Privacy policy

Last updated: October 20, 2026

This is a translation. Only the German version is legally binding.

1. Controller

KI Momentum GmbH, Im Breitenweingarten 7F, 78354 Sipplingen, Germany
Represented by its managing director, Tobias Peuker
Email: info@ki-momentum.de

2. The TandemLoop app

We do not collect any personal data through the app. TandemLoop has no user account, no server of its own, no analytics or tracking tools, and no advertising.

  • Your content (tasks, projects, views, settings) is stored by the app exclusively as files in a folder you choose yourself—on your device or in your iCloud Drive. We have no access to it. Syncing via iCloud is subject to Apple’s privacy policy.
  • Notifications, widgets, Spotlight, and Shortcuts process your content only locally on your device.
  • Diagnostic data: The app may store technical diagnostics from the operating system (e.g., crash reports) locally on your device; they are not transmitted to us. If you have agreed in your system settings to share analytics data with app developers, Apple provides us with anonymized crash reports and usage statistics.
  • Share menu (iPhone, iPad): If you share a web address with TandemLoop, the app may retrieve the page title directly from that address. In doing so, the operator of that website necessarily receives your IP address for technical reasons.
  • AI agents: TandemLoop contains no AI of its own. If you work with an AI tool (e.g., Claude Code, Codex, Cursor) that accesses your data folder, the processing is governed by the terms of the respective provider. You choose and control these tools yourself.
  • Purchases and subscriptions are handled exclusively by Apple through the App Store. We do not receive any payment data or information about you personally, only aggregated sales reports.

3. This website

Cookies and local storage: If you choose a language using the language switch at the bottom of the page, the website stores this choice in the cookie “tl_lang” for one year so that you get the home page in your language. Your decision in the “Privacy settings” window is stored by your browser in local storage (localStorage, entry “tl_einwilligung”), not in a cookie; we ask again after twelve months. Both entries contain only the respective choice. Storing them is technically necessary to provide the function you requested (Section 25(2) No. 2 TDDDG).

We ask visitors from the EU, the EEA, the United Kingdom, and Switzerland for their consent. For this purpose, Vercel determines the country from your IP address when you visit; the website only receives whether consent must be requested and does not store the country. The legal basis is our legitimate interest in complying with the applicable requirements (Art. 6(1)(f) GDPR). You can change or withdraw your decision at any time with effect for the future via “Cookie settings” at the bottom of every page (Art. 7(3) GDPR).

Analytics with Google Analytics: Only if you consent to statistics in the “Privacy settings” window do we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics stores cookies (e.g., “_ga”, for up to two years) and records which pages you visit, where you came from, your approximate location, device, and browser. Google Analytics 4 does not store IP addresses. We use the data only to understand how the website is used; it is deleted after 14 months. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Without your consent, the website loads nothing from Google.

Hosting: Vercel (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) provides the website. When you visit it, Vercel processes technically necessary data such as your IP address, the time of access, the page visited, your browser, and your operating system in server logs in order to deliver the website and protect it against misuse. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). We use Vercel as a processor (Art. 28 GDPR). A transfer to the USA is possible; Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition.

4. Contact by email

If you send us an email, we process your address and the content of your message in order to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the data once it is no longer required for this purpose and no statutory retention obligations prevent deletion.

5. Your rights

Under the GDPR, you have the right to

  • access to the data processed about you (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interests (Art. 21),
  • withdraw your consent at any time with effect for the future (Art. 7(3)).

To exercise these rights, a message to info@ki-momentum.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

No automated decision-making, including profiling (Art. 22 GDPR), takes place.