there. An access request under Art. 15 GDPR will regularly be answered with “no data on file”; for written confirmation, write to [email protected].

Privacy manifest for Apple: The app bundle contains the PrivacyInfo.xcprivacy file. It names one system interface and its purpose: storing settings (UserDefaults, reason CA92.1) — not for tracking, fingerprinting or profiling.

Mirino

Last updated: 6 October 2026.

In short: Mirino does not process any personal data on hyperzero servers — there are no hyperzero servers. Scanning, text recognition (OCR), file-name suggestions and PDF creation run entirely on your iPhone or iPad; the Mac app displays your scans. Mirino contains no networking code of its own, no analytics, no tracking, no ads, no third-party crash reporting and no account.

Where your data lives: Your scans are stored in the app’s own database on your device.

iCloud sync (optional, off by default): If you switch it on, Apple syncs your scans between iPhone, iPad and Mac through the CloudKit container iCloud.com.hyperzero.mirino in your personal Apple account. This is the only way scans reach the Mac app. hyperzero cannot view, retrieve or delete this data. Apple’s privacy policy applies to iCloud storage: https://www.apple.com/legal/privacy/.

Sharing — only on your command: A file (PDF, or Word with the recognised text) is only created when you pass a scan on through the share menu. You decide where it goes.

Purchase: Three scans are free, then there is a one-time in-app purchase. The purchase is processed exclusively by Apple; payment and account information go directly to Apple. hyperzero receives no personal data and no payment data.

Deleting your data: Delete individual scans directly in the app; automatic deletion after a set period can be switched on in Settings (off by default). To remove everything, delete the app; with sync switched on, delete the iCloud data in your device’s settings under Apple Account › iCloud. An access request under Art. 15 GDPR will regularly be answered with “no data on file”; for written confirmation, write to [email protected].

Privacy manifest for Apple: The app, its widget and the Mac app each contain a PrivacyInfo.xcprivacy file. The app and the Mac app name two system interfaces and their purpose: storing settings (UserDefaults, reason CA92.1) and reading modification dates of the app’s own files (file timestamp, reason C617.1). The widget names only the first. None of it serves tracking, fingerprinting or profiling.

Quitto

Last updated: 6 October 2026.

In short: Quitto does not process any personal data on hyperzero servers — there are no hyperzero servers. What you capture — receipt photos and PDFs, recognised text, date, amount, category, vendor — stays on your device or, if you switch on sync, in your personal iCloud account. hyperzero has no access to it. No analytics, no tracking, no ad networks, no third-party crash reporting, no profiles, no device IDs, no account.

Where your data lives: All receipts are stored in a database on the device, receipt photos and PDFs in the app’s own storage. The widgets and the share extension read receipt figures from a shared storage area on the same device; this data does not leave the device either.

iCloud sync (optional, off by default): If you switch it on, Apple syncs your receipts including photos and PDFs between your devices through the CloudKit container iCloud.com.hyperzero.quitto in your personal Apple account. hyperzero cannot view, retrieve or delete this data. Apple’s privacy policy applies to iCloud storage: https://www.apple.com/legal/privacy/.

Text recognition and e-invoices — on your device: Text recognition uses Apple’s Vision framework and runs entirely on the device. Quitto also reads XRechnung and ZUGFeRD locally. The optional category suggestion uses Apple Intelligence on the device.

Exchange rates (ECB): On launch, Quitto fetches the public reference rates of the European Central Bank (ecb.europa.eu) at most every six hours. Only public rate data is downloaded — no receipt, user or device data is transmitted. For technical reasons the ECB receives your device’s IP address. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in current rates for the conversion). Apart from that, Quitto only talks to Apple (iCloud, if switched on, and the App Store).

Purchase: Monthly and yearly subscriptions and the one-time purchase are processed exclusively by Apple; payment and account information go directly to Apple. Quitto verifies purchases with StoreKit 2 on the device, not through hyperzero servers. hyperzero receives no personal data and no payment data.

Export, backup, deletion: Through export you can create a CSV spreadsheet, a CSV with DATEV account mapping or the tax-advisor package (ZIP) at any time. A backup (.quittobackup) is encrypted with your password by default; encryption happens on the device, hyperzero does not know your password — if it is lost, the backup cannot be restored. To delete everything locally, delete the app. Delete iCloud data in your device’s settings under Apple Account › iCloud › Quitto. An access request under Art. 15 GDPR will regularly be answered with “no data on file”; for written confirmation, write to [email protected].

