Privacy Policy for POTD (Pic of the Day)

Last updated: 15 August 2026

This is a translation provided for convenience. The German version is the legally binding one; in case of any discrepancy, the German text prevails.

Controller

Email: potd.picoftheday@gmail.com

No data protection officer has been appointed; there is no legal obligation to do so. Please direct all data protection matters to the contact address above.

In short

POTD captions your photos with capture data such as place, date and weather. Your photos never leave your device. There are no user accounts, no registration, no advertising and no analytics or tracking services. The only data that leaves the device are coordinates, sent to weather and geo services in order to fill in the text fields.

What data the app processes

Photos

The photos you select are processed on the device only. The captioned image is saved as a new photo in your photo library; the original photo remains unchanged. No upload takes place.

The app reads embedded metadata from the photo (capture date, coordinates, camera and lens data) in order to generate the text fields. This evaluation happens on the device.

Location data

Coordinates come either from the EXIF data of the selected photo or, when you take a picture with the camera, from the device’s current location. They are transmitted to the following services, in each case solely to determine the corresponding value:

Each of these providers acts as an independent controller; there is no processing on our behalf, as we have no influence over their processing. Their privacy policies apply:

• Open-Meteo: https://open-meteo.com/en/terms
• OpenStreetMap Foundation: https://osmfoundation.org/wiki/Privacy_Policy
• Apple: https://www.apple.com/legal/privacy/

We do not send photos, contact details, or any user or device identifiers assigned by us. For technical reasons, your device’s IP address is visible to the respective provider with every request, just as it is when you open any website; Open-Meteo states that it deletes such log data after 90 days. The app itself stores no location history.

Transfers to third countries

Open-Meteo is operated by OpenMeteo GmbH, based in Switzerland. The European Commission has determined that Switzerland provides an adequate level of data protection (Art. 45 GDPR), so transfers there are permitted without additional safeguards. According to the provider, its servers are located in Europe and North America, so an individual request may also be answered outside the EU.

Reverse geocoding is performed through a system service provided by Apple. Apple also processes data outside the EU, including in the United States, and states that it bases such transfers on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Where data is transferred to a country without an adequacy decision, there is a risk that public authorities there may access the data without legal remedies comparable to EU standards being available. Only coordinates are transmitted, plus the date and time of capture in the case of weather data.

App Store

The app is distributed through Apple’s App Store. When you download or update it, Apple processes data (e.g. Apple account, time of download, device data) under its own responsibility. We have no influence over this; Apple’s privacy policy applies.

Settings

Templates, styles, fonts and settings are stored locally on the device (UserDefaults) and are not transmitted. They are deleted when you delete the app or choose “Reset app to defaults” in the app’s settings.

Legal bases

• Photos, metadata and settings on the device: processing takes place locally only and serves the app functionality you requested - Art. 6(1)(b) GDPR.
• Location via the iOS location services: consent, which you give through the iOS system dialog - Art. 6(1)(a) GDPR, additionally Sec. 25(1) TDDDG for accessing information on your device. You may withdraw your consent at any time with effect for the future in the iOS settings; this does not affect the lawfulness of processing carried out until then.
• Transmission of coordinates (plus date and time for weather) to Open-Meteo, the Overpass API and Apple’s geocoding service: Art. 6(1)(b) GDPR, because the fields you selected (place, weather, peak) cannot be filled in without these requests.
• Access logs for the operation of this website: see the section “Hosting of this website”.

Retention

We do not operate any servers ourselves and do not store your data. Photos and settings stay on your device until you delete them or the app. How long the integrated services retain their access logs is determined by their operators - Open-Meteo states that log data is deleted after 90 days. If you write to us by email, we delete the message once your request has been dealt with conclusively and no statutory retention obligations apply.

Sharing images

When you pass on a captioned image through the share function, you decide where it goes. If the image carries location data, the app asks beforehand whether to share it with or without location. The service you choose is responsible for that onward transfer.

Permissions

• Photos: to select a photo and save the result
• Camera: only if you take pictures inside the app
• Location: only for camera shots, to determine place and weather for “here and now”

Every permission can be revoked in the iOS settings. You are under no legal or contractual obligation to grant them, and you suffer no disadvantage if you decline. Without the respective permission, only the features depending on it are unavailable: without photo access there is no image and no saving, without location access there are no place, weather and peak fields for camera shots.

Data sharing and tracking

No tracking takes place. Data is not used for advertising, not combined with third-party data and not passed on to data brokers. There are no analytics SDKs.

Hosting of this website

This section concerns the website, not the app. The app itself is distributed through the App Store; the privacy policy you are reading, by contrast, sits on a web server - and merely opening it processes data.

The site is provided via GitHub Pages, a service of GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA), a Microsoft company. When you open the page, your browser transmits technically necessary data to GitHub, in particular your IP address, the date and time of the request, the address requested, and details about your browser and operating system. GitHub states in its own documentation that it logs and stores visitors’ IP addresses for security reasons, regardless of whether they are signed in to GitHub.

We have no influence over the scope and duration of this logging; GitHub acts under its own responsibility in this respect. For details see GitHub’s privacy statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this mandatory information reliably and securely without operating our own server. You may object to this processing under Art. 21 GDPR.

Transfers to the USA: GitHub also processes data in the United States. The company states that it bases such transfers on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) and on the EU-U.S. Data Privacy Framework. In the USA there is a risk that public authorities may access the data without legal remedies comparable to EU standards being available.

This site sets no cookies, embeds no external fonts, scripts or images, and uses no analytics or tracking tools. It is served encrypted over HTTPS.

Children

The app is not directed at children and does not collect personal data about them.

Your rights

You have the following rights: access to the data processed about you (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). Where you have consented to processing, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR).

A practical note: the app creates no user accounts and no server-side database on our side. All data created in the app - photos, templates, styles, settings - resides exclusively on your device; you can inspect, change and delete it there yourself, at the latest by deleting the app. Since we cannot identify you on the basis of this data, we are not obliged under Art. 11(2) GDPR to store additional data solely in order to fulfil these rights. If you write to the email address above, we process the information contained in your message - in that respect the rights apply without restriction.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR), in particular in the EU member state of your residence, your place of work, or the place of the alleged infringement.

Changes

This policy will be adapted when the app’s functionality changes. The version published at this URL at any given time is the applicable one.