Privacy Policy

1. Controller

The party responsible for data processing on this website and in the KeyNook app is:

AppTicker – Stanislaw Schönberg
Schuhmacherwiese 9a
22113 Oststeinbek
Germany
Email: keynook@appticker.de

2. Data processing in the KeyNook app

KeyNook is designed as a data-minimal password manager. Your content (passwords, notes, cards, 2FA secrets, etc.) is stored encrypted exclusively on your device. The provider has no access to this data, and no vault content is transmitted to the provider.

• No user account: No registration is required to use the app.
• iCloud sync (optional): If you enable sync, the encrypted data is synchronized through your personal iCloud (Apple). Apple's privacy terms apply additionally. The provider cannot decrypt this data.
• Breach check (optional): At your explicit request, KeyNook can check passwords against the “Have I Been Pwned” service (haveibeenpwned.com, operator: Superlative Enterprises Pty Ltd). In doing so, only a k‑anonymous hash prefix is transmitted (k‑anonymity). The password itself never leaves your device.
• Favicons (optional): To display website icons, the app may fetch the favicon of the respective domain. This establishes a connection to the website in question.
• Purchases: In-app purchases are handled through Apple's App Store. The provider receives no payment data.

There is no tracking, no profiling and no sharing of personal data for advertising purposes.

3. Visiting this website

When you visit the website, the hosting provider processes technically necessary data (e.g. IP address, date/time, page accessed, browser type) in so-called server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, trouble-free operation). This website uses no cookies for analytics or marketing purposes and integrates no tracking services.

This website is operated on a self-administered dedicated (root) server belonging to the controller named above. No external hosting provider has access to the data, and the server log files are not shared with third parties.

4. Contacting us

If you contact us by email, we process your details to handle your inquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted as soon as it is no longer required.

5. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a supervisory authority.

6. Changes

We update this privacy policy when the legal situation or features change. Last updated: June 2026.