Updated: 5 November 2026
Christian Höpker
Büttnerstr. 8
63165 Mühlheim am Main, Germany
Email: info@hoepker-consult.de
MyFamilyPilot is an iOS app for digitising and managing documents and photos. The following data is processed locally on your device:
2.1 Documents and photos: Scanned documents and imported photos are stored locally on your iPhone. They are not automatically transferred to the provider's servers. The legal basis is Art. 6(1)(b) GDPR (performance of a contract / provision of app functions). Support messages you send are covered separately in section 8a.
2.2 Camera access: The app requires access to your iPhone camera solely for scanning. Camera images are used to create documents rather than stored separately. Legal basis: Art. 6(1)(a) GDPR (consent via the iOS system prompt).
2.3 Photo library: The app may access your photo library to import existing photos as documents, only at your explicit request. Photos are not transferred or stored without your action. Legal basis: Art. 6(1)(a) GDPR (consent via the iOS system prompt).
2.4 Optional network access: Only when you actively start a cloud or NAS upload does the app connect to your configured destination (WebDAV/NAS, iCloud Drive, Google Drive, Google Calendar, Microsoft To Do, MyImmoPilot). Connections use HTTPS/TLS encryption. Legal basis: Art. 6(1)(a) GDPR (consent through an active user action).
2.5 In-app purchases (StoreKit): Premium subscription transactions are handled exclusively through Apple StoreKit. The provider receives no payment details. Apple processes data under its privacy policy. Legal basis: Art. 6(1)(b) GDPR.
Passwords, API tokens and credentials for NAS, Nextcloud, Google Drive, Microsoft To Do or MyImmoPilot are stored in the iOS Keychain, your iPhone's secure encrypted credential store. They are not sent to the app provider. Connections to your selected services use the credentials needed for authentication.
Text recognition (OCR) takes place locally on your device using Apple Vision Framework and, on iOS 26 or later, Apple Intelligence. Documents, photos and recognised text are not sent to external servers or third-party AI services for this processing.
These services are used only when you actively configure and use them in the app:
The app connects your device directly to each selected service without intermediate storage by the app provider.
Cloud copies must be managed separately. Support retention is described in section 8a.
The website myfamilypilot.de uses no cookies, tracking or third-party analytics. Technical connection data may be processed to deliver the website; this is separate from the support data described below.
If you contact us by email, we process your message to handle your enquiry. Emails received in our support mailbox are generally created automatically as cases ("tickets") in our support system, hosted on our server at IONOS in Germany. Automatic messages such as out-of-office replies and delivery failure notices, as well as recognised newsletters, are excluded.
Data processed: We store your email address and sender name, subject, message text and a sanitised HTML version, receipt time and technical message identifier (Message-ID) in the case. Up to five supported image attachments (JPEG or PNG), including embedded images, may be imported. Embedded metadata such as location, camera and capture time is automatically removed from imported images on receipt. Original images in the email mailbox may still contain this metadata. Other attachments are not imported into the ticket system; they remain in the original email in the mailbox. The original email and all its attachments also remain stored there. Please do not send unnecessary school, health or login data, and check images and attachments before sending.
Replies are assigned to the existing case using its case number or technical message references. Our replies are stored in the case history and as sent emails.
Purpose and legal basis: We process the data to answer your enquiry, investigate and fix reported errors and improve our apps. For contract-related enquiries, the legal basis is Art. 6(1)(b) GDPR; otherwise, Art. 6(1)(f) GDPR applies on the basis of our legitimate interest in organised and traceable handling of support enquiries and resolving errors.
Access and recipients: The provider and authorised support staff have access to cases within their respective app permissions. We use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, to host the support system and receive and send emails.
Retention and erasure: Closed cases, including history and images, are removed in the daily deletion run once twelve months have passed since the last change. Open cases remain stored for further handling. Associated original emails in the ticket folder, our ticket replies in the sent folder and their delivery logs are deleted after twelve months once they are no longer associated with an existing case. Statutory retention obligations remain unaffected. You can request earlier erasure at info@hoepker-consult.de. We erase the data where the legal requirements are met; otherwise, we explain the reasons for retaining it.
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. Local documents can be deleted in the app and exported as PDFs. You can disable optional functions and withdraw consent for camera access, photo library access and cloud connections in the relevant app or system settings without affecting the lawfulness of earlier processing. Uninstalling the app does not erase support cases. To exercise your rights, contact info@hoepker-consult.de.
You may lodge a complaint with a supervisory authority. The authority in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Postfach 3163, 65021 Wiesbaden, Germany.
This policy is current as of 5 November 2026. App development or legal changes may require updates. The current version is available on this page. The German version is available via the language links above.