LeanBytes
← Home

Privacy Policy

Effective date: July 29, 2026

1. Controller

The controller responsible for data processing in connection with the apps and services provided by LeanBytes is:

LeanBytes UG (haftungsbeschränkt) Goldmühlestraße 65 71065 Sindelfingen Germany

Represented by: Stephan Arenswald Contact: legal@leanbytes.io

2. Overview

LeanBytes builds apps designed with privacy as a core principle.

Our apps do not collect or process personal data from users during normal use. We do not create user profiles, track individuals across sessions, or share user behavior data with third parties for advertising or analytics purposes.

The only contexts in which personal data may be involved are:

  1. Purchases — handled entirely by Apple Inc. (App Store) or Lemon Squeezy, LLC (direct sales), both of whom act as merchant of record and process your payment data under their own privacy policies.
  2. Anonymous usage analytics — non-personal, aggregated data that cannot be linked to any individual (see Section 4).
  3. Newsletter and product waitlists — if you choose to enter your email address in a signup form on our website, we process that address to send you the updates you asked for (see Section 5).

3. Data We Do Not Collect

When you use our apps, LeanBytes does not collect:

  • Your name, email address, or any other contact information
  • Device identifiers (IDFA, IDFV, or similar)
  • Location data
  • Crash reports linked to identifiable users
  • Any data that can identify you or be connected to you as an individual

This section describes our apps. An email address that you voluntarily submit through a signup form on leanbytes.io is a separate matter and is covered in Section 5.

4. Anonymous Usage Analytics

In our apps

Our apps may collect anonymous, non-identifiable usage data to help us understand how features are used and to improve the product. This may include:

  • Session duration
  • Which features are used and how frequently
  • General interaction patterns (e.g., screen views, feature activations)

This data is anonymous by design. It is technically impossible to:

  • Link two sessions together as belonging to the same person
  • Trace any data point back to an individual user

Because this data cannot be attributed to any identified or identifiable natural person, it does not constitute personal data within the meaning of Art. 4(1) GDPR. Accordingly, GDPR data subject rights do not apply to this data.

This analytics data is processed using a proprietary, custom-built service operated by LeanBytes. It is not shared with any third-party analytics provider. The service is hosted in the European Union.

On this website

leanbytes.io uses Plausible Community Edition, open-source web analytics software that LeanBytes hosts itself on servers in the European Union. It sets no cookies, does not store IP addresses, and does not follow visitors across websites. Measurement is limited to aggregate figures such as page views and referring sites.

Because no data is transmitted to a third-party analytics provider and no individual can be identified from it, this processing does not involve personal data, and no cookie consent is required for it.

5. Newsletter and Product Waitlists

If you enter your email address in a signup form on leanbytes.io — either the newsletter or the waitlist for a specific product — the following applies.

What we process. Your email address, a label recording which form you used (for example the newsletter, or the waitlist for a particular product), and the dates on which you requested and confirmed the subscription.

Double opt-in. After you submit the form you receive a single email asking you to confirm. Your address is added to the mailing list only once you click the confirmation link in that email. If you do not confirm, no subscription is created. This is what prevents anyone from signing up an address they do not control.

Legal basis. Your consent under Art. 6(1)(a) GDPR. You may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before it.

Processor. The confirmation email and all subsequent emails are sent using Brevo, a service operated by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (a subsidiary of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France). Brevo processes this data on our behalf as a processor under a data processing agreement pursuant to Art. 28 GDPR, which forms part of Brevo’s General Conditions of Use, and stores it on servers within the European Union.

Retention. We keep your address until you unsubscribe. Every email we send contains a one-click unsubscribe link, and you can also write to legal@leanbytes.io at any time. After you unsubscribe, we retain a record of your consent and its withdrawal only for as long as we need it to demonstrate that the subscription was lawful.

No other use. We do not sell your address, do not share it beyond the processor named above, and use it solely to send the updates described at the point where you signed up.

6. Purchases — Third-Party Payment Processors

When you make a purchase, you transact directly with the relevant platform. LeanBytes is not the merchant of record and does not process your payment or billing data.

Apple App Store

If you purchase through the Apple App Store, Apple Inc. processes your personal data (including name, billing address, and payment method) in accordance with Apple’s Privacy Policy. LeanBytes does not receive or store your payment or billing information. LeanBytes receives only a confirmation of purchase status.

Lemon Squeezy

If you purchase directly via our website or a direct purchase link, the transaction is processed by Lemon Squeezy (operated by Lemon Squeezy, LLC), which acts as the merchant of record. Lemon Squeezy’s Privacy Policy applies to the processing of your data in connection with the purchase. LeanBytes receives limited purchase confirmation data (e.g., license validity) but does not receive or store your full billing details or payment information.

7. Data Transfers

Payment processors: Purchases processed through Apple or Lemon Squeezy may involve transfers of your data to the United States. Both Apple and Lemon Squeezy maintain appropriate safeguards for international data transfers as required by GDPR.

Newsletter and waitlists: Email addresses are processed by Brevo GmbH in Germany and stored within the European Union. No transfer to a third country takes place.

Analytics: Anonymous usage data from our apps is processed by LeanBytes’ proprietary analytics service hosted in the European Union. Website analytics are self-hosted by LeanBytes in the European Union. No personal data is involved in either case.

8. Data Retention

LeanBytes does not collect personal data from app users during normal use, so there is no personal data from app usage to retain or delete on our side.

If you have subscribed to the newsletter or a product waitlist, your email address is retained as described in Section 5.

Anonymous analytics data is retained in aggregated form and is not subject to GDPR retention requirements.

For personal data processed by Apple or Lemon Squeezy in connection with purchases, please refer to their respective privacy policies for information on retention and deletion.

9. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:

  • Right of access (Art. 15 GDPR) — the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy
  • Right to rectification (Art. 16 GDPR) — the right to have inaccurate data corrected
  • Right to erasure (Art. 17 GDPR) — the right to have data deleted under certain conditions
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on your consent, as it is for the newsletter and waitlists

Because LeanBytes does not process personal data from app users, these rights have limited practical applicability in the context of our apps. They apply in full to any email address you have given us for the newsletter or a waitlist. For data processed by Apple or Lemon Squeezy, please exercise your rights directly with those parties.

To exercise any of the above rights against LeanBytes, please contact us at legal@leanbytes.io.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time. The supervisory authority competent for LeanBytes is:

Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg (LfDI BW) Lautenschlagerstraße 20 70173 Stuttgart Germany poststelle@lfdi.bwl.de https://www.baden-wuerttemberg.datenschutz.de

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification or through our website. The effective date at the top of this document indicates when the current version took effect.

12. Contact

For privacy-related questions or requests, please contact:

LeanBytes UG (haftungsbeschränkt) Goldmühlestraße 65, 71065 Sindelfingen, Germany legal@leanbytes.io

This Privacy Policy was last updated on July 29, 2026.