Privacy
in Erinnerungskiste.

01 / Controller

Who processes your data.

The controller for processing personal data in Erinnerungskiste is Erik Lelek, trading as Extraara.

This notice applies to the Erinnerungskiste app and this information page. Services from Apple or other providers you choose are also subject to their own privacy notices.

02 / Local memories

Your memories on your device

The app stores original recordings, selected photos, transcripts and your own text in its protected local storage. This includes details you add, such as titles, people and places, as well as recording date, language, file identifiers and processing status. This data enables playback, search, editing and restoration of your collection.

Recording requires microphone access. You select photos through the iOS photo picker; the app receives the files you choose. Existing file metadata, such as capture time or location information in a photo, may be retained and included in exports or sharing. Erinnerungskiste requests neither GPS nor address-book access.

The app uses iOS file protection. It has no additional app lock: someone who can use your unlocked device can also open the app. Transcripts do not replace original recordings.

We do not operate a server for your memory content. The app includes no advertising, tracking or external analytics SDKs. We do not use your recordings or text to train AI models. Optional transfers through Apple services are described below.

Your memories may contain confidential information about you and others. Before recording or sharing, decide what you want to capture or disclose, and respect the rights of the people concerned.

03 / Speech to text

Speech to text

Under “Transcripts on this iPhone”, you can enable automatic transcription. Speech recognition processes saved recordings on your device. If needed, iOS downloads a language model from Apple; your recording is not sent to an external speech-recognition service for this transcription.

Previously saved recordings may also be transcribed after activation. Turning transcription off stops further automatic processing but does not remove existing transcripts. If iCloud synchronisation is enabled, completed transcripts are then synchronised as part of the memory. They may be included in a selected copy shared with family.

04 / iCloud synchronisation

Optional iCloud synchronisation

Synchronisation is initially off. If you enable and confirm it under “Your iCloud”, the app transfers saved memories, including audio, photos, text and associated metadata, to your Apple account’s private CloudKit database. The recycle bin is synchronised too. Data can then be available on other devices using the same Apple account.

For this purpose, the app processes iCloud login status, an account identifier supplied by Apple and technical synchronisation information. These details are also stored locally to associate changes and detect account switches. They are not part of memory exports. The app never receives your Apple password.

When an Apple account change is detected, synchronisation is turned off. You must activate it again before the local archive is transferred to the other account. You can continue locally while offline; pending changes are transferred during a later synchronisation.

Turning it off does not delete copies. Existing data remains on the device and in iCloud. To remove a memory from the private iCloud archive too, its permanent deletion must be successfully transferred while synchronisation is enabled. Details are under Export and deletion.

Storage and protection in iCloud depend on Apple’s service and your account settings. Erinnerungskiste adds no end-to-end encryption of its own. Information about Apple’s processing is in the Apple privacy policy and the iCloud data security overview.

05 / Family boxes

Shared family boxes

Family boxes use private or shared CloudKit areas. You choose which memories to add. Transfers include complete copies with the original recording, photos, existing transcripts, your notes and metadata. The family box’s name and storytelling prompts entered there are also stored with Apple.

Sharing uses Apple’s invitation management. The box is not publicly accessible. Once an invitation is accepted, invitees can view or contribute according to their permissions. Apple account information, such as the display name, may be visible to others during invitations and collaboration.

The shared copy is independent of the private original. Later changes or deletion in your private box do not automatically change the family copy. Shared memories must be removed separately from the family box. You can change permissions or end sharing through share management.

Content downloaded for viewing is temporarily cached on the device. The app clears this cache when changing or leaving the family box and again at startup. Anyone who deliberately imports a memory into their private box or copies it elsewhere retains an independent copy. Revoking sharing later cannot retrieve such copies.

06 / Calendar & notifications

Calendar and notifications

Prompts after selected events

If you want calendar prompts, iOS requests full calendar access. The app locally reads upcoming events for the next 30 days so you can select individual events. It remembers the identifier and time of selected events. Erinnerungskiste does not transfer this calendar data to Extraara or a family box.

The technical permission is broader than your subsequent selection. You can deselect events or revoke calendar access in iOS settings. Independent synchronisation of calendars by their providers is unaffected.

Optional reminders

With your permission, the app schedules local notifications, such as a storytelling prompt, anniversary or reminder after a selected event. Scheduling extends no more than 60 days ahead and is updated when you use the app. It uses your settings, times and, where relevant, a memory or event identifier.

Visible notifications contain a general prompt, not transcripts, names, places or calendar titles. There is no Extraara push service for this. You can turn off prompts in the app or all notifications in iOS settings. Microphone and calendar permissions can also be changed there at any time; doing so does not delete existing content.

07 / App Store & TestFlight

App Store, subscriptions and TestFlight

Apple subscriptions

If an Apple subscription for Erinnerungskiste exists or existed, the app reads the transaction and subscription status verified by Apple through StoreKit. This lets it display existing entitlements and subscription management. Management and cancellation take place through Apple. Existing memories and their export remain available after cancellation.

Apple processes the associated account, purchase and payment data under its own terms. The app requests no card or bank details and uses no additional purchase-management service. Local subscription status is not sent to Extraara together with memory content.

Diagnostics and beta versions

The app contains no analytics service of its own. Apple’s diagnostic and distribution functions are separate. Depending on your Apple settings and distribution method, technical crash reports or aggregate app statistics may become available to us. We use them to fix errors and improve reliability.

