Effective: 15 May 2026 · Version 1.1
TaxTracker is a local-first tax tracking application for self-employed persons in Austria. Your financial data is stored on your own device. This policy explains what data is processed, by whom, and your rights under GDPR and the Austrian Datenschutzgesetz (DSG).
David McKendry, Liechtensteinstraße 22/3/13, 1090 Wien, Österreich · privacy@taxtrackerat.app
For data rights requests, contact: privacy@taxtrackerat.app
Legal basis: Art. 6(1)(b) GDPR — performance of a contract (providing the service you purchased).
Retention: Stored on your device indefinitely; deleted when you remove the app or database.
| Service | What is sent | Purpose | Legal basis | Retention | Transfer |
|---|---|---|---|---|---|
| Anthropic (Claude AI) | Receipt image content / text you submit | AI-powered receipt reading (optional) | Art. 6(1)(b) — service performance | Anthropic processes and does not store beyond the request (see anthropic.com/privacy) | US — Standard Contractual Clauses (SCCs) |
| OpenRouteService (ORS) | Origin and destination place names | Distance calculation for Diäten (optional) | Art. 6(1)(f) — legitimate interest | ORS logs: see openrouteservice.org/privacy | EU (Germany) — no transfer |
| Lemon Squeezy | Purchase data (name, email, payment) | Licence purchase processing | Art. 6(1)(b) — contract | As required by tax law (7 years) | US — SCCs |
| Google Sheets | Income and expense totals | Spreadsheet sync (optional) | Art. 6(1)(a) — consent (you connect it) | In your Google account — subject to Google's policy | US — SCCs + Google's own mechanisms |
| Google Calendar / Apple Calendar | Calendar event titles, dates, times | Journey import for Diäten (optional) | Art. 6(1)(a) — consent | Not stored by TaxTracker beyond the import | Apple: US/EU. Google: US — SCCs |
| Apple iCloud Drive | Receipt files, data sync | Receipt inbox, cross-device access (optional) | Art. 6(1)(a) — consent | In your iCloud account — subject to Apple's privacy policy | US/EU — Apple DPF + SCCs |
| TaxTracker update service (updates.taxtrackerat.app, via Cloudflare) |
IP address; current app version and OS platform (e.g. macOS/arm64) | Automatic update checks on app launch | Art. 6(1)(f) — legitimate interest (keeping software secure) | Standard CDN logs, short-term | US — SCCs |
| TaxTracker rates service (rates.taxtrackerat.app, via Cloudflare) |
IP address | Fetching current Diäten and tax rates on app launch | Art. 6(1)(b) — service performance | Standard CDN logs, short-term | US — SCCs |
Under GDPR and Austrian DSG you have the right to:
To exercise your rights: contact privacy@taxtrackerat.app. We will respond within 30 days.
You also have the right to lodge a complaint with the Austrian supervisory authority:
Datenschutzbehörde (DSB) — dsb.gv.at — +43 1 52152-0
Your financial data is encrypted at rest by your operating system's disk encryption (FileVault on macOS). The application uses a local SQLite database. No financial data is transmitted without your explicit action.
TaxTracker is designed for self-employed adults. We do not knowingly collect data from persons under 18.
We will notify you of material changes via an in-app notice. The current version is always available at taxtrackerat.app/privacy.