Privacy manifest for Apple: The app, its widgets and the share extension each contain a PrivacyInfo.xcprivacy file. They name two system interfaces and their purpose: storing settings and exchanging them with the widgets and the share extension on the same device (UserDefaults, reasons CA92.1 and 1C8F.1) and — in the app only — reading modification dates of the app’s own receipt files (file timestamp, reason C617.1). None of it serves tracking, fingerprinting or profiling.

Tasto

Last updated: 6 October 2026.

Tasto is coming soon as a direct download. This section describes how it will work then.

In short: Tasto is a menu-bar program that remaps keys in the Finder. It collects no user data and has no account, no analytics, no tracking, no ads and no third-party crash reporting. What you type is neither stored nor sent. Tasto only reacts while the Finder is frontmost.

“Accessibility” permission: Tasto needs it to intercept keystrokes in the Finder and to detect whether you are currently typing a name or a search term. This check runs locally on your Mac. None of it leaves the device.

Update check (can be switched off): Once a day, Tasto fetches the file https://hyperzero.de/tasto/version.json and shows you a notice if there is a new version. The request contains no user data and no identifier. For technical reasons Cloudflare processes your IP address (see the “Hosting” section; legal basis Art. 6 (1) lit. f GDPR, legitimate interest in an update check without a server of our own). We do not see the IP address. You can switch the check off in Tasto’s settings; then no request is made.

Download through Gumroad: Tasto is not on the Mac App Store but a direct download through Gumroad (Gumroad, Inc., USA). Gumroad is the seller (merchant of record) and processes payment and buyer data under its own responsibility, including for the free download. From Gumroad we receive the email address of the person who downloaded or bought Tasto. We do not use it for advertising and send no newsletter. What else Gumroad processes is set out in its privacy policy: https://gumroad.com/privacy.

Tasto Pro (when Tasto Pro is available): Tasto Pro is meant to be bought once through Gumroad. You receive a license key from Gumroad. When you enter it in Tasto, Tasto sends the key once to Gumroad’s license interface (api.gumroad.com) to verify it. For technical reasons Gumroad processes your IP address in the process. Afterwards the unlock stays stored on your Mac, even without an internet connection.

Deleting your data: Tasto stores its settings (and, with Pro, the license key) locally on your Mac. To remove them, delete the app and move the file ~/Library/Preferences/com.hyperzero.tasto.plist to the Trash. Apart from the email address from the Gumroad purchase, hyperzero holds no data about you. You can get access under Art. 15 GDPR and erasure of that address at [email protected]; for the data at Gumroad, its privacy policy applies.

Zeugnis demo

At hyperzero.de/zeugnis-demo there is a preview of a separate project. It is not a hyperzero product and none of the apps above.

What happens to your input: Everything you enter in the demo stays exclusively in your browser (localStorage). The demo also sets up an offline store (service worker) so it starts without a connection. Nothing is transmitted to us: the demo only fetches its own files from this website (the page, icons, the service worker and the small version file stand.txt), loads nothing from third parties and sends none of your input. For fetching those files, the “Hosting” and “Server logs” sections apply, as for the rest of the website.

Deleting: The data sits in your browser’s website data for hyperzero.de. Delete it there (in Safari under “Settings” → “Privacy” → “Manage Website Data”, in other browsers in the settings under cookies and site data); that removes your input and the offline store too. You do not need to consent to this storage because it is needed for the function you are using (§ 25 (2) no. 2 TDDDG).

Please do not enter real student data. The demo is meant for trying things out, with sample data.

Your rights

You have the right at any time to:

  • Access the data stored about you (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Erase your data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR, see the next section)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

There is no automated decision-making or profiling (Art. 22 GDPR).

Please direct enquiries to: [email protected]

The supervisory authority responsible for North Rhine-Westphalia is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany

Your right to object

You can object to the processing of your data. Where processing is based on a legitimate interest (Art. 6 (1) lit. f GDPR), you have the right, on grounds relating to your particular situation, to object at any time (Art. 21 (1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

We do not advertise; an objection to direct marketing (Art. 21 (2) and (3) GDPR) is therefore mentioned only for completeness. An objection needs no particular form — an email to [email protected] is enough.

Changes to this statement

If legal requirements change or we make technical adjustments, we update this statement. The current date is shown above under “Last updated”.