If you use a beta through TestFlight, Apple processes device and usage information, crash reports and feedback you send, among other data. Apple provides us as developers with relevant test data; depending on the invitation, this may include your name and email address. Feedback screenshots and text may contain personal content. Further details are provided by Apple on TestFlight and privacy.

Processing by Apple

Apple receives data for the Apple services you use; invited people also receive data in family sharing. Apple’s privacy notices govern its own account, store and diagnostic services. Depending on the service, Apple may process data outside the European Economic Area. Apple describes safeguards, including adequacy decisions and standard contractual clauses, in its privacy policy. We do not promise that iCloud storage is exclusively European.

08 / Export & deletion

Export, retention and deletion

Local memories and recycle bin

Your collection remains stored until you remove content. Nothing in the recycle bin is deleted automatically. Only a separate permanent deletion removes files from the local archive. Removing a photo from a memory does not delete the original in your photo library.

Private iCloud copies

When synchronisation is enabled, permanent deletions are transferred to iCloud and then to connected devices. This requires successful synchronisation. Technical deletion markers containing the memory identifier remain without audio, photos or text so deleted content is not reimported. These markers currently have no automatic expiry; they remain part of the archive or cloud area.

Shared content

Family copies are retained independently and deleted separately. Ending a share does not remove files already privately imported or exported by others.

Export and restoration

“Export all memories” creates a ZIP file containing original audio, photos, text and metadata. Existing drafts and recycle-bin content are included. The ZIP file is not password-protected. You choose the storage location or recipient. The app removes the temporary export copy after the share dialogue closes or at the next startup. Copies you save yourself remain. Importing a backup stores its content locally again and may also transfer it to iCloud if synchronisation is enabled.

Device backup and uninstallation

The local memory archive is excluded from automatic device backup. Without your own export or a completed iCloud synchronisation, content may be lost if the device is lost or the app deleted. Conversely, uninstalling does not automatically delete existing iCloud data, family copies or exports. Ongoing synchronisation does not replace an independent backup because it transfers deletions too.

Technical intermediate data

Local settings and synchronisation identifiers remain while needed for the relevant feature. Temporary transfer and family-view files are cleared after processing or on restart. Verified purchase records and data in Apple’s systems are additionally subject to Apple’s retention rules.

09 / Website & email

This website and messages to us

Visiting this privacy page is separate from your memory content. It does not upload recordings or app archives. The page contains no analytics scripts, advertising or externally hosted fonts.

Delivery and security

We host this website with Contabo. We have a data processing agreement with Contabo. Delivery and protection use the upstream service Cloudflare . Necessary connection information is processed, including IP address, requested URL, access time and browser information. Security features may also use technically necessary cookies.

Cloudflare uses a global network, including outside the European Economic Area. The Cloudflare data processing agreement describes intended safeguards for international transfers, including standard contractual clauses and the Data Privacy Framework where its requirements are met. Cloudflare’s retention periods depend on the service and security purpose; the criteria are in its Cloudflare privacy policy.

Contact and retention

We operate our email service ourselves. If you write to us, we receive your sender address, message, attachments and technical delivery information. We use them to handle your concern. You do not need to provide your collection or individual memories.

For website logs we manage, our retention policy is no more than 14 days; completed support enquiries are retained for six months after closure. Attachments no longer needed may be removed earlier. In a specific security incident or legal dispute, we retain only data still needed until clarification or expiry of the relevant legal period. Business records subject to statutory retention are kept separately for the required duration.

These periods concern our logs and communication, not your local collection or Apple’s or Cloudflare’s systems. Technical test reports we receive for troubleshooting are retained until the relevant error analysis is completed; personal details no longer needed are removed.

10 / Legal bases

Purposes and legal bases

Where we process personal data as controller, we distinguish these purposes:

Requested app features and contract-related support

Article 6(1)(b) GDPR, where processing is necessary for the relevant service. This does not include using your content for advertising.

Additional features requiring consent

Article 6(1)(a) GDPR where consent is required and given. You activate optional features yourself. An iOS permission is technical access authorisation, not blanket consent to further purposes.

Secure website operation, troubleshooting and general enquiries

Article 6(1)(f) GDPR. Our interests are reliable service, resolving specific faults and answering your message; your opposing rights are taken into account.

Statutory retention

Article 6(1)(c) GDPR where corresponding duties apply.

You are not obliged to enable optional features or send us a message. Without the information or access needed for a feature or reply, it may not be possible to provide it. No solely automated decision with legal or similarly significant effects takes place.

11 / Your rights

Your data protection rights

Subject to the GDPR, you have rights of access, correction, erasure, restriction of processing and portability. Where processing is based on consent, you can withdraw it for the future. Previous lawful processing is unaffected.

Objection: You may object to processing based on legitimate interests for reasons relating to your particular situation. We then assess whether the legal conditions for continued processing are met.

For these matters, contact us at [email protected]. We cannot remotely view, provide or delete purely local content. The app provides editing, export and deletion features for that purpose. For questions about iCloud copies or sharing, we can help identify the appropriate route.

You may also complain to a data protection authority, particularly at your usual residence, workplace or the location of a suspected infringement. In Sweden, this is the Swedish Authority for Privacy Protection (IMY). You do not have to contact us first.

This notice describes features as of 21 September 2026. Available optional features depend on the installed app version. If data flows or purposes change, we update this information.

12 / Contact & help

How to reach us.

Do you have an app question, want to report an issue or exercise privacy rights? Write to us. Include “Erinnerungskiste” in the subject and, for technical questions, your app and iOS versions.

Send only information needed for your concern. Personal recordings or complete exports are not required for an initial enquiry.