Privacy Policy

Controller and scope

This policy describes the processing of personal data on witt-software.com and in the Witt Software apps listed here. The controller is Daniel Witt, Hochhorst 2, 24229 Schwedeneck, Germany. For privacy questions, contact info@witt-software.com.

Surf Buddy and surfbuddyapp.com are covered by the separate Surf Buddy privacy policy. The features available in other apps depend on their version, platform, and your settings.

Purposes and legal bases

I process personal data as necessary to provide the website, respond to your requests, and administer purchases and licenses. Contract-related requests and services are based on Article 6(1)(b) GDPR. Secure website operation, protection against abuse, and other general inquiries are based on Article 6(1)(f) GDPR; my legitimate interests are providing a reliable service and communicating with people interested in my products. Statutory retention obligations are based on Article 6(1)(c) GDPR. Newsletter processing is based on your consent under Article 6(1)(a) GDPR.

The sections below distinguish between data received by me or my service providers and content an app processes on your device or in your personal cloud account. Granting an operating-system permission does not, by itself, give me access to your files, contacts, keystrokes, or recordings.

Website, hosting, and connection data

The website is hosted by manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany. Requests for pages, images, downloads, and update information require the processing of connection data. This can include your IP address, date and time, requested address, HTTP status, amount of data transferred, browser and operating system, and the referring page if your browser supplies it. Server logs support operation, troubleshooting, and protection against attacks. IP addresses can be personal data.

The website does not use its own analytics or advertising trackers to record your browsing behavior. This does not exclude the connections to external services described below. Data is transmitted over HTTPS. See manitu’s privacy policy for information about the hosting provider.

Language and necessary cookies

When you explicitly select a language, the website stores your choice in a cookie for one year. Without a saved choice, the language is determined from your browser’s request; unsupported languages fall back to English.

The support form also uses a session cookie named witt_support. It associates the security check with your session and protects against forged requests. It is configured as a session cookie; how long your browser restores a session depends on its settings. The arithmetic challenge is checked on the website’s own server without an external CAPTCHA service.

These storage operations support functions you request and are exempt from the consent requirement under section 25(2)(2) of Germany’s TDDDG. You can delete or block cookies in your browser, which may affect language selection and the support form. External services may use their own cookies, as described below.

Support, contact form, and email

If you contact me, I process your email address, name, message, and the information you submit, such as the app, device, or subject of your request. Uploaded attachments are also processed and forwarded to support by email with your message. Hosting and email providers participate in the technical processing.

Please send only the information needed to handle your request and remove unnecessary personal data from sample files and screenshots. Required form fields are needed to respond; additional details and attachments are optional. The retention criteria described below apply.

Newsletter

I use Direct Mail by e3 Software, LLC, 1166 East Warner Road, Suite 101, Gilbert, AZ 85296, USA, for subscriptions and delivery. When you subscribe, your email address, information from the subscription form, and technical subscription data are sent to this service. They are used to manage your subscription, deliver newsletters, and process unsubscribe requests.

You can withdraw your consent at any time for future processing, using the unsubscribe link in a newsletter or by emailing me. Your address will then no longer be used to send the newsletter. Records of consent or an unsubscribe request may be retained where necessary to demonstrate lawful processing or honor your objection. Further information is available in Direct Mail’s privacy policy.

Purchases, prices, and license recovery

Direct purchases are handled by Paddle. Your browser may contact Paddle for current prices as soon as a price area is displayed. Paddle receives connection data, including your IP address and browser information. Opening the purchase dialog also loads Paddle’s script. For orders, payments, taxes, fraud prevention, and support, Paddle processes additional data such as your email address, country, billing details, and payment information. Paddle may use its own service providers and cookies.

For license recovery, the email address you enter is sent to Paddle to locate associated orders. I process the order and contact data necessary for license administration and order support. Paddle’s privacy policy explains the relevant Paddle entities, recipients, and retention periods.

Purchases through Apple, Microsoft, or Setapp are also subject to the respective provider’s privacy information: Apple, Microsoft, and Setapp. Depending on the distribution channel, apps need connections to the provider to verify purchases or licenses. Direct app downloads and update checks also contact the relevant download server, generating connection data.

External content and links

On the press page, the small website icons beside article links are loaded through Google’s favicon service. Google receives your IP address, technical browser data, and the domain name of the linked publication. See Google’s privacy policy. The legal notice page also loads an image from manitu, establishing a connection to manitu.

Links to app stores, social networks, press articles, or the press kit lead to other websites. Following a link allows the respective provider to process data under its own privacy terms. Locally stored product videos on this website are served by the website’s own web server.

iCloud in the apps

The following apps use Apple’s iCloud or CloudKit for synchronization in versions that support iCloud. This requires a signed-in Apple Account and the relevant iCloud settings. Synchronization may therefore already be active without you setting up a separate cloud account inside the app.

• Link Cluster: saved links, clusters and their relationships, associated descriptions, notes, and stored preview data or images.
• Image Stack: editing profiles and profile collections with their settings, including images you save as overlays in a profile. Original images selected for batch processing are not themselves part of this profile synchronization.
• Rocket Typist: text and image snippets, abbreviations, macros, folders, and associated settings. In versions that support folder sharing, selected content can be shared through iCloud with people you invite. These people can see and, depending on their permissions, edit the shared content.
• Remote Wake Up: saved devices and commands, such as names, network addresses, MAC addresses, ports, and other connection settings. Saved credentials are managed separately in Keychain.
• PDF Protector: encryption profiles with names and permission settings. PDF passwords you explicitly choose to save are managed separately in Keychain and are not part of ordinary profile data.
• PDF Squeezer: compression profiles and their settings in Apple-platform versions that support profile synchronization. PDFs selected for compression are not part of this profile synchronization. This does not apply to the Windows version.

