Holiday Flow
Privacy
Your travel planning stays local in the app. Visiting this website generates technical connection data. This notice explains these two areas separately.
1. Controller and contact
AppManufaktur, owner André Jaszka, Rebhuhnweg 12, 59227 Ahlen-Vorhelm, Germany. Privacy enquiries: info@jaszka.com, phone +49 160 948 13 420.
2. Data in the app
Holiday Flow stores trip details, dates, leave allowance, German federal state, packing lists, packing preferences and settings locally in app storage (SharedPreferences). There is no developer-operated account or app server, advertising, analytics or tracking. We do not receive your trip or packing data. Local processing provides the planning features you request (Article 6(1)(b) GDPR); necessary local storage is covered by section 25(2)(2) TDDDG.
For the lock-screen widget on iOS, the app stores a copy of your next trip (title, destination country, dates and packing progress) in the device's widget storage (App Group). If you use the widget, this information is visible on the lock screen without unlocking; the copy stays on your device. The Android version has no widget and does not create this copy.
3. Calendar, reminders and export
Calendar access and notifications are optional and controlled by iOS or Android permissions; on Android these are “Calendar” (read and write) and “Notifications”. When calendar sync is enabled, the app writes your trip title and dates to your selected calendar. On Android it uses the system calendar storage and reads only the list of your calendars and its own trip events to keep them up to date. A calendar provider such as iCloud or Google Calendar may synchronise these entries according to your system settings. Reminders are scheduled locally; Holiday Flow runs no push service. On Android, the app reschedules planned reminders after the device restarts. You can change permissions in iOS or Android Settings.
You can export backups and calendar files and save or share them using the system share sheet. You choose the destination and recipients. Depending on device settings, operating-system backups may also contain app data, such as iCloud Backup or, on Android, the automatic backup to your Google Account. These copies are outside local app storage and subject to the selected provider's terms. Deleting data in the app does not delete previous exports, external calendar copies or older device backups.
4. App stores and Premium
Apple handles downloads, subscriptions and payments through the App Store/StoreKit. The app receives purchase and entitlement status to enable Premium; we receive no payment-card or bank-account details. Apple processes data under its privacy policy and acts as an independent controller for purchases.
On Android, Google handles downloads, subscriptions and payments through Google Play (Google Play Billing). The app receives purchase and subscription status from Google Play to enable Premium; we receive no payment-card or bank-account details. Google processes data under its privacy policy and acts as an independent controller for purchases.
5. Visiting holidayflow.jahaus.de
These static pages are hosted on our own server. Caddy serves them over HTTPS through a Cloudflare Tunnel. Our web server does not keep access logs. Delivering and protecting the connection nevertheless involves technical data such as IP address, request time, requested URL, browser information and connection data.
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, handles the connection as our processor (Article 28 GDPR). Data may also be processed in the USA and other countries. Our use is based on Article 6(1)(f) GDPR, our legitimate interest in a secure, reliable website. Cloudflare is certified under the EU-US Data Privacy Framework (checked on 27 September 2026). Cloudflare's data processing terms include provisions for the EU-US Data Privacy Framework and standard contractual clauses for relevant international transfers. See the Cloudflare privacy policy and data processing terms. We do not set one fixed retention period for all connection and security data processed there; retention depends on purpose and the rules described by Cloudflare.
This website sets no analytics or marketing cookies itself and uses no tracking or external fonts. Images and fonts load from this domain. There are no contact forms, embedded third-party videos or user accounts. When you follow external links, the respective provider's privacy information applies.
6. Email support
If you email us, we process your address, message and any voluntary attachments to respond. The basis is Article 6(1)(b) GDPR for contractual enquiries, otherwise our legitimate interest in responding under Article 6(1)(f). We delete correspondence once it is no longer needed, unless legal retention duties or legitimate grounds for legal claims require retention. Please avoid sending unnecessary personal travel details.
7. Retention, deletion and your rights
Local app data remains on your device until you delete it or remove the app and its data. Save any exports you wish to keep beforehand. We cannot remotely access or restore your local data.
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and portability. You can object to processing based on legitimate interests on grounds relating to your particular situation and withdraw consent for the future. You may complain to a data protection authority, including the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW). Contact us using the details above to exercise your rights. There are no automated decisions producing legal or similarly significant effects.