1) Preamble
Welcome to our app! We attach great importance to the protection of your data and the preservation of your
privacy. In the following, we would like to explain which data we process, when and for what purpose and on
what legal basis. This is to explain to you how the services we offer work and how the protection of your personal
data is guaranteed.

Personal data is to be processed in accordance with Art. 4 no. 1 GDPR all information relating to an identified or
identifiable natural person. An identifiable natural person is considered to be one who can be identified, directly
or indirectly. Further information on this can be found in Art. 4 no. 1 GDPR.

This Privacy Policy can be accessed at any time at the URL
https://www.miosga-software.com/Privacy_Policy_EN.pdf can be retrieved, saved and printed.

Insofar as we cite our legitimate interest or a legitimate interest of a third party (Art. 6 para. 1 lit. f) GDPR) as
the lawful basis for the processing of personal data, you have a right to object in accordance with Art. 21 GDPR:

In accordance with Art. 21 GDPR, you have the right to

object to the processing of personal data at any time. We will then no longer process the personal data for
the purposes of direct marketing or related profiling.

We also do not process your personal data for other purposes after an objection, unless we can prove
compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the
processing serves to assert, exercise or defend legal claims (cf. e.g. Art. 21 (1) GDPR, so-called "limited right
to object"“). In this case, you must explain reasons for the objection that arise from your particular situation.

You may also object to processing of your personal data on grounds relating to your particular situation,
which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89
(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest
(cf. Art. 21 (6) GDPR).

We will also point out the right to object separately in the individual sections (e.g. by saying: "You have a right to
object"), if this right exists. There you will also find further information on how to exercise your right to object.

In order to keep the following privacy policy clear, we refer to information and data protection notices that can
be found on external websites (see also section "Social Networks & External Links" in this privacy policy) in
various places. We make every effort to keep the links we list in this privacy policy up to date. Nevertheless, due
to the constant updating of the websites, it cannot be ruled out that links do not work correctly. If you notice
such a link, we would be pleased if you would let us know so that we can enter the current link.

2) Person in charge
Controller within the meaning of Art. 4 no. 7 GDPR for the processing of personal data is:

Miosga Software UG (haftungsbeschränkt)
Karlsburg 16
24398 Winnemark
Germany

E-mail: help@hash.cloud

3) Contact person for data protection
If you have any questions about the processing of your personal data, as well as your rights in relation to data
protection, please contact:

Tim Miosga
Chausseestr. 29
10115 Berlin

Germany

4) Access to the app on the App Store

When downloading our app, the necessary information is transmitted to the respective app store (e.g. Google
Play, App Store). In particular, the following information is transmitted:

• Username
• E-mail address
• Time of download
• Device code number

We have no influence on this data processing and are not responsible for it.
Information on the data processing of the stores can be found here:

Information on data processing by google can be found here: https://policies.google.com/privacy

Information about data processing by Apple can be found here: https://support.apple.com/de-de/HT211970

The Store will notify us that you have downloaded the APP, stating your username and the email address you
used.

We store this data for a period of 2 years.

The legal basis for the storage is our legitimate interest in accordance with Article 6 (1) (f) GDPR. We have a
legitimate interest in keeping track of how many users have downloaded the app.

Furthermore, we store the data in order to contact you again for the purpose of evaluating another BETA version.
In this case, we will obtain your consent (see section 7 below).

There is no other processing of the data. You can object to the processing of your personal data by us as described
above.

Right to object
They have a right of objection. You can send us your objection at any time (e.g. by e-mail to help@hash.cloud).

5) Log files

When you use our app, we automatically collect data and information from your device's system and store some
of it in so-called server log files. The data is automatically transferred when you access our app. This includes the
following information:

• The time of the call to our app (request to the server of the host provider),
• URL of the website from which you accessed our app,
• the operating system you are using,
• The type and version of the browser you are using,
• Your IP address,
• Your e-mail address

The purpose of this processing is to retrieve the App from your device and to enable our App to be displayed
correctly on your device. Furthermore, the data is used for the further development and improvement of our
app, statistical purposes and to ensure the security of our systems. This data is not evaluated for marketing
purposes.

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in presenting you with
an app optimized for your device and enabling you to communicate between our applications and your device.

The data will be stored by us for 6 months.

The recipient of the data is our server host Google Cloud, which works for us within the framework of an order
data agreement.

Right to object
They have a right of objection. You can send us your objection at any time (e.g. by e-mail to help@hash.cloud).

The provision of personal data is neither required by law nor contract, nor is it necessary for the conclusion of a
contract. You are also not obliged to provide the personal data. However, failure to provide it may result in you
not being able to use our app or not be able to use it to its full extent.

6) Cookies

The app does not use cookies

7) Registration function

The app can be used without registration. However, you can also create a user account by registering in the app.
The following personal data must be provided for registration.

• E-mail address
• Username
• Date

This data is automatically collected during registration and stored by us.

Registration can also be done with the help of the user's existing account with an identity provider (Google
account or Apple ID). The identity provider provides the controller with the e-mail address, the date of
registration and the first and last name of the user by means of a randomly generated key.

The legal basis for the processing of your personal data described above is Article 6 (1) (b) GDPR. Registration is
a basic prerequisite for the use of the services we offer and therefore serves to initiate and conclude a contract.

8) Deletion of the user account

You may delete your account at any time.

9) Contact

You have the option of contacting us by post, telephone or e-mail.

If you contact us by post, we may process your address data (e.g. surname, first name, street, place of residence,
postcode), date and time of receipt as well as the data resulting from your letter itself.

