2026-05-31

Privacy Policy for ShoeTracker

Effective Date: May 2026

1. Controller

Mathias Todisco

Wilmersdorfer Str. 122-123

10627 Berlin

Germany

Email address: hello [at] todisco [dot] de

Phone: +49 179 8174113

Imprint: Imprint

2. Introduction

ShoeTracker is an iOS app that keeps an eye on the mileage of your running shoes. The protection of your personal data is important to us. This privacy policy informs you about the processing of your data when using our app.

3. Data Processing

3.1 Local Data Storage

ShoeTracker is a completely local app. We collect and process the following data exclusively on your device:

Shoes: Name, brand, model, size, price, photo, distance and time limits, purchase date, notes
Workouts: Activities imported from Apple Health and their assignment to your shoes
Assignment rules: Self-defined rules for which shoe is assigned to which activity type
App settings: Monthly goal, unit of measurement, view and sorting preferences

Important:

All data is stored exclusively locally on your device
No cloud synchronization – your data never leaves your device
No user account – no registration is required
No trackers or analytics tools – we do not collect any usage data for advertising or marketing purposes
No advertising – the app is ad-free

3.2 Apple Health (HealthKit)

With your explicit permission, ShoeTracker reads workouts from Apple Health in order to assign the distances and times you cover to the right shoes.

Read access: Distance, duration, activity type, heart rate, calories, elevation gain and – where available – the GPS route of your workouts
Local processing only: This data is processed exclusively on your device and used to display it in the app
No write access: ShoeTracker does not write any data back to Apple Health
No transmission: Health data is never transmitted to us or to third parties
You can revoke access at any time in the Health app or in the iOS settings

3.3 Photo Access (optional)

When you assign a photo to a shoe, you select it via the iOS photo picker. The selected image is stored only locally in the app and is not transmitted.

3.4 Feedback Function (optional)

If you use the optional feedback function in the app, the following data is transmitted to our server (api.todisco.de, hosted in Germany):

Required information: Category, subject, message, timestamp, language setting
Optional information: Email address (only if you provide it)
Device information (optional): Device model, iOS and app version (only if you consent to transmission)

Important:

The feedback function is completely optional
Your shoe, workout and health data is never transmitted
The data is used exclusively to process your feedback

3.5 Error Reports (Crash and Error Telemetry)

To be able to fix bugs and crashes, the app transmits technical error reports in release builds to our self-hosted GlitchTip server at tip.todisco.de (hosted in Germany, no third-country transfer).

What is transmitted:

Crash reports: Stack traces, threading information, affected modules/functions
Error events: Error type, error message, timestamp, context tag (e.g. „start-sync”)
Device context: Device model, iOS version, app version, free/available memory, language setting
Performance samples: a small share of app transactions (screen load times, navigation performance)
Breadcrumbs: Anonymized steps (e.g. „start sync triggered”), to provide error context

What is NOT transmitted:

No health data (never leaves the device)
No shoe or workout content
No unique device IDs beyond what Sentry/GlitchTip automatically hashes (device-app-hash, no IDFA)

Technical details:

Based on the Sentry Cocoa SDK (open source)
Backend: GlitchTip (open-source alternative to Sentry), self-hosted by us in Germany
Session tracking is disabled

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a functional, error-free app).

Retention: Error reports are stored for a maximum of 90 days and then automatically deleted.

4. Legal Basis for Processing

Art. 6 para. 1 lit. b GDPR (Contract fulfillment): Provision of app functions
Art. 6 para. 1 lit. a GDPR (Consent): Access to Apple Health and use of the optional feedback function
Art. 6 para. 1 lit. f GDPR (Legitimate interest): Error reports to ensure app functionality

5. Data Sharing

Your data is not shared with third parties. Network communication only occurs with our own servers in Germany: api.todisco.de (feedback) and tip.todisco.de (error reports). Your health, shoe and workout data is never transmitted.

6. Data Storage and Deletion

6.1 Storage Duration

Your data is stored locally on your device as long as you use the app. You have full control over your data at all times.

6.2 Deletion

Individual shoes or workouts: delete in the app
All data: uninstall the app from your device
Health access: revoke at any time in the Health app or in the iOS settings

7. Your Rights

Right of Access (Art. 15 GDPR): All data is directly viewable in the app
Right to Rectification (Art. 16 GDPR): Edit shoes and assignments directly in the app
Right to Erasure (Art. 17 GDPR): Delete data directly in the app
Right to Lodge a Complaint: With the competent data protection supervisory authority

8. Data Security

We take appropriate technical and organizational measures to protect your data:

Local storage under iOS security mechanisms
Minimal network communication (only error reports)
Health data processed only with explicit permission and exclusively locally

iOS Security: Your data benefits from iOS sandboxing and device encryption.

9. No Profiling

There is no automated decision-making or profiling according to Art. 22 GDPR.

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy. The current version can always be found at:

https://todisco.de/en/shoetracker-privacy

11. Contact

Email: hello [at] todisco [dot] de

Address: Mathias Todisco, Wilmersdorfer Str. 122-123, 10627 Berlin, Germany

Note for users outside the EU:

This privacy policy is primarily based on the EU General Data Protection Regulation (GDPR). Users from other regions may have corresponding rights under local privacy laws.