Privacy Policy

Learn how we collect, use, and protect your personal information.

Last updated: 5 August 2026

Information We Collect

Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your information when you use our mobile application (the "App"), which is available on iOS and Android platforms, and when you visit this website (the "Website"). This policy is compliant with the General Data Protection Regulation (GDPR). Unless a section explicitly refers to the Website, the sections below describe processing that takes place in the App; processing related to the Website is described in the "This Website" section.

Effective Date: 5 August 2026

We collect the following types of information:

Personal Information: Information you provide to us, such as your email address when submitting feedback via Wiredash.
Payment Information: Data related to in-app purchases and subscriptions, processed by RevenueCat.
Subscription & Purchase Events: When you consent to analytics, subscription lifecycle events (such as starting a trial, purchasing, renewing, or cancelling) are shared by RevenueCat with PostHog through a server-side integration, linked to your anonymous analytics identifier so we can measure conversion and revenue funnels. No payment card details are shared.
Crash Logs: Information about app errors and crashes, collected through Sentry.
Usage Statistics: Usage data to help us improve the app.
Heatmaps & Session Recording: Analytics data to help us improve your experience through Microsoft Clarity.
Feature Voting Data: Information you provide when voting for features or submitting feature proposals through UserOrient, including app version, build number, and subscription status.
App Usage Analytics: Detailed analytics about how you interact with the app, including screen views, button clicks, feature usage patterns, and activation milestones, collected through PostHog (hosted in the European Union). These analytics are tied to an anonymous, device-generated identifier rather than to your name or account, and include your subscription status (for example, whether you have an active premium subscription) so we can understand how features are used across free and premium users.
Device Information: Technical information about your device, operating system, and app version for debugging and optimization purposes.
Local Storage Data: Songs, loops, and user preferences stored locally on your device.

Data Controller

The data controller responsible for your information is:

Verena Zaiser
Reichenbachstr. 17
70372 Stuttgart

Email: support@repeatlab.de

Legal Basis for Processing

We process your data based on the following legal bases:

Your consent for feedback submissions via Wiredash and app analytics.
Performance of a contract for processing payments and managing subscriptions through RevenueCat.
Our legitimate interest in ensuring the App operates effectively by using Sentry for crash reporting.
Your consent for feature voting and user experience improvement through UserOrient.
Your consent for detailed analytics collection through Microsoft Clarity.
Your consent for anonymous product analytics collection through PostHog.

How We Use Your Information

We use the information we collect for the following purposes:

To process in-app purchases and manage subscriptions through RevenueCat.
To gather feedback and improve the App using Wiredash.
To monitor and fix issues using Sentry crash logging.
To improve user experience and enhance App features.
To improve the app through Microsoft Clarity analytics.
To understand feature usage and improve the app through PostHog product analytics.
To measure activation, conversion, and subscription funnels by combining anonymous product analytics with subscription events (PostHog together with RevenueCat), based on your consent.
To collect and process feature requests and votes through UserOrient.
To provide personalized app experiences and recommendations.
To ensure app stability and performance across different devices and platforms.

Data Retention

We retain your data for the following periods:

Analytics Data: Retained for up to 2 years for app improvement purposes.
Crash Logs: Retained for up to 1 year for debugging and stability improvements.
Feature Voting Data: Retained for up to 3 years to track feature development and user preferences.
Payment Information: Retained as required by RevenueCat and applicable financial regulations.
Local App Data: Stored on your device until you delete it or uninstall the app.

You can request deletion of your data at any time by contacting us at support@repeatlab.de or using the "Delete All Data" feature in the app settings.

Your Rights

Under the GDPR, you have the following rights:

The right to access the personal information we hold about you.
The right to request corrections to your personal information.
The right to request deletion of your personal information ("right to be forgotten").
The right to data portability.
The right to object to processing based on our legitimate interests.
The right to withdraw consent at any time.
The right to lodge a complaint with a supervisory authority.
The right to restrict processing of your data.
The right to be informed about data processing activities.

Consent Management

You can manage your consent preferences at any time:

Analytics Consent: You can enable or disable analytics collection in the app settings. When disabled, Microsoft Clarity and PostHog analytics are paused and the link that shares your RevenueCat subscription events with PostHog is removed, so your purchase events are no longer connected to your analytics identifier. Using the "Delete All Data" feature additionally resets your anonymous analytics identifier.
Crash Reporting: Crash reporting through Sentry operates based on our legitimate interest in app stability, but you can contact us to request its limitation.
Feature Voting: Participation in feature voting through UserOrient is optional and requires your consent.
Feedback Collection: Submitting feedback through Wiredash is voluntary and requires your consent.