If you contact us by phone, we can provide us with your telephone number and, if applicable, your telephone
number. process your name, e-mail address, time of call, as well as details about your request during the
conversation on request.

If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the text of the
message (including attachments, if applicable) will be processed.

The purpose of the processing of the above-mentioned data is to process the contact request and to be able to
contact the inquirer in order to answer the request.

The legal basis for the processing of personal data described here is Art. 6 (1) (f) GDPR. Our legitimate interest is
to offer you the opportunity to contact us at any time and to be able to answer your inquiries.

Personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were
collected.

Right to object
They have a right of objection. You can send us your objection at any time (e.g. by e-mail to help@hash.cloud).

The provision of personal data is neither required by law nor contract, nor is it necessary for the conclusion of a
contract. You are also not obliged to provide the personal data. However, failure to provide it may result in you
not being able to use the opportunity to contact you or that we will not be able to contact you.

10) Social Networks & External Links

In addition to this app, we also maintain presences in various social media, which you can access via
corresponding buttons in our app. If you visit such a presence, personal data may be transmitted to the provider
of the social network.

We would like to point out that user data is also transmitted to a server in a third country and can therefore be
processed outside the area of the European Union.

It is possible that, in addition to the storage of the specific data you enter in this social media, other information
is also processed by the provider of the social network.

In addition, the provider of the social network may process the most important data of the computer system
from which you are visiting it – for example, your IP address, the type of processor used and the browser version
including plug-ins.

If you are logged in with your personal user account of the respective network while visiting such a website, this
network can assign the visit to this account.

For the purpose and scope of data collection by the respective medium as well as the further processing of your
data there, as well as your rights in this regard, please refer to the respective provisions of the respective
controller, e.g. at:

▪ Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland):
o For fan pages: Agreement on joint processing of personal data (Art. 26 para. 1 GDPR)

https://www.facebook.com/legal/terms/page_controller_addendum
o Meta Privacy Policy: https://www.facebook.com/about/privacy/,

▪ Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

o Privacy Policy and Opt-Out Option: https://help.instagram.com/155833707900388

We would also like to point out that our app contains further links to external websites, whereby we have no
influence on the processing of data on these external websites.

11) Use of Google Apis or Google Hosted Libraries

We use Google Hosted Libraries in our app. Google Hosted Libraries is a service provided by Google Ireland
Limited Gordon House, Barrow Street Dublin 4, Ireland, a Google, LLC company.

We integrate various open source JavaScript libraries via Google Hosted Libraries. The corresponding libraries are
made available by Google and loaded by a corresponding command in our app, so that our app can use the library.
Google loads the library via a so-called content delivery network (CDN), i.e. a network of data centers that
distributes the content.

The libraries are integrated via an interface ("API") to Google services. By integrating the libraries, Google may
collect information (including personal data) and process it. It cannot be ruled out that Google also transmits the
information to a server in a third country.

In particular, the following personal data is processed by Google Hosted Libraries:

• Log data (especially the IP address)
• Location-based information
• Unique Application Numbers
• Cookies and similar technologies

The EU Commission has decided that the USA offers an adequate level of data protection (TADPF). The service
has submitted to the TADPF.

For detailed information, please see the https://www.google.com/intl/de/policies/privacy/index.html under the
"Information we receive as a result of your use of our services" section.

For details on Google Hosted Libraries terms, see:
https://developers.google.com/speed/libraries/terms

For technical information about the Google Hosted Libraries, see:
https://developers.google.com/speed/libraries/

Google may place cookies on your device for the use of Google Hosted Libraries. Google states that it only uses
these cookies for security and abuse prevention reasons.

By integrating Google Hosted Libraries, we pursue the purpose of integrating the libraries required for the optimal
functioning of the site.

The legal basis for the processing of personal data described here is Art. 6 (1) (f) GDPR. Our legitimate interest
lies in the great benefit that an integration of Google Hosted Libraries brings. By being able to integrate the
libraries via Google, we reduce our maintenance effort as well as the loading effort of the app and the server and
traffic load.

Right to object

They have a right of objection.

To this end, you can prevent the collection of the data generated by the cookie and related to your use of the
app to Google and the processing of this data by Google by preventing the installation of cookies by making the
appropriate settings in your browser; however, we would like to point out that in this case you may not be able
to use all the functions of this app to their full extent.

You can find out how to delete cookies in the most common browsers here:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Microsoft Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

The provision of personal data is neither required by law nor contract, nor is it necessary for the conclusion of a
contract. You are also not obliged to provide the personal data. However, failure to provide it may result in you
not being able to use our app or not be able to use it to its full extent.

12) Data integrity

We secure our app and other systems against loss, destruction, access, modification or dissemination of your
data by unauthorised persons by means of technical and organisational measures. Despite regular checks,
however, complete protection against all dangers is not possible.

13) Changes to the Privacy Policy

Changes in the law or changes to our internal processes may make it necessary to adapt this Privacy Policy.

In the event of such a change, we will notify you at the beginning of the Privacy Policy.

14) Revocation

You have the right to revoke your consent at any time with effect for the future, without affecting the lawfulness
of the processing carried out on the basis of the consent before its revocation.

15) Rights of data subjects

In principle, you have the following rights:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to object (Art. 21 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18f. GDPR)
• Right to data portability (Art. 20 GDPR)

For inquiries of this kind, please contact help@hash.cloud. Please note that in the case of such requests, we must
ensure that it is indeed the data subject.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a
data protection supervisory authority.
Automated decision-making does not take place in our app.

Status: 19.09.2024