Privacy Policy

1. Controller

The controller responsible for data processing on the website at getkommand.com and in the Kommand macOS app is:

Ümit Gül
Kaiserstraße 157
53113 Bonn, Germany
Email: legal@foldandwire.com

2. Hosting and server logs

This website is hosted by Vercel. When you visit the website, the hosting provider processes technically required data, in particular your IP address, date and time of access, requested page, referrer, browser type, and operating system. We need this data to provide the website securely and reliably.

The legal basis is Art. 6(1)(f) GDPR. For more information, see the Vercel Privacy Policy

3. Cookies and consent

This website does not set cookies and does not store advertising or analytics identifiers on your device. Information on your device is accessed only to the extent strictly necessary to deliver the website (Section 25 of the German TDDDG). For this reason, this website does not need a cookie banner.

4. Analytics

We use Vercel Analytics and Vercel Speed Insights to understand how the website is used and how fast it loads. Both services work without cookies and without cross-device identifiers; usage and performance data such as page views and Web Vitals are processed in a data-minimizing form. The legal basis is Art. 6(1)(f) GDPR.

5. Google Ads conversion tracking

We use Google Ads conversion tracking to measure whether a click on an ad leads to a visit to the App Store. The Google tag on this website runs in Google Consent Mode with all storage for advertising and analytics purposes denied by default. No advertising cookies are set; Google may process technical signals and modeled conversions.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in measuring advertising effectiveness). More information: Google Privacy Policy

6. Feedback form

You can send us feedback and feature requests through the feedback form on this website. We process the content you enter (summary, details), optionally uploaded screenshots, and optionally your email address if you would like a reply. Submissions are stored access-protected with Vercel (Vercel Blob) and delivered to us by email via the delivery service Resend.

To protect the form against automated submissions we use Cloudflare Turnstile. Cloudflare processes technical data of your browser to verify that the submission comes from a human. This access is strictly necessary for the secure operation of the form (Section 25(2) TDDDG). More information: Cloudflare Privacy Policy

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving our product and preventing abuse). We delete submissions once they have been handled and no follow-up is required.

7. Contact by email

If you contact us by email, we process your information exclusively to handle your request. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR. We delete this data once it is no longer required and no statutory retention obligations apply.

8. Data processing in the Kommand macOS app

8.1 Error reporting (Sentry)

The app uses Sentry for technical error reporting. Only data necessary to analyze and fix errors is processed, such as stack traces, app version, and operating system version. No keyboard input and no contents of your shortcuts are transmitted to Sentry. Processing takes place on Sentry's EU infrastructure (data region Germany). The legal basis is Art. 6(1)(f) GDPR.

8.2 Usage analytics (TelemetryDeck)

The app uses TelemetryDeck, an analytics service by TelemetryDeck GmbH, based in Berlin, Germany. TelemetryDeck processes data exclusively on servers in the EU and does not store IP addresses; user identifiers are anonymized (hashed) before transmission, so the data cannot be traced back to you.

Only pseudonymous usage events are transmitted: app launch (with bucketed usage counts), onboarding completion, adding an app and creating a shortcut (in each case only the bundle ID of the third-party app concerned), practice-mode usage, changes to the “Launch at login” setting, display of the upgrade screen, and app version and license tier (free/pro). The contents of your shortcuts — titles, key combinations, and category names — are never transmitted.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving the app — in particular, learning which applications we should provide built-in shortcut libraries for. More information: TelemetryDeck Privacy Policy

8.3 iCloud sync

Your apps, shortcuts, and categories are synchronized between your Macs via iCloud (Apple CloudKit). This data is stored in the private database of your personal iCloud account with Apple; we as the developer have no access to it. Processing by Apple is governed by the Apple Privacy Policy

9. Transfers to third countries

Some of the service providers we use (Vercel, Google, Cloudflare, Resend, Apple) are based in the USA or process data there. Transfers are based on adequacy decisions of the EU Commission, in particular the EU-US Data Privacy Framework, or on standard contractual clauses pursuant to Art. 46 GDPR. TelemetryDeck processes data exclusively in the EU; Sentry processes error reports on servers in the EU (data region Germany).

10. Retention

We store personal data only for as long as necessary for the respective purpose:

• Server logs are automatically deleted by the hosting provider after a short period.
• Feedback submissions are deleted once they have been handled and no follow-up is required.
• Email correspondence is deleted once the request has been resolved and no statutory retention obligations apply.
• Error reports are deleted by Sentry according to its retention periods (generally a maximum of 90 days).
• Analytics data exists only in pseudonymous or aggregated form.

11. Your rights

Under the GDPR you have in particular the right to access, rectification, erasure, restriction of processing, data portability, and objection.

• Access to the personal data we process about you
• Rectification of inaccurate data
• Erasure of your data, unless statutory obligations prevent it
• Restriction of processing
• Data portability
• Objection to processing based on Art. 6(1)(f) GDPR

To exercise your rights, please contact: legal@foldandwire.com

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
www.ldi.nrw.de

13. Changes to this privacy policy

We update this privacy policy when legal requirements, our website, the app, or the services we use change. The current version published on this page always applies.