Third-Party Services

We use third-party services to enhance our App:

Wiredash: Used to collect user feedback and bug reports. Data is processed according to Wiredash's privacy policy.
RevenueCat: Used to process in-app purchases and subscriptions. Payment data is processed according to RevenueCat's privacy policy. With your analytics consent, RevenueCat also shares subscription events (trials, purchases, renewals, and cancellations) with PostHog through a server-side integration, linked to your anonymous analytics identifier so we can analyse conversion and revenue. This sharing stops when you withdraw analytics consent.
Sentry: Used for error monitoring and crash reporting. Technical data is processed according to Sentry's privacy policy.
Microsoft Clarity: Used for analytics and user experience improvement. Usage data is processed according to Microsoft's privacy policy.
PostHog: Used for anonymous product analytics, including screen views, feature usage, and activation milestones, tied to an anonymous device identifier. With your consent it also receives subscription events from RevenueCat to build conversion and revenue funnels. Data is hosted in the European Union (eu.i.posthog.com) and processed according to PostHog's privacy policy.
UserOrient: Used for feature voting and user feedback collection. Feature voting data is processed according to UserOrient's privacy policy.

Each third-party service has its own privacy policy, and we recommend reviewing them for detailed information about how they process your data.

This Website

This section describes the processing that takes place when you visit this website (repeatlab.netlify.app), as distinct from the App.

No cookies and no consent banner. This Website does not set any cookies, and it does not store or read any information on your device (no local storage, no session storage, no device fingerprinting). For this reason no cookie consent banner is displayed. Nothing on this Website requires your consent under Section 25 of the German Digital Services Data Protection Act (TDDDG) or Article 5(3) of the ePrivacy Directive.

Server Log Data: This Website is hosted by Netlify, Inc. When you access a page, your browser automatically transmits data that is recorded in server log files: your IP address, the date and time of the request, the page requested, the referring URL, and your browser and operating system version. This data is required to deliver the Website and to ensure its stability and security. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Netlify acts as a processor on our behalf under a data processing agreement; where data is transferred outside the EEA, the transfer is safeguarded by EU Standard Contractual Clauses.
Website Analytics (TelemetryDeck): We use TelemetryDeck to understand, in aggregate, how this Website is used — for example, how many people view a page or click a store badge. TelemetryDeck is privacy-focused and cookieless: it does not set cookies, does not store anything on your device, and does not create a persistent identifier that would allow you to be recognised across sessions or websites. Identifying elements are irreversibly hashed with a rotating salt before they are stored, so the resulting statistics cannot be traced back to an individual. Data is processed on servers in the European Union. The legal basis is our legitimate interest in measuring and improving our own website under Article 6(1)(f) GDPR.
Fonts: The fonts used on this Website (Inter and Montserrat) are hosted on our own servers and delivered together with the page. No connection to Google Fonts or any other external font provider is established, and your IP address is therefore not transmitted to any font provider.
No Advertising or Social Media Trackers: This Website does not embed advertising networks, social media plugins, remarketing pixels, or similar third-party tracking technologies.

Links to the App Store and Google Play

The download buttons on this Website link to the Apple App Store and the Google Play Store. These links carry campaign parameters that tell us which of our own marketing channels a download came from — Apple campaign tokens (pt and ct) for the App Store, and a referrer value containing UTM parameters (utm_source, utm_medium, utm_campaign) for Google Play.

These parameters describe the link you clicked, not you. They contain no personal data, no identifier, and no information about your device, and nothing is stored on your device when the link is displayed or clicked. They are only transmitted once you actively click a button and are then evaluated in aggregate form in Apple's App Analytics and Google Play Console, so that we can see how many downloads originated from this Website. Once you follow such a link, you leave this Website and the privacy policy of Apple or Google applies to the further processing of your data. The legal basis for adding these parameters is our legitimate interest in measuring the effectiveness of our own marketing under Article 6(1)(f) GDPR.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication measures
Secure data storage practices

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR requirements through appropriate safeguards, such as:

Adequacy decisions by the European Commission
Standard contractual clauses
Other appropriate safeguards as required by GDPR

Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights under GDPR, please contact us at support@repeatlab.de

For data protection inquiries, you can also contact the relevant supervisory authority in your country.

Thank you for using our App!