Privacy policy

1. Website and apps

This privacy notice explains processing of personal data when you visit our website or use smart3Dplanner. Sections 2–11 concern the website; section 12 covers the apps, advertising and store purchases.

2. Controller and privacy contact

The controller for the website and app is:

Softwareentwicklung Kemper
Owner: Sebastian Kemper
Hauweg 54
41066 Mönchengladbach, Germany
Email: contact.kemper.apps@gmail.com

3. Hosting and server logs

Our website is hosted by Hostinger. The web server is located in Brazil (South America), and backups are stored in the United States. Data are therefore processed outside the European Economic Area.

When you request the website, images, fonts or app bundles, the server processes technically necessary connection data, particularly your IP address and requested resource. Depending on server configuration, logs may also contain time, status code, transfer size, referrer, browser and operating-system information. The purposes are providing the website, maintaining its technical functionality, troubleshooting and security, including detecting and investigating attacks.

The intended legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure, functioning service; applying this basis requires a corresponding balancing of interests.

According to the operator, Hostinger's usual data protection agreements apply to this hosting. Hostinger describes processing on behalf of customers in its Data Processing Addendum. Section 8 explains international transfers.

Hosting backups are separate from your app projects: your locally stored floor plans are not automatically transferred to Hostinger or the operator and backed up there as project copies.

4. Contact by email

Contact through this website is by email only, at contact.kemper.apps@gmail.com. There is no contact form. The email link opens your own email application; you send the message yourself through your email provider.

When you contact us by email, we process your email address and the information you send to handle and answer your enquiry. This includes your message, any name you provide, voluntary attachments and technical email headers. Please provide only the information needed for your enquiry.

Contractual or pre-contractual enquiries are processed under Article 6(1)(b) GDPR. For other enquiries, Article 6(1)(f) GDPR is the intended basis; our legitimate interest is appropriately handling and answering your enquiry. Where statutory retention duties apply, the necessary retention relies on Article 6(1)(c) GDPR. Contacting us is voluntary; we need a reachable email address to reply.

We generally delete ordinary support enquiries no later than twelve months after handling is completed. Messages that are no longer needed may be deleted earlier. Records subject to tax or business retention duties are kept for the applicable statutory periods. Contractual matters, ongoing complaints or legal disputes may also require longer statutory or otherwise justified retention periods, where continued storage is necessary.

You can request erasure of your personal data at contact.kemper.apps@gmail.com. We assess such requests under the applicable legal conditions, including before the twelve months have elapsed. Statutory retention duties and other lawful grounds for continued storage are taken into account. Your other rights are described in section 10.

Messages are received in the Gmail mailbox above. Google/Gmail processes message content and email metadata. Email is not automatically end-to-end encrypted.

5. Cookies and other storage

The website sets no first-party cookies and uses no localStorage, sessionStorage or IndexedDB. It implements no first-party analytics/advertising trackers. Language selection uses URLs. Video permission exists only in the current page state; reloading requires fresh permission. Your browser may cache locally served resources according to its settings.

After optional YouTube permission, the player may use cookies or other storage; section 6 applies. Consent-requiring access under section 25(1) TDDDG must be distinguished from the GDPR basis for subsequent processing of personal data.

6. YouTube only after permission

Initially only a local preview image is displayed. Pressing the load-video button embeds a player from youtube-nocookie.com and requests playback. Google/YouTube may receive your IP address, technical browser/device details and video-request information. Depending on login and settings, account association and further storage access may occur. Privacy-enhanced mode does not mean that no data are processed or that cookies or other storage can never be used.

The basis is consent under Article 6(1)(a) GDPR and, where required, section 25(1) TDDDG. You can use the website without the video. The remove-video button removes the player and stops its further connections on this page. It does not reverse previous transfers or delete data already held by Google. Withdrawal applies for the future without affecting the lawfulness of earlier processing. Permission is not stored persistently: loading the page again requires fresh permission.

Further information: Google privacy policy. Section 8 addresses international transfers.

7. Local fonts and store links

Inter and the Noto fonts used here are served by this website, without connecting to a Google Fonts CDN. Section 3 applies to delivery. Local store artwork likewise makes no request to a store image server. Only following an Apple, Google Play, Microsoft or Steam link opens that store. Its operator processes data under its own notice. A store link does not establish use of a particular SDK in an app.

8. Recipients and international transfers

Hostinger processes data for hosting. For email enquiries, recipients also include Google/Gmail and authorised people handling enquiries. After video permission, recipients include Google/YouTube and service providers involved in delivery. Section 12 additionally applies to app advertising and store purchases.

The web server and hosting backups are located in Brazil and the United States respectively, outside the European Economic Area. Google services may also involve processing outside the EEA. The requirements of Articles 44 et seq. GDPR apply to such transfers.

Section 9 of Hostinger's published data protection terms provides for EU standard contractual clauses under Decision (EU) 2021/914 where the stated conditions apply to the particular transfer. The clauses and their incorporation are accessible through the Hostinger Data Processing Addendum. This is not a blanket statement that every transfer to Brazil or the United States relies on the same clauses. The applicable transfer ground and its conditions depend on the specific recipient and processing operation. You can request information about the relevant safeguards using our contact address.

