ImTakt · Privacy
Privacy policy
GDPR information · Updated 20. August 2026
This policy explains how personal data is processed when you use imtakt.dev, api.imtakt.dev, notify-api.imtakt.dev, live.imtakt.dev, the ImTakt CLI and SDK. The controller is AUVY GmbH, Am Haag 8, 82166 Gräfelfing, Germany.
1. Contact
Privacy enquiries: privacy@auvy.ai
Security: security@auvy.ai
2. Website and server logs
The website and live interface are delivered by Vercel Inc.. Technically necessary access logs may include the IP address, request time, URL, referrer, user agent and HTTP status. Processing is based on Art. 6(1)(f) GDPR for secure and reliable operation. Logs are retained only as operationally necessary or until a security incident is resolved.
3. Journey planner, API, CLI and SDK
Origin, destination, stop and time inputs are processed to calculate journeys and departures. Search parameters can be stored in a shareable browser URL and may therefore appear in access logs. Results may be cached for seconds or a few minutes to improve performance. Search contents are not used to build personal profiles.
3a. iOS train watches (push)
The ImTakt iOS app can optionally watch a train run and deliver alerts via Apple Push Notification service. We store a device-generated installation id and the APNs token on notify-api.imtakt.dev (HEL1, Germany) for as long as you watch a train. There is no account. Data is dropped when the watch expires, you unwatch, or Apple reports the token invalid (410).
4. Cookies and tracking
ImTakt does not use marketing cookies or personal advertising analytics. We do not permanently store journey history in browser localStorage. Strictly necessary short-lived browser state may be used under Section 25(2) TDDDG and Art. 6(1)(f) GDPR.
5. Processors and international transfers
Vercel Inc. provides website and edge delivery. Hetzner Online GmbH operates the public API and live backend in Germany. Where edge request metadata is transferred outside the EEA, transfers rely on appropriate safeguards under Art. 46 GDPR, including EU Standard Contractual Clauses, and the EU-US Data Privacy Framework where applicable.
6. Your rights
You may request access, correction, deletion, restriction, portability or object to processing under Articles 15–21 GDPR. Contact privacy@auvy.ai. You may also complain to Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.
7. Security and changes
We use appropriate technical and organisational measures under Art. 32 GDPR, including TLS in transit. This policy is updated when legal requirements or processing activities change.
This English version is provided for convenience. The German privacy policy remains the authoritative legal text.