Privacy Policy for the App

Last updated: August 12, 2026

This policy applies to the Wooout app.

Controller

Oliver Heidorn
Oliver Heidorn Creative Technology
Flottbeker Drift 18
22607 Hamburg
Germany
Phone: +49 40 82244484
hello@wooout.com

What stays on your device

Everything you enter into Wooout — your name, company, role, URL, phone, email, and event details — is stored locally on your device and never sent to our servers. The only time this data leaves your device is when you share a QR code with someone else.

What we receive (only if you send feedback)

If you tap Send in the feedback form, we receive:

• Your message text
• Your email address — only if you choose to provide one
• App version (e.g. "1.2.0")

We use this information to fix bugs and to reply to you if you provided an email address. We do not use it for advertising.

To protect the service against misuse, our server applies rate limiting per IP address when you send feedback. Your IP address is held in memory only for the duration of the rate-limit window, is never written to disk, and is not stored alongside your message.

Ads and Google AdMob

To offer Wooout for free, we show ads from Google AdMob. Google AdMob serves ads and may use cookies and device identifiers to deliver and measure ads, as described in Google's Privacy Policy. Here is what that means in practice.

What Google can see

• Your IP address and rough location inferred from it
• Device type and operating system
• Which ads you see and interact with
• Your advertising ID (IDFA on iPhone/iPad, GAID on Android) — only if you consent to personalised ads

Your choice in Europe, the UK and Switzerland

The first time you open Wooout, we show you a short dialog with two equally prominent options: Accept all and Reject all. Both choices are completely valid.

If you reject: you will still see ads, but they will not be personalised. Google cannot build an interest profile from your usage to target you.

Your choice in the United States

Depending on your state (California, Colorado, Connecticut, Virginia, Utah, Texas and others), you have the right to opt out of the "sale or sharing" of your personal data. We show the appropriate dialog and honour your opt-out.

The extra question on iOS devices

Apple asks separately whether apps may track you across other apps and websites. If you tap "Ask App Not to Track", Wooout works exactly the same — you just see ads without cross-app tracking.

Google's full privacy policy: https://policies.google.com/privacy

Changing your mind

You can update your ad privacy choices at any time:

• In Wooout: open the menu in the bottom-right corner and tap "Privacy options".
• On iOS: go to Settings → Privacy & Security → Tracking and toggle Wooout.

We do not sell or share personal data

We do not sell or share your personal data with third parties.

The ad revenue we receive from Google is based on your usage of the app, not on selling a profile about you.

International data transfers

Our feedback server is located in Germany (EU). Feedback submissions stay within the European Economic Area.

Ad serving is handled by Google AdMob. Google may process data on servers outside the EEA, including in the United States. Google's transfers are covered by Standard Contractual Clauses and Google's Data Processing Terms. For details, see https://policies.google.com/privacy.

How long we keep data

• Local app data: until you change or delete it.
• Feedback submissions: deleted as soon as your request has been resolved.
• Your IP address (rate limiting): discarded at the end of each rate-limit window, within minutes.
• Your ad consent choice: stored locally on your device by the Google UMP SDK. Deleting the app removes it.

Legal bases (EU/EEA)

• Core app functions (vCard/QR creation): contract/performance of service — Art. 6(1)(b) GDPR.
• Personalised ads: your consent — Art. 6(1)(a) GDPR.
• Non-personalised ads: legitimate interests — Art. 6(1)(f) GDPR.
• Feedback processing: legitimate interests (app version for bug diagnosis) — Art. 6(1)(f) GDPR; your consent for the reply-to email — Art. 6(1)(a) GDPR.
• Security and abuse prevention (IP-based rate limiting): legitimate interests — Art. 6(1)(f) GDPR.

California and US state privacy rights

If you are a California resident, the CCPA/CPRA gives you specific rights regarding your personal information. Here are the categories of personal information we collect and their purposes:

• Identifiers (email address) — collected only if you provide it in the feedback form; used solely to reply to your message.
• Internet or network activity (IP address, ad interactions) — your IP address is processed by our own server for rate limiting when you send feedback, and by Google AdMob for ad serving; ad interactions are collected by Google AdMob.
• Device information (advertising ID/IDFA/GAID) — collected by Google AdMob only with your consent for personalised ads.
• Inferences (app version) — collected when you submit feedback; used to diagnose bugs.

We do not sell or share personal information as defined under CCPA/CPRA. Residents of California, Colorado, Connecticut, Virginia, Utah, Texas and other states with applicable privacy laws may exercise their rights (access, deletion, opt-out) by emailing hello@wooout.com.

Children

Wooout is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information to us, please contact hello@wooout.com and we will delete it promptly.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Ask us to delete your data.
• Restrict or object to how we process your data.
• Withdraw consent at any time (without affecting anything done before withdrawal).

To exercise any of these rights, email hello@wooout.com — a one-line message is enough.

If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. In Germany: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), www.datenschutz.hamburg.de. You may also contact the supervisory authority in your country of residence.