Legal

Privacy Policy

1. Controller

The controller responsible for the processing of personal data in connection with the Means AI app (“App”) is:

Beate Faupel

Brockhäger Str. 3

33428 Harsewinkel

Germany

Email: support@means-ai.app

2. General Information on Data Processing

Means AI processes personal data only to the extent necessary to provide and use the App, carry out the requested text analysis, manage credits and purchases, ensure secure technical operation, or handle enquiries. Personal data is not used for personalised advertising, is not sold for advertising purposes, and is not shared with advertising networks.

3. Text Analysis

Means AI enables AI-assisted analysis of text entered by users. In particular, the following data may be processed:

The text entered may contain personal data, particularly where private messages, emails, or other communications are analysed. The text is processed solely to create the analysis requested by the user and provide the result in the App. The legal basis is Article 6(1)(b) GDPR where the processing is necessary to provide the requested App function. Where processing is necessary to ensure technical operation, troubleshoot errors, or prevent misuse, it is carried out on the basis of Article 6(1)(f) GDPR. The legitimate interest lies in the secure, stable, and functional operation of the App.

4. Storage of Text Inputs and Analysis Results

Original texts entered by users are not permanently stored in plain text in Means AI’s own database. No personal analysis history is created through which previous texts can be accessed again in the App. Means AI uses an analysis cache for the technical temporary storage of identical analyses. The original text is not stored in the cache. Instead, a cryptographic hash value is generated from the normalised text and technical analysis parameters. The associated analysis result, which depending on the analysis may contain individual elements or short excerpts from the entered text, may be stored for up to 30 days. After this period expires, the cache entry is scheduled for deletion. This temporary storage serves in particular to provide consistent results for identical requests and to avoid unnecessary repeated AI requests. Original texts entered by users are not routinely recorded in Means AI’s application logs.

5. Use of OpenAI

Means AI uses OpenAI services to carry out text analysis. For this purpose, the entered text and the request data required for the analysis are transmitted to the OpenAI API. The data is processed there in order to generate the requested analysis. For users in the European Economic Area, processing takes place within the framework of OpenAI’s applicable contractual data protection arrangements, in particular involving OpenAI Ireland Ltd. According to OpenAI, API inputs and outputs are not used by default to train or improve models unless a corresponding data-sharing option is expressly enabled. OpenAI may process API data for a limited period as part of security and abuse-monitoring measures. Under the currently applicable standard terms, such data may generally be stored for up to 30 days unless different legal or contractual requirements apply. Processing may also take place outside the European Union or the European Economic Area. Where required, transfers take place in accordance with the legal requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Hosting and Technical Operation via Render

The server-side functions of Means AI are provided via the hosting service provider Render Services, Inc., USA. The App communicates with the Means AI backend on Render’s servers. In this context, technically necessary connection and operational data may be processed, in particular:

This processing takes place to provide the backend, ensure technical functionality, diagnose errors, and prevent misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the App. Where Render processes personal data on behalf of Means AI, this is done on the basis of appropriate contractual data protection arrangements. As Render Services, Inc. is based in the USA and technical processing may also take place outside the European Economic Area, required data transfers are safeguarded in accordance with Articles 44 et seq. GDPR, in particular through applicable adequacy decisions, the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses.

7. Pseudonymous User Identifier and Credits

Means AI uses a pseudonymous user identifier to manage free analyses and purchased credits. In particular, the following data may be stored:

This data is required to assign available analyses and credits to a pseudonymous user identifier and to ensure correct use of purchased credits.

8. In-App Purchases and Apple

Paid credits are purchased through Apple’s In-App Purchase system. Means AI does not receive complete payment data such as credit card numbers, bank account details, or Apple ID login credentials. In particular, the following data may be processed and stored in order to assign and verify a purchase:

This data is required in particular to credit purchased credits correctly, verify transactions, prevent the same transaction from being credited more than once, and enable unused purchased credits to be restored using the purchase history. The legal basis is Article 6(1)(b) GDPR. Where the processing serves security and misuse prevention, it is additionally based on Article 6(1)(f) GDPR. The actual payment processing is carried out by Apple. Apple’s privacy policies and terms additionally apply to the processing of personal data by Apple.

9. Contact

If users contact Means AI by email or by other means, the data transmitted in doing so is processed in order to handle the enquiry. This may include in particular:

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to the use of the App or a contractual relationship. In other cases, processing is carried out on the basis of Article 6(1)(f) GDPR. The legitimate interest lies in the proper handling of enquiries.

10. No Advertising and No Advertising Tracking

Means AI does not use personal data for personalised advertising. Personal data is not shared with advertising networks and no advertising profiles are created. If analytics, tracking, or marketing services are used in the future, this Privacy Policy will be amended accordingly before they are introduced. Where required by law, consent will be obtained beforehand.

11. Retention Periods

As a general rule, personal data is stored only for as long as necessary for the respective processing purpose or for as long as statutory retention obligations apply.

For the current version of the App, the following principles apply in particular:

For data processed by external service providers, their contractual or statutory retention periods may additionally apply.

12. Recipients of Personal Data

Personal data may be disclosed, to the extent necessary, in particular to the following recipients:

Data is disclosed only where there is a legal basis for doing so.

13. Transfers of Data to Third Countries

When using OpenAI, Render, or their subcontractors, personal data may be processed outside the European Union or the European Economic Area. Where the European Commission has adopted an adequacy decision for the relevant third country, the transfer may take place on that basis. Otherwise, a transfer takes place only where appropriate safeguards within the meaning of Article 46 GDPR are in place, in particular on the basis of the European Commission’s Standard Contractual Clauses or other protection mechanisms permitted by law.

14. Rights of Data Subjects

Subject to the statutory requirements, data subjects have in particular the following rights:

Requests may be sent to support@means-ai.app. As Means AI predominantly uses pseudonymous data and does not maintain user accounts containing names or email addresses, it may be necessary to provide additional information in order to clearly assign a request for access, rectification, or erasure.

15. Right to Lodge a Complaint

Pursuant to Article 77 GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data infringes the GDPR. In particular, a complaint may be lodged with a supervisory authority at the place of residence, the place of work, or the place of the alleged data protection infringement.

16. Requirement to Provide Data

The use of individual App functions requires the processing of certain data. In order to carry out a text analysis, a text must be provided. Without transmission of the text, no analysis can be performed. Processing of a pseudonymous user identifier is required in order to manage free analyses and purchased credits. For paid purchases, the transaction information provided by Apple must be processed so that purchased credits can be assigned and made available.

17. Automated Decisions

Means AI uses artificial intelligence to generate automated analysis results for text entered by users. These results are intended to support the assessment of communication and do not constitute objectively established facts about the intentions, feelings, or personality of other persons. Means AI does not make solely automated decisions within the meaning of Article 22 GDPR that produce legal effects concerning users or similarly significantly affect them.

18. Changes to this Privacy Policy

This Privacy Policy may be amended if the legal, technical, or functional framework conditions of the App change. The current version will be made available in the App and/or via the privacy page provided for Means AI.

Last updated: August 2026