Privacy Policy

Responsible in the sense of the GDPR:

Michael BeckerOssietzkystraße 28 25524 ItzehoeEmail: make_it_louder@icloud.comPhone: +49 156 78759587Authorized representative: Michael Becker

ChubbNote is a web application for recording, transcribing and structuring voice and music notes. This privacy policy describes the processing of personal data when using the app.

Processing is carried out by the controller named above.

• Account data: email address, optionally name, password (hashed by the platform)
• Content data: audio recordings, transcriptions, titles, tags, chords, BPM, sections
• Sharing data: email addresses of shared persons
• Consent and request data
• Technical data (IP address) may be processed by the platform

• App provision & note management: Art. 6(1)(b) GDPR (contract performance)
• Transcription & AI structuring: Art. 6(1)(b) GDPR
• Sharing notes: Art. 6(1)(a) GDPR (consent)
• Authentication: Art. 6(1)(b) GDPR
• Consent management & requests: Art. 6(1)(a) / (c) GDPR

• Base44 (Plattform-Hosting, Datenbank, Authentifizierung)
• OpenAI (Transkription, LLM)
• Google (OAuth-Login, optional)
• PayPal (Spenden, optional)

AI processing (transcription, LLM) is carried out via OpenAI in the USA. Google OAuth and PayPal also process data outside the EU. Where third-country transfers take place, this is based on appropriate safeguards (e.g. standard contractual clauses) or explicit consent. The controller must review and document the specific safeguards.

Active Base44 region: [BASE44 REGION – vom Betreiber in den Einstellungen zu bestätigen]

Diese App verarbeitet möglicherweise personenbezogene Daten außerhalb der EU.

Personal data is only transmitted to AI providers insofar as this is necessary for the respective function (transcription/structuring). API keys are kept server-side only.

• Notes & audio: Bis zur Löschung durch den Nutzer
• Account: Bis zur Account-Löschung
• Consents: Bis zum Widerruf, mindestens jedoch 3 Jahre (Nachweiszwecke)
• Privacy requests: 3 Jahre (Nachweiszwecke)

Verschlüsselte Übertragung (TLS); Zugriffssteuerung durch Row-Level-Security. Nutzer sehen und bearbeiten ausschließlich ihre eigenen Daten (RLS, serverseitig erzwungen). Authentifizierung über die Base44-Plattform (E-Mail/Passwort, optional Google OAuth).

ChubbNote uses only necessary functions by default. Optional cookies/tracking (statistics, marketing, AI/third-party) are only activated after explicit consent via the cookie banner. The selection can be changed at any time via the cookie settings. No optional tracking is carried out without consent.

• Art. 15 Access
• Art. 16 Rectification
• Art. 17 Erasure
• Art. 18 Restriction of processing
• Art. 20 Data portability
• Art. 21 Objection

These rights can be exercised in the privacy center ("Privacy & my data") or by email to the controller.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

Via the privacy center you can export your data as JSON, delete all your content and request the deletion of your account. Full account deletion is carried out after review by the controller.

For privacy inquiries contact: make_it_louder@icloud.com