Privacy

GRILL ME asks you questions about a decision. What you say while it does is the most private thing about the app, so it is built not to keep it in the first place.

Controller

Oliver Strebel-Mark
Emmericher Weg 76a
47574 Goch, Germany
support@belegkompass.de

No account

There is no sign-up, no login, no email address. The app never asks you for anything that identifies you.

Your voice does not leave the device

When you speak, what you said is turned into text on your iPhone. The recording is never transmitted and never stored.

What is sent, and not stored

Your topic and your answers are sent to our server as text so the next question, and finally the verdict, can be produced. Our server stores none of it. It holds no state at all: the state of the conversation lives on your device and travels with each question.

For processing, not for storage by us, that text reaches:

• Anthropic (via the Vercel AI Gateway): produces the questions and the verdict.
• ElevenLabs: produces the spoken voice, if you leave it switched on. Only the sentence the Officer says is sent, never your answer.
• Cloudflare: runs the server both of these pass through.

What stays on your device

When a Grill ends, it is written to your device: the topic, your answers as the Officer recorded them, the claims and their outcome, and the verdict. It is stored only there. It is not sent to us, it is not in your iCloud or device backup, and nobody but you can read it.

You can erase all of it at any time under Settings → On this device → Delete all Grills. Deleting the app erases it too. Since we never receive it, that is the only place it exists, and the only place it has to be deleted.

What we measure

We count how the app is used: that a Grill started or finished, how long a question took, whether the voice worked. These events contain no free text, not as a matter of policy but of construction: they can only carry numbers, true/false values, and short entries from a fixed list. Your topic, your answers and the Officer's questions are not in them and cannot be.

The events carry a device identifier, Apple's identifierForVendor. It applies only to our apps on your device, cannot be traced back to you, and disappears when you delete the app. They are analysed via our server at PostHog, in a data centre in the EU.

There is no advertising identifier and no tracking across other apps or websites, and therefore no Apple tracking prompt.

This website

The website counts page views too: which page, in which language, and which site you came from. It is analysed by PostHog in the EU, through our own address z.grillofficer.app, so the request does not go to a third party.

Nothing is stored on your device: no cookies, no local storage. That is why no banner asks for your consent here, and why every visit is a first visit, because there is nothing that recognises you. Your IP address is processed to deliver the request and to derive the country.

No clicks are recorded and no sessions are replayed.

Purchases

A subscription runs through Apple. We manage the entitlement with RevenueCat, using the same device identifier. We never see payment details; those stay with Apple.

Legal bases

Sending your input is the service itself (Art. 6(1)(b) GDPR). The anonymous usage measurement rests on our legitimate interest in an app that works (Art. 6(1)(f)).

Your rights

You may request access, rectification, erasure, restriction, portability, and object: write to the address above. Since we store no content, this concerns the usage events in practice; please tell us the rough period so we can find them. Your Grills are not covered by any of this, because they never reach us: they are on your device, and you erase them there. You may also complain to a data protection supervisory authority.

The fastest route needs nothing from us: deleting the app removes the device identifier. After that nothing can be attributed to you.