Privacy Policy

Datenschutzerklärung

Last updated: 25 October 2026

1. Controller

The controller responsible for processing personal data on this website and in the Sarté app is:

Oguzhan Yayman
Wielandstr. 31
10629 Berlin
Germany
Email: hello@sarte.app

2. This website

This website sets no cookies and uses no local storage or similar technologies. It uses no analytics and no tracking, and it embeds no content from third parties. The fonts are hosted on our own server, so your browser does not contact any font service when you visit.

Because this website does not track you, there is nothing to opt out of, and “Do Not Track” signals need no action.

3. Hosting and server logs

This website is hosted by Cloudflare. When you visit it, technical data is processed so that the site can be delivered to you securely: your IP address, the date and time of the request, the page you requested, and information about your browser and device.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure and working website. Cloudflare keeps this log data for a limited time that Cloudflare determines for its own security and operation.

Cloudflare may process data outside the European Union. Such transfers are covered by the safeguards that Cloudflare provides under data protection law.

4. Contact by email

If you write to hello@sarte.app, your email is handled with Microsoft 365. We use your message and your email address only to answer you.

The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or steps before entering into one, and Art. 6(1)(f) GDPR otherwise, based on our legitimate interest in answering your request.

We delete the correspondence when it is no longer needed, unless a legal duty requires us to keep it for longer.

5. The Sarté app

Sarté is an outfit-planning calendar app for iOS, available worldwide.

What we process and why

When you use the app, we process:

• Account data: your email address and a password stored only in hashed form if you sign up with email, or the identifier Apple provides and your email or private relay address if you use Sign in with Apple.
• Your content: the photos you add, your notes, your labels and your outfit planning data.
• Password reset emails: if you use email sign-in and ask to reset your password, your email address, the one-time code we send you and technical delivery information (send time, delivery status).
• Technical connection data, such as your IP address and the time of your requests, which our hosting providers process when the app contacts our servers.
• A technical user identifier.

We process your account data and your content to provide the app you asked for. The legal basis is Art. 6(1)(b) GDPR. We process the technical connection data to keep the service secure and working. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a secure and working service. Without your account data and your content we cannot offer you an account in the app.

Where your data is stored

Your account data, photos, notes and labels are stored in the cloud with Supabase, hosted in Frankfurt, Germany. Supabase acts as our processor. Your photos, notes and labels are stored there so you can use them on your devices.

Processing on your device

Background removal of your photos happens on your device. Your photos are not sent to a third party for it.

Subscriptions and payments

Purchases are handled by Apple, and we do not see your payment details. Apple processes your purchase as its own controller under its own privacy policy.

We use RevenueCat as our processor to manage your subscription status. RevenueCat receives an app user identifier and purchase information, for example which subscription is active, and may process technical data such as your IP address.

Emails from the app

If you sign up with email, we send you the emails your account needs. At the moment these are password reset emails with a one-time code. We send them through Resend, our processor, using its EU region (Ireland). Resend receives your email address and the content of the email to deliver it. The legal basis is Art. 6(1)(b) GDPR. We do not send marketing emails.

Resend (resend.com) is our email delivery provider. We send these emails from hello@sarte.app through Supabase’s SMTP integration with Resend. For a password reset, Resend processes your email address, the one-time code and technical delivery information (send time, delivery status). Resend is a US-based provider. Transfers outside the EEA are covered by the Standard Contractual Clauses in Resend’s data processing agreement. Resend keeps technical delivery logs for a limited period.

These emails contain no tracking pixels and no tracked links, and open and click tracking are not enabled.

Accounts created with Sign in with Apple have no Sarté password and do not use password reset.

Analytics, crash reports and advertising

The app currently uses no analytics, no crash reporting and no advertising. We will update this policy before we add any of them. We do not sell your personal information and do not share it for advertising.

Transfers outside the EU

Your data is stored in Germany. Our processors Supabase, RevenueCat and Resend, as well as Apple, may be companies from outside the EU or the UK, so your data may be accessed from outside the EU. Where this happens, it is covered by safeguards provided under data protection law, such as standard contractual clauses.

How long we keep your data

We keep your data while your account exists. You can delete your account in the app under Settings > Delete Account. This deletes your account, photos, notes and labels immediately.

Deleting the app alone does not delete your account. Deleting your account does not cancel a subscription, which you manage with Apple. Records that Apple holds about your purchases are not affected.

Age

Sarté is not meant for people under 16. We do not knowingly collect data from anyone under 16. If you think a child under 16 has an account, write to hello@sarte.app and we will delete it.

6. Recipients of your data

We share personal data only with these providers, and only as far as needed for the purposes described above:

• Cloudflare: hosting of this website.
• Microsoft 365: handling of emails sent to hello@sarte.app.
• Supabase: account data, photos, notes and labels of the app, stored in Frankfurt, Germany.
• Resend (resend.com): sending of account emails, using its EU region (Ireland).
• RevenueCat: management of your subscription status.
• Apple: Sign in with Apple and purchases, as its own controller.

7. Your rights

You have the following rights regarding your personal data:

• the right of access (Art. 15 GDPR)
• the right to rectification (Art. 16 GDPR)
• the right to erasure (Art. 17 GDPR)
• the right to restriction of processing (Art. 18 GDPR)
• the right to data portability (Art. 20 GDPR)
• the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• the right to withdraw any consent you have given, with effect for the future

You can object at any time, on grounds relating to your particular situation, to processing that we base on our legitimate interests. Write to hello@sarte.app.

To use these rights, write to hello@sarte.app.

To delete your account and app data, you can also use Settings > Delete Account in the app.

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Germany
www.datenschutz-berlin.de

8. Your rights where you live

EU and EEA

You have the rights listed in section 7.

United Kingdom

You have the same rights under UK data protection law. You also have the right to complain to the Information Commission (formerly the Information Commissioner’s Office, ICO) at ico.org.uk.

California

If you live in California, you may have rights under California privacy law:

• to know what personal information we collect and how it is used
• to request deletion
• to request correction
• not to be discriminated against for using these rights

The categories of personal information we collect, where it comes from and why:

• Identifiers (email address, Apple-provided identifier, user ID): from you or from Apple, to run your account.
• Internet or device information (IP address in server logs): collected automatically, to deliver the app and website securely.
• Your content (photos, notes, labels): from you, to provide the app.
• Commercial information (which subscription is active): from Apple through RevenueCat, to unlock paid features.

We disclose this data only to service providers who process it for us: Supabase, RevenueCat, Resend, Cloudflare, and Microsoft 365 for email. We do not sell it and do not share it for cross-context behavioral advertising.

We honor these requests whether or not a specific law applies to us. Write to hello@sarte.app, or delete your account in the app.

Elsewhere

You may have additional rights under the laws where you live. Write to hello@sarte.app and we will handle your request according to the law that applies.

9. Changes to this policy

We update this policy when the website or the way we process data changes. The date at the top shows when it was last changed.