Privacy Policy

Last updated: March 5, 2026

1. Data Controller

StepFormation GmbH Bergstrasse 39 21259 Otter Germany Represented by: Armin Nickel Email: info@daystillwe.com

2. Data We Collect

When you use DaysTillWe, we collect the following personal data: - Email address - Name - Device information - IP address - Calendar content (texts, images, videos)

3. Legal Basis

We process your data based on Art. 6(1) GDPR: - Point (a) Consent — e.g., when registering and subscribing to notifications - Point (b) Performance of a contract — e.g., to provide the service and calendar features - Point (f) Legitimate interest — e.g., to improve our service and ensure security

4. Third-Party Services

We use the following third-party services: - Supabase (Authentication, Database, Storage, Realtime) — EU servers - RevenueCat — Payment processing for in-app purchases - Mailjet — Email delivery (invitations, notifications) - Firebase Cloud Messaging (FCM) — Push notifications - Vercel — Web hosting for the guest viewer

5. Data Retention and Deletion

Your data is stored as long as your account is active. Upon request, we will delete your data completely. Please contact us at info@daystillwe.com.

6. Your Rights

Under Art. 15–21 GDPR, you have the following rights: - Right of access - Right to rectification - Right to erasure - Right to restriction of processing - Right to data portability - Right to object To exercise your rights, please contact info@daystillwe.com. You also have the right to lodge a complaint with the competent supervisory authority.

7. Security Measures

We protect your data through: - SSL/TLS encryption for all data transfers - Secure servers with regular security updates - Access control and authentication

8. Changes

We reserve the right to update this privacy policy. The current version is always available on this page.