Privacy Policy
Last updated: 2 October 2026
1. Who is responsible
The data controller responsible for this website is:
Michael Munz
Kasernenstr. 1
71272 Renningen, Germany
Email: michael.munz@aurora-ivy.tech
2. Server log data
When you visit this website, the web server technically records standard access data: your IP address, the date and time, the requested page, the referring page, and your browser type (user agent). This data is needed to deliver the site, keep it secure, prevent abuse, and diagnose errors. It is not merged with other data and is not used to identify you.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating and securing the website). Retention: server logs are automatically deleted after 14 days.
3. Your budget data
The anonymous Egopay planner runs locally in your browser: your income, expenses and savings notes are stored in your browser's local storage and are never uploaded or stored by us. When you close the planner without creating an account, the data stays on your device only.
When you create an account, your household, categories, transactions, monthly plans, reflections and goals are stored with our service provider's servers in the European Union (Frankfurt). They are used only to provide you with your household budget and sync it across your signed-in devices. They are never used to train models and never shared with third parties, except with the people you invite to your household (see section 8).
Legal basis: Art. 6(1)(b) GDPR (performing the contract with you).
4. Local storage
The site stores a few preferences in your browser's local storage: your theme, language and device settings, your cookie consent decision, and, if you use the anonymous planner, your planner entries. These values stay on your device, are never sent to us (except the signed-in data described in section 3), and can be cleared at any time in your browser settings.
5. Cookies, analytics, and advertising
This site uses no cookies beyond purely functional storage, no analytics, no advertising, and no third-party trackers. There is no cross-site or cross-device tracking.
We ask before we load optional services. The site works without them; they load only after your consent, which you can withdraw at any time under Cookie settings in the footer.
Optional services currently: error monitoring (Sentry), which receives technical error data only if you enable it.
6. Fonts
All fonts are delivered locally with the site. Nothing is loaded from Google Fonts or other third-party font services.
7. Payments
Payments are processed by our payment service provider, Stripe (Stripe Technology Europe Ltd. / Stripe, Inc.). Stripe receives the order information — plan, amount, billing country, VAT country and email — and a unique customer ID. Card details and other payment credentials go directly to Stripe and are never stored by us.
Legal basis: Art. 6(1)(b) GDPR (performing the contract). We keep billing records only for the retention periods required by tax and commercial law.
8. Recipients and service providers
We pass on personal data only where it is necessary to run Egopay, and only to:
household members you invite — they see the household's shared budget data while the invitation is active;
the hosting and content-delivery providers that deliver this website (the website is delivered worldwide via CDN edge locations; IT security only, no data merging);
the database service provider that hosts your account and budget data (servers in the European Union, Frankfurt);
the payment provider (section 7);
the transactional email service that delivers sign-up, invite and security emails; and
the error monitoring service (section 5) if you enabled it.
Providers act as processors under GDPR Art. 28. We have a data processing agreement with each of them and keep records of processing activities (GDPR Arts. 28 and 30).
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (GDPR Arts. 15-21), and to lodge a complaint with a supervisory authority (Art. 77). To exercise any of these rights, contact us at michael.munz@aurora-ivy.tech.
10. Supervisory authority
You have the right to complain to your local data protection supervisory authority. If you are in Germany, this is the authority of the federal state where you live or where the controller is established.
11. Contact
Questions about privacy: michael.munz@aurora-ivy.tech.
Last updated: October 2026.
12. Further processing facts
Deletion and reactivation: you can export or delete your data at any time in the app settings (Account settings → Export data / Delete account). Deleting your account revokes all sessions and deletes household data; anonymized financial records without your personal references are retained where required. Reactivation is possible within 30 days; after that the account is anonymized and deleted. Removed household members' email addresses are deleted after 30 days; receipt and deletion records are kept for up to 90 days for fraud and abuse prevention.
Children: if a child under 16 has sent us personal data, contact us and we will delete it.
No automated decisions: Egopay does not make automated decisions or profiling about you.
13. Early-access list
Before launch, this website offers an early-access list. If you submit your email address, we store it together with the date, the language of the page and a one-way hash of your IP address (used only to prevent abuse). We use it for one purpose only: to tell you when Egopay is available. No newsletter, no advertising, no sharing with third parties.
Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw it at any time by replying to any email from us or by writing to michael.munz@aurora-ivy.tech; we then delete the entry. Entries are deleted at the latest 12 months after launch, or immediately if you ask us to.