Privacy Policy – Crema
Applies to the app „Crema" (iPhone · iPad). Last updated: 17 September 2026. This website itself is covered by the general aix-hsg.de privacy policy.
1. Controller
AIX HSG UG (haftungsbeschränkt)
Pfarrer-Gursky-Ring 11, 52499 Baesweiler
Represented by: Holger Jansen, Raimund Engels
E-Mail: apple@aix-hsg.de
2. Principle
The app does not need an account with us. We run no server for it, receive none of your content, and use no analytics, tracking, or advertising tools.
3. What data the app processes
Your capsule entries (name, brand, system, intensity, flavours, stock, rating, notes), optional photos you take, and settings.
4. Storage
All entries and photos are stored in a database on your device. There is no server sync.
If you delete the app, iOS removes all data it stored locally.
5. Product data from Open Food Facts
When you scan a barcode, the app queries the Open Food Facts product database (Open Food Facts, France) for product name, brand, and image. Only the barcode number and, as technically required, your IP address are transmitted; Open Food Facts' privacy policy applies. The legal basis is our legitimate interest in convenient entry (Art. 6(1)(f) GDPR).
6. Permissions
Camera: to scan barcodes, take capsule photos, and match colours. Analysis happens on device.
7. Downloads, purchases, and crash reports via Apple
The app is distributed through Apple's App Store. Apple processes data such as your Apple Account and purchase receipts under its own responsibility and privacy policy. In-app purchases are handled entirely by Apple — we receive no payment data, only the anonymous confirmation that a purchase is valid, and only on your device.
If you have enabled "Share with App Developers" in your device settings, Apple provides us with anonymized crash and usage statistics. You control this yourself in system settings.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Where data only exists on your device, you exercise these rights directly in the app or by deleting the app. You may withdraw any consent at any time with effect for the future.
You may lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
9. Changes
If a new version of the app processes data differently, we update this policy beforehand. The current version is always available at this address.