Privacy

Who is responsible

Sobremesa is operated by Jannik Jung, trading as jung.dev – Software Solutions & Consulting, Hauptstraße 92, 69469 Weinheim, Germany.

For privacy questions or to exercise your rights, write to web@jung.dev. For product support, use hello@sobremesa.cc.

When you visit this website

Cloudflare hosts and delivers the website. Delivering a page involves processing technical request data, including your IP address and information about your browser. This helps serve the website and protect it from misuse.

We use PostHog’s EU service for cookieless website analytics. We measure page visits, referrals, campaign labels and clicks on the App Store link when that link becomes available. The website integration does not use cookies or browser storage and does not record sessions. Ordinary URL query strings, fragments and form contents are not sent by our website analytics integration.

Cookieless does not mean that no personal data is processed: network requests still include an IP address, and PostHog can use a daily, changing identifier to count visits. Website analytics are separate from the signed-in app analytics described below.

When you use the app

The app processes the information needed to provide your account and travel companion:

• Account details received through Sign in with Apple, including an account identifier and the name or email address Apple supplies. You may use Apple’s private relay email.
• Journeys, chapters, saved places, journal traces and messages you choose to add.
• Preferences and companion memory used to make suggestions relevant to you.
• Location information when you allow location access or choose a place yourself.
• Purchase identifiers, credit balances and usage records needed to provide purchased credits and keep the balance accurate.
• Device information and notification tokens when you enable notifications.

You can change location and notification permissions in iOS settings. The companion’s memory is private to your account and is not shared with other users.

The companion and other service providers

Cloudflare provides the app backend and storage. Companion requests use Anthropic models through Cloudflare AI Gateway. Your message and relevant journey or memory context may be sent to these services to answer you. Travel research can also send a search query to a research or place-information service.

Apple provides sign-in, in-app purchases, notifications and map/place services. Weather lookups use Open-Meteo. Each request can require relevant technical or location information. Do not put information into a companion conversation that you do not want processed by these services.

App analytics and diagnostics

The app uses PostHog to understand onboarding, feature use, credit purchases and technical failures. Unlike the website, app analytics are associated with your account identifier and may include your email address.

The current app configuration also enables session replay with text-input and image masking and with network-body telemetry disabled. Masking is intended to reduce the information included in recordings; it is not a promise that every detail of a screen is anonymous. Apple MetricKit diagnostics, such as crash and hang information, are also sent to PostHog to help diagnose failures.

Why we process information

We process account, journey, companion and purchase data to provide the service you request (Article 6(1)(b) GDPR). Where applicable, optional permission-based processing relies on consent (Article 6(1)(a)). Website delivery, security, support and proportionate service diagnostics may rely on legitimate interests in operating and improving Sobremesa (Article 6(1)(f)). Legal record-keeping obligations rely on Article 6(1)(c).

Where consent is required, it can be withdrawn for future processing without affecting processing that was lawful before withdrawal.

Retention and deletion

Your journey content and companion memory are kept to provide your account. You can remove content and delete your account through the app’s account menu. Account deletion removes the app’s account identity and its stored journeys, places, traces, memory, chats and device notification tokens.

Deleting an account does not itself erase historical PostHog events or records that Apple holds independently. Contact us about erasure requests involving these records. Some records may need to be retained to comply with legal obligations or deal with a dispute.

International processing

Some providers operate internationally, so using the app can involve processing outside the European Economic Area. The safeguards and retention settings for each provider must be assessed as part of the service’s data-protection arrangements.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of personal data, and object to processing based on legitimate interests. You can withdraw consent where processing relies on it.

Contact web@jung.dev. You can also complain to a data-protection supervisory authority. The authority for Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

Changes

We will update this notice when the way Sobremesa processes information changes.