Privacy Policy
Erstatto is privacy-first by design: on the App Store it is labelled „Data Not Collected“. This policy is split into two parts – Part A covers the Erstatto app, and Part B covers this website.
Part A – The Erstatto app
Erstatto is an app for managing your receipts for German private health insurance (PKV) and Beihilfe. There is no account, no registration and no cloud sync.
A1. Data processing in the app
All data you enter in Erstatto (receipts, amounts, categories) is stored exclusively on your device. No personal data is transmitted to our servers or to any third party.
- No user accounts or registration
- No cloud synchronization
- No analytics or tracking services
- No sharing with third parties
- No advertising
You can export your data as CSV or PDF. This happens locally on your device; nothing is transmitted to our servers.
A2. Camera, photos & on-device text recognition
To capture receipts, Erstatto uses your camera and your photos. Text recognition (OCR) runs entirely on your device using Apple's Vision framework. Scanned documents and the recognised text are not sent to any server.
Part B – This website
This part applies only to the erstatto.app website, not to the app.
B1. Server logs & hosting
The website is a static site served by a web host. When you load a page, the host automatically records standard server logs (IP address, timestamp, requested URL, user agent). These logs are used solely to operate the site securely. The legal basis is our legitimate interest in security and reliability under Art. 6 (1) (f) GDPR. The logs are neither merged with other data nor used for analytics.
B2. Cookies & third-party content
This website uses no cookies, no tracking and no analytics tools. It loads no third-party scripts and no external fonts – the page relies solely on your device's system fonts. There is no contact form on this website.
B3. Your rights under the GDPR
You have the right to access, rectification, erasure, restriction of processing and data portability at any time. You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
B4. Contact
Noel Weinberg
Telepano
Eurotec-Ring 15
47445 Moers, Germany
Email: erstatto@1337-studios.com
Last updated: 11 June 2026