Privacy policy

This page explains which personal data Ideenfunke processes, why, for how long, and what rights you have.

1. Controller

Nicole Reinhold (sole proprietor), Krönerstraße 3, 49525 Lengerich, Germany

Email: hallo@nicole-reinhold.eu

2. Your account and signing in

For an account we store your email address, a display name if you choose one, your role and the date you signed up. If you set a password, we store it only as an irreversible hash — nobody, including us, can read it. Signing in by link uses single-use sign-in tokens.

The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). The data is kept until you delete your account.

3. Creating ideas and "My ideas"

When you create ideas, we process what you enter — your topic or affiliate product, your audience, the platform (Instagram or TikTok) and whether your post is advertising — plus the generated hooks, the hook you chose, the reel script, caption and call to action. We keep these results under "My ideas" so you can find them again, until you delete your account.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

4. Artificial intelligence (AI provider)

The texts are written by an AI. For that we send your topic, your audience, the platform, the "advertising yes/no" setting and the hook you chose to our AI provider Anthropic PBC (USA). We do not send your name, email address or purchases. Please do not enter data about other people into these fields.

This is a transfer to a country outside the EU. It relies on the safeguards the provider offers for it (in particular EU standard contractual clauses under Art. 46(2)(c) GDPR, or the EU-US Data Privacy Framework where the provider is certified). The legal basis for the processing is the performance of the contract (Art. 6(1)(b) GDPR).

For cost control we store only numbers for each AI call — time, model, amount, outcome — never your input or the generated text. These entries are deleted after 12 months; if you delete your account they remain without any link to it.

5. Purchase and billing via Digistore24

You buy the subscription through Digistore24 GmbH (Germany). Digistore24 is your contracting party for the purchase and is itself responsible for the order form, payment, invoice, VAT and the withdrawal notice; Digistore24's privacy policy applies to that.

So that we can unlock your subscription, Digistore24 sends us the purchase data: order number, product, amount, currency, your email address, your first and last name, whether you are in the EU, and later payments, cancellations and refunds. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our statutory retention duty (Art. 6(1)(c) GDPR).

• Order and invoice data is kept as long as German tax and commercial law requires (§ 147 AO, § 257 HGB, up to ten years). If you delete your account it therefore remains — only without any link to your account.
• The complete technical message from Digistore24 about each purchase is kept for 60 days so that problems with unlocking can be investigated. It is then deleted automatically.

6. Emails

We send sign-in links and confirmations by email through a mail service provider, which receives your email address and the content of the message. [The name and location of the mail service provider will be added before launch.] We do not send marketing emails.

7. Hosting

The app and its database run at a hosting provider which technically has access to all data named here and acts as our processor (Art. 28 GDPR). [The name and location of the hosting provider will be added before launch.]

8. Security

• IP addresses: we count failed sign-in attempts per IP address for 15 minutes to prevent password guessing. The address is held in working memory only and is not stored. The legal basis is our legitimate interest in a secure service (Art. 6(1)(f) GDPR).
• Error log: the server briefly keeps the latest error messages in working memory to find faults. Email addresses and other identifiers are removed first; everything is gone on restart.

9. Cookies

We only set cookies the app needs: for signing in, your language and light or dark mode (§ 25(2) TDDDG). We use no tracking, no analytics tools and no advertising cookies — which is why there is no cookie banner.

10. Our access to your account

For support questions we can temporarily sign in as you to reproduce your problem. Every such access is logged with its time and included in your data export. These log entries are deleted after 12 months. The legal basis is our legitimate interest in working support (Art. 6(1)(f) GDPR).

11. No automated decisions

Ideenfunke makes no decisions about you that have legal effects or similarly significantly affect you (Art. 22 GDPR).

12. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on our legitimate interest (Art. 21 GDPR).

• Download your data: any time yourself under "My account", as a file.
• Delete your account: also under "My account". What remains afterwards is described above (order data, because of the retention duty).
• For anything else, write to hallo@nicole-reinhold.eu. We answer within one month.

You may also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).