Privacy Policy

Renderei Martin GmbH
Steina 9 A
94086 Bad Griesbach im Rottal
Germany

Email: hey@infectrisk.com

InfectRisk was built from the ground up on the principle of Privacy by Design. The app collects, stores, and processes all personal data exclusively on your device. No personal data is transmitted to us or any third party.

• No tracking of your identity
• Only anonymous usage statistics, with no link to any person (see section 7)
• Your profile and health data stay on your device
• No registration or account creation required
• No data shared with third parties

There is one exception, and it applies to the website only: if you voluntarily enter your email address there to get a wave alert, we store that address until you unsubscribe (see section 13).

The app processes the following data that you provide during setup:

• Birth month and year: Used to calculate your age and your personal risk profile
• Pre-existing conditions (optional): Used to adjust your risk score

This data is stored exclusively on your device and never leaves it. We have no access to this data.

The app retrieves only publicly available, anonymized surveillance data from the following institutions:

• Robert Koch Institute (RKI), Germany
• European Centre for Disease Prevention and Control (ECDC)
• Centers for Disease Control and Prevention (CDC), USA
• UK Health Security Agency (UKHSA)
• AMELAG wastewater monitoring, Germany

This data does not contain any personal information. It consists of aggregated epidemiological statistics.

The app can send local notifications (e.g., when your risk level changes or weekly summaries). These are generated and processed entirely on your device. No push notification server is used. We do not receive a device token and have no ability to send you messages through the app.

This covers the notifications sent by the app. You only receive email notifications if you explicitly sign up for them on this website (see section 13).

The widget displays your current risk level. All data is calculated and stored locally. No data is transmitted to third parties.

To improve the app, we use TelemetryDeck (TelemetryDeck GmbH, Berlin, hosted in the EU). It collects anonymous usage statistics, such as which features are used and how often. No device identifiers are used and no IP addresses are stored; identifying individual users is not possible. Your profile and health data (birth month and year, pre-existing conditions, risk values) are never transmitted.

We continue to use no advertising networks and no third-party crash reporting services. More information: telemetrydeck.com/privacy

This website and the app do not use cookies.

The app is downloaded via the Apple App Store. Apple Inc. is responsible for data processing in connection with the App Store. We recommend reading Apple’s privacy policy: apple.com/legal/privacy

The information you enter (birth month and year, pre-existing conditions) may be considered health-related data under the GDPR. This data is:

• Processed and stored exclusively on your device
• Never transmitted to us or any third party
• Completely removed by deleting the app from your device

Since processing takes place exclusively on your device and no data is transmitted to us, Renderei Martin GmbH is not a data controller for the processing of this data within the meaning of the GDPR.

Since we do not collect or store any personal data, we cannot provide information about stored data: there simply is none. You can delete all locally stored data at any time by removing the app from your device.

The email notifications on this website are the one exception. If you signed up there, we store your address and the details listed in section 13. For that data you have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to withdraw your consent at any time. The unsubscribe link in every mail deletes the record immediately and completely, or you can simply write to us.

If you have any questions about data protection, please contact us at: hey@infectrisk.com

This website (infectrisk.com) does not use cookies or tracking. The website is hosted by Vercel Inc. When you visit the website, technically necessary data (e.g., IP address) is processed by the hosting provider.

To improve our service, we use Vercel Web Analytics. This service collects anonymized usage statistics (e.g., page views, time on page, device type). No cookies are set, no IP addresses are stored, and no personal data is collected. Identifying individual users is not possible.

For more information: vercel.com/legal/privacy-policy

On the data pages of this website you can voluntarily sign up for an email notification. It tells you once, as soon as the infection level in the country you picked goes up. The form is optional, the pages work in full without it.

All we store is:

• your email address
• the country you picked
• the page and the language you signed up from
• the time of the signup and of the confirmation

No account, no newsletter, nothing else. To protect against abuse we also store a shortened hash of your IP address for one hour when you submit the form. It serves only to limit the number of signups per hour and is deleted automatically afterwards.

Signup runs as a double opt-in: after you submit the form you receive a confirmation mail. Your signup only becomes active once you click the link inside it. Without that confirmation we send you no notification, and the provisional record expires by itself.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time: every mail carries an unsubscribe link (/api/alerts/unsubscribe), and one click on it deletes your address completely. Until you unsubscribe, the record stays stored.

We use Resend (Resend Inc.) as a processor for delivery. Processing takes place in the EU region eu-west-1, the sender address is alerts@infectrisk.com. Beyond that we do not share your address and we do not sell it. Our mails contain no tracking pixel: we measure neither opens nor clicks.

We reserve the right to update this privacy policy as needed to reflect changes in the law or changes to the app. The current version is always available on this page.