Privacy policy for the TWT One app

Scope

This privacy policy applies to the TWT One Android app (de.tatwelletech.one) of TWT- Tat Welle Tech GbR. It adds to our privacy policy for the website.

Controller

What the app is

The app is a way into your account on our platform. It shows and edits the same data as the web portal. No business data stays on the device, except documents you save there yourself.

Which data is processed

• Account data: your name and e-mail address, to sign you in and to manage your account (Art. 6(1)(b) GDPR).
• Your company's business data that you enter yourself: invoices, quotes, delivery notes, supplier invoices, postings and their documents, open items, bank transactions, the cash book, fixed assets, time tracking, the catalogue and stock, and the details of your customers and suppliers (name, address, e-mail, phone, VAT ID, bank details). We process this data on behalf of the company that holds the account (Art. 28 GDPR).
• Files you choose to have an e-invoice validated or converted, documents you upload or scan as supplier invoices, and documents you file in the document archive.
• A record of the changes made to documents, for security and to keep the books traceable as German bookkeeping rules require (Art. 6(1)(c) and (f) GDPR).
• For notifications: an identifier of this installation, the device model and the app's version. Notifications are sent by our own service on our own servers, not through Google Firebase. The identifier is deleted when you sign out.

Barcode and document scanner

The barcode and document scanners are screens of Google Play services; the app itself has no access to the camera. A scanned document is uploaded to our servers and read there. Google may collect diagnostic data under its terms for ML Kit.

What the app does not do

The app shows no advertising, uses no advertising ID, contains no analytics or tracking services and reads neither contacts nor photos. It does not collect any location.

Unlocking with your fingerprint

When you unlock the app with your fingerprint, the match is made by Android on your device alone. We receive no biometric data.

Security and where the data lives

Every connection is encrypted (TLS). The app's sign-in credentials are kept in Android's protected key store. The platform runs on our own servers in Germany.

Retention and deletion

Account data is kept for the term of the contract. After the contract ends, the data can be exported for 30 days; then access is closed, and all data that need not be kept is deleted within 30 days. Records that tax law requires us to keep are kept until the legal period ends: eight years (§ 147 AO, § 14b UStG).

How to request the deletion of your account

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority. Our privacy policy gives the details and names the competent authority:

Privacy Policy

To exercise any of these rights, please contact us at: info@tatwelletech.com