9. Retention and deletion

Personal data are stored only for as long as needed for their purpose or required by statutory duties or justified retention grounds. Longer retention for a specific dispute or security incident requires corresponding justification.

Ordinary support emails are generally deleted no later than twelve months after handling is completed, subject to the exceptions and earlier deletion options in section 4. Section 12 covers locally stored projects and their deletion. Retention by hosting, advertising and platform providers depends on the processing operation and applicable provider terms; the support period does not apply to all such processing.

10. Your rights

Subject to the applicable conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20). Portability particularly concerns automated processing based on consent or a contract. You may withdraw consent at any time for the future. Contact the address above. Any necessary identity check will be limited to what is required.

Objection to processing based on legitimate interests

Under Article 21 GDPR you may object to processing based on Article 6(1)(f) for reasons relating to your particular situation. Processing will stop unless the legal conditions for continuing apply. You may object to direct marketing at any time; this website does not implement such direct marketing.

Under Article 77 GDPR you may complain to a supervisory authority, particularly where you habitually reside or work or where an alleged infringement occurred. You may in particular contact the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. You need not contact us first. Requests must generally be answered within one month; any legally permitted extension must be explained.

11. Additional transparency

The website has no function making automated decisions with legal or similarly significant effects under Article 22 GDPR, and no first-party marketing profiling. This establishes no conclusion about apps or Google. The website remains usable without video permission. Providing contact details is voluntary but necessary for an answer.

12. Privacy in smart3Dplanner apps

The mobile Android/iOS versions use Google AdMob for advertising. No other independently integrated analytics, advertising or cloud services are used. Local project storage does not mean that no personal data are processed for advertising or store purchases.

Android through Google Play and iOS through the Apple App Store are free to download, contain Google AdMob advertising and offer an optional monthly Pro subscription. Windows through Microsoft Store and the Steam version are paid downloads for a one-time price, with no in-app purchases or subscriptions. A free mobile download does not automatically include all Pro features.

Your floor plans and projects: local storage and deletion

All floor plans and projects created with smart3Dplanner are stored exclusively locally on the respective device. There is no operator-provided cloud storage for these projects. Project files are not automatically sent to the operator's servers, and the operator receives no automatic copies of your floor plans.

When you delete a floor plan within the app, it is removed from local project storage. There is no in-app recycle bin and no operator-provided server backup of these projects. The operator cannot restore deleted projects.

Possible device backups made by the operating system or third parties are a separate matter. Whether and which data are included, and how those backups can be managed or deleted, depends on your device configuration and the provider concerned. This is not cloud storage provided by smart3Dplanner.

Local project storage is independent of processing by Google AdMob and the app stores. Personal data may still be processed for advertising, purchases and subscription management. The information about AdMob and app stores therefore continues to apply separately.

Google AdMob: advertising and data processing

Google describes IP addresses and inferred approximate location, ad and product interactions, diagnostic/performance information and device identifiers for its advertising SDKs. These may include Android advertising ID, app set ID or IDFA on iOS where the relevant conditions are met. Google describes advertising, measurement and fraud prevention purposes. The scope depends on platform, version, settings and features used; these provider categories do not mean that every identifier is collected by every app version.

Further information: AdMob for Android, AdMob for iOS, Google privacy policy and Google advertising data transfer information.

Consent, refusal and later withdrawal

The app displays a consent dialog for personalised advertising. You can accept or decline and can later withdraw consent within the app. For questions, contact contact.kemper.apps@gmail.com. The website has no contact form.

Withdrawal takes effect for the future and does not affect the lawfulness of processing based on consent before withdrawal. It does not automatically erase data already transmitted. Consent-dependent personalised advertising relies on Article 6(1)(a) GDPR; storage access requiring consent must also be assessed under section 25(1) TDDDG. Other processing that actually occurs needs a separately assessed legal basis and must not be covered by a blanket reliance on this consent.

Withdrawal does not automatically end all advertising-related data processing. Non-personalised ads may also require technical data or storage access. Website video permission is separate from your advertising choice within the app.

Purchase handling and subscription management

Google Play handles monthly Android Pro subscriptions, and the Apple App Store handles monthly iOS Pro subscriptions. Microsoft Store and Steam handle the paid desktop one-time purchases. Platform operators process account, payment and transaction data under their own notices. Renewal, cancellation and entitlement status are additionally relevant to mobile subscriptions.

App advertising and advertising consent are separate from purchases and subscription management. Withdrawing advertising consent does not cancel Pro. A store handling a purchase does not mean that your full payment details are automatically shared with the operator.

Platform privacy notices: Apple, Google, Microsoft and Valve/Steam.

App bundle downloads may generate IP and connection data at the web server; section 3 applies. For privacy questions, please specify your platform and app version without unnecessary sensitive information.

13. Version and further information

Updated: 11 November 2026. Legal Notice (Imprint) · Datenschutzerklärung auf Deutsch.