Data is transferred between your devices and Apple and stored in your iCloud account. This private synchronization does not give me a copy of your content on my own server. Content you explicitly share with other people or send to me, for example for support, is handled separately.

Apple encrypts iCloud data in transit and at rest. Whether data is additionally end-to-end encrypted and who controls the keys depends on the data category and account settings. Access by Apple is therefore not excluded for all data categories. See Apple’s iCloud data security overview and Apple’s privacy information.

You can manage iCloud for each app in system settings. Simply turning synchronization off does not automatically delete previously stored cloud data. Follow the app’s and Apple’s guidance when deleting data, since changes can also propagate to other devices. Ending a share does not remove copies that other people have already made.

Keychain, cloud files, and backups

Remote Wake Up can store saved login credentials, PDF Protector can store PDF passwords you choose to remember, and Rocket Typist can store an external AI API key in Apple Keychain. If you use iCloud Keychain, these entries can synchronize through Apple to your other devices. They are not stored on a separate Witt Software server. When connecting to a target device or AI service, the required credentials are used for authentication.

Independently of built-in synchronization, your operating system’s backups can include app data. Files you open or save in iCloud Drive or another cloud folder are also subject to that storage provider’s settings and terms.

Files, websites, and network features

PDF Squeezer, PDF Protector, PDF Text Include, and Image Stack process documents and images you select on your device for their respective editing functions. This processing does not require uploading the original files to a Witt Software server. The cloud features described above, storage locations you select, and support attachments are separate. Screenshot Path manages the location of your screenshots; a cloud folder you select may be synchronized by its provider.

Link Cluster contacts saved websites to retrieve items such as titles, images, previews, or web content. The target address and connection data may reach the relevant website and its embedded services. Those services’ privacy terms apply.

Remote Wake Up, Network Radar, and Net Radar process information such as device addresses, names, and query results for their network features. They contact the devices or network services you select. Features such as DNS or Whois lookups also send the queried names or addresses to the services involved. For SSH connections, Remote Wake Up sends login information and commands to the target device you configure.

Readable Voice processes audio, text, and, where applicable, speaker profiles on your device for recording, transcription, and supported local language features. Microphone access requires system permission. Sharing or exporting recordings and transcripts uses the feature or destination app you choose. Profile synchronization in other apps, as described here, does not mean Readable Voice automatically sends your recordings to me.

Rocket Typist: keyboard and Smart Snippets

To recognize abbreviations and insert snippets, Rocket Typist processes keystrokes on your device. Recognition keeps the current input buffer it needs; it does not create a permanent keystroke log for me. On macOS, this requires the relevant system permissions. On iPhone and iPad, you use the Rocket Typist keyboard; its permissions and access to saved snippets are managed by the operating system. Snippets you create remain stored and can synchronize as described above.

Smart Snippet processing depends on the selected AI provider and app version. When you use OpenAI, the prompt and resolved macro content are sent to OpenAI. This can include text or clipboard content you insert. Retrieving available models also contacts the provider. The configured API key is used for authentication, and the provider also receives technical connection data. See OpenAI’s privacy policy and its information on API data processing.

In versions with a configurable API endpoint, your chosen service receives these requests instead of OpenAI. Check its privacy terms before sending confidential content. In versions supporting Apple’s local AI model, this text generation takes place on your device. Inserting an ordinary snippet without external AI does not require sending its content to an AI provider.

The interactive Rocket Typist demo on this website processes your input only in your browser. It does not send demo text to an AI service or to me.

Error reports and diagnostics

If you send me an error report, it can include technical information about the app version, device, operating system, and error, as well as your optional comments and contact details. Please review a report or log before sending it. Diagnostic and crash reports you share through your operating system or an app store are also subject to that provider’s settings and privacy information.

Older app versions may still contain Microsoft App Center components. Microsoft retired the Analytics and Diagnostics service on June 30, 2026. See Microsoft’s retirement information.

Recipients and processing outside the EU

Where necessary for the relevant purpose, recipients include hosting and email providers, newsletter and purchase providers, and the cloud, network, or AI services you use. Authorities or other parties receive data only where a legal basis exists. Not every provider acts solely on my behalf: app stores, payment providers, and your own cloud or AI provider may also process data as independent controllers.

International providers may process data outside the EU or EEA, particularly in the United States. Such processing is subject to Articles 44 onwards of the GDPR. Depending on the provider, adequacy decisions or appropriate safeguards such as standard contractual clauses may apply. The linked provider information explains their processing locations and safeguards; you can also ask me about the safeguards relevant to a particular processing operation.

Retention and deletion

Personal data is retained only as long as necessary for its purpose or to meet legal obligations or establish, exercise, or defend legal claims. Relevant criteria include handling support requests and necessary follow-up, operating and securing the service for technical logs, and fulfilling contracts and statutory retention obligations for order data. Data is then deleted or anonymized.

The relevant sections and provider information also apply to newsletters, cookies, and data held by external providers. You manage content on your device, in backups, and in your cloud account through the app, operating system, and provider. A request to me cannot delete data I cannot access myself; I can help you identify the appropriate deletion method.

Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, and data portability. You can object to processing based on legitimate interests for reasons relating to your particular situation, and object to direct marketing at any time. You can withdraw consent at any time for future processing, without affecting the lawfulness of processing before withdrawal.

Contact info@witt-software.com to exercise your rights. You may also complain to a data protection supervisory authority, particularly where you live or work or where the alleged infringement occurred. The authority responsible for my location is the Independent Centre for Data Protection Schleswig-Holstein (ULD).