Privacy Policy

Note: This privacy policy is a draft containing placeholders (TODO:). It correctly describes the structure of this website's data processing, but must be completed with the real operator details (controller, data processing agreements) before going live. No claim to completeness, not legal advice.

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

TODO: Name / company
TODO: Address
Email: hello@robomi.app

2. Waitlist / Beta sign-up

When you sign up for the Robomi iOS beta through the form on this website, we collect the following data:

Data processed: your email address and the time of sign-up.
Purpose: to inform you about the status of the Robomi beta and send you your TestFlight access once it's ready.
Legal basis: your consent pursuant toArt. 6(1)(a) GDPR, which you give by checking the confirmation checkbox when submitting the form.
Withdrawal: You can withdraw your consent at any time, informally, e.g. via the unsubscribe link in an email from us or by messaginghello@robomi.app. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Storage period: We store your email address until you withdraw consent or the purpose no longer applies (expected to be at the end of the beta phase or the switch to regular App Store operation). TODO: define and enter the concrete maximum retention period / deletion routine.

Technically, your sign-up is either forwarded to our email service provider Loops (see section 3) or, if that is not configured, stored as an interim solution directly in a Cloudflare Workers KV data store operated by our hosting provider (email address, timestamp, consent status). In both cases, only the data listed above is processed.

3. Data processor: Loops

We use the service Loops (Loops, Inc.) to send emails as part of the beta waitlist. Your email address is transmitted to and processed by Loops for this purpose.

TODO: Conclude a data processing agreement (DPA) with Loops pursuant to Art. 28 GDPR (if not already in place) and reference it here.
TODO: Verify Loops' registered office / server location and enter it here. If processing takes place in a third country (e.g. the US): name and link the applicable adequacy decision or appropriate safeguards (e.g. EU Standard Contractual Clauses).

4. Hosting: Cloudflare

This website is hosted and delivered via Cloudflare (Cloudflare, Inc.) (Cloudflare Pages / Workers). When you access the website, Cloudflare processes technically necessary data such as IP address, date and time of access, and user agent, in order to deliver the website reliably and securely (functional server logs, DDoS protection).

TODO: Review/attach the data processing agreement with Cloudflare and document any transfer of data to third countries (adequacy / Standard Contractual Clauses) here.

5. Cookies & Local Storage

This website does not currently use tracking or analytics cookies. Your light/dark theme preference is stored in your browser's localStorage — this information never leaves your browser and is not transmitted to us. TODO: update this section if analytics or marketing cookies are introduced in the future (incl. consent banner).

6. Your rights as a data subject

Subject to applicable law, you have the right at any time to:

Access the personal data we hold about you (Art. 15 GDPR),
Rectification of inaccurate data (Art. 16 GDPR),
Erasure of data we hold about you (Art. 17 GDPR),
Restriction of processing (Art. 18 GDPR),
Data portability (Art. 20 GDPR), and
Objection to our processing of your data (Art. 21 GDPR).

Simply contact us at hello@robomi.app. You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.TODO: name and link the competent supervisory authority (based on the controller's state/region).