DE Waitlist

Privacy policy

For the website hoverscan.dev and the hoverscan app for iOS. Last updated: 14 November 2026

This is a translation. The German version is binding.

In short

  • The website sets no cookies, uses no analytics or advertising services and loads nothing from other servers.
  • The app sends us no data. Camera images, text recognition and reading shop, date and total all stay on your iPhone.
  • Finished PDFs go only to the server you enter in the app, for example your Nextcloud.

1. Controller

hansenexus GmbH, Eidelstedter Weg 2, 20255 Hamburg, Germany
Managing Director: Lennard Finsterbusch
Email: support@hoverscan.dev, phone: +49 40 57307846

2. Website

Hosting and server logs

The website runs on our own servers in data centres of Hetzner Online GmbH in Germany, under a data processing agreement. On every request the server processes technically necessary data: IP address, date and time, the address requested, status code, amount of data sent, referrer and browser identifier. We need it to deliver the page and to spot errors and attacks. The logs are deleted automatically after 7 days. The legal basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

The domain is managed through Cloudflare (Cloudflare, Inc., USA). Cloudflare only answers the DNS lookup for the server's address; the page request itself goes straight to our server, not through Cloudflare.

Cookies, fonts, analytics

We set no cookies and store nothing in your browser. Fonts, scripts and the 3D model are served from our own server; no content is loaded from third parties. There is no audience measurement and no advertising, which is why there is no cookie banner.

Email and phone

If you write or call us, we process your details to answer your request (Art. 6(1)(b) GDPR for questions about a purchase, otherwise (f)). Email runs through our own mail server in Germany. We delete messages once the request is settled and no statutory retention period applies.

Links to shops

When you follow a link to Etsy or Printables, you leave our website, and those providers' privacy policies apply.

Orders in the shop

When you buy the STL files on hoverscan.dev, we process your name, email address, billing address, for business purchases the company and VAT ID, your consents in the order form with their time, and the payment status. We need this data to perform the contract, send you the download link and issue the invoice (Art. 6(1)(b) GDPR), and because commercial and tax law require us to keep it (Art. 6(1)(c) GDPR). Order data is stored on our own server in Germany. The order confirmation is sent through our own mail server.

Payment and invoicing are handled by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. For this we pass Mollie your name, email address, billing address, the amount and the order number. You enter your payment details (such as card or account number) directly with Mollie; we never receive them. Mollie processes them as an independent controller under its privacy statement (mollie.com/privacy) and emails the invoice on our behalf.

We keep invoices and accounting records for ten years (§ 147 AO, § 257 HGB) and other order correspondence for six years. Download links expire after 30 days.

Waitlist for the STL files and the kit

When you join the waitlist on hoverscan.dev, we store your email address, your choice (STL files, printed kit or both), the language of the page, the wording of your consent with its version and time, and the time you confirmed. We use this data only to email you your personal early-bird code at launch. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) no. 2 UWG).

We use double opt-in: after you sign up you get an email with a confirmation link, and only after you click it are you on the list. That way we can show the sign-up came from you. Sign-ups that are not confirmed are deleted after 30 days. The data is stored on our own server in Germany and the emails go through our own mail server. We do not pass the data on to anyone.

You can withdraw your consent at any time (Art. 7(3) GDPR): with the unsubscribe link in every email or by writing to support@hoverscan.dev. We then delete your address right away. Otherwise we delete the data 12 months after launch.

3. The hoverscan app

The app needs no account and contains no analytics, advertising or tracking components and no third-party software. We receive no data at all from the app. Its App Store privacy label therefore reads "Data Not Collected".

Camera

The app uses the camera to photograph receipts under the rig. The live image is analysed only on the iPhone, to detect motion, where the receipt lies and the right moment to shoot. Live images are neither stored nor transmitted.

Text recognition and AI

Text recognition (Apple Vision) and reading shop, date and total (Apple's on-device language model, Apple Intelligence) run entirely on your iPhone. The text of your receipts is not sent to us, to Apple or to any other service. Without Apple Intelligence, a simpler reader inside the app extracts the fields, also on the device.

Voice prompts

Prompts such as "slide receipt left" are spoken by the built-in iOS speech synthesis, on the device.

Upload

The app uploads finished PDFs to the server you enter in its settings (currently Nextcloud via WebDAV). The transfer goes straight from your iPhone to that server, not through us. Whoever runs that server is responsible for the data there; for your own Nextcloud, that's you. The app stores the server address and user name on the device and the app password in the iOS keychain, on this device only. We have no access to any of it.

Data on the device

Settings and scans waiting for upload are kept only inside the app on your iPhone. Deleting the app removes them.

In-app purchases

You buy the unlock through the App Store. Apple handles the payment; we receive no personal data, only Apple's aggregated sales reports. Apple's privacy policy applies.

Crash reports

If you allowed sharing with app developers in iOS (Settings → Privacy & Security → Analytics & Improvements), Apple passes anonymous crash reports on to us. We use them only to fix bugs. You can turn this off there at any time.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to withdraw consent with effect for the future (Art. 7(3)) and to object to processing based on legitimate interests (Art. 21). Write to support@hoverscan.dev.

You can also complain to a data protection supervisory authority, for example the one responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

5. Changes

If the website or the app changes in a way that processes other data, we update this policy. If more products in the shop or more upload targets in the app are added, it will say so here before they go live.