Skip to content
MemoDrop
ENDEPL
MemoDrop

Privacy Policy

MemoDrop · English · 4 Nov 2026

EnglishDeutschPolski

This privacy policy explains which personal data is processed when you use the app MemoDrop, for what purposes and on what legal basis, and which rights you have.

Last updated: 4 November 2026

This privacy policy only covers the app MemoDrop. When you visit our website, the privacy policy of the website applies. If you open a page of this website from within the app – for example this privacy policy or the support page – it is loaded like any other visit to the website; the website’s privacy policy applies to that visit.

1. Controller

The controller responsible for processing personal data in connection with the app within the meaning of the EU General Data Protection Regulation (GDPR) is:

Maximilian Skibinski
Skibinski.dev - Maximilian Skibinski
Wladimir-Komarow-Straße 41
15517 Fürstenwalde/Spree
Germany

E-mail: hello@skibinski.dev

2. At a glance

  • Your content and settings are stored on your device.
  • Data the app sends to a third-party service (YouTube and X) goes directly from your device to that provider – not via our servers.
  • No analytics or crash reporting services are built into the app.
  • No advertising.
  • No tracking: the app does not track you across apps and websites of other companies.
  • Payments are processed by Apple – we do not receive any payment details.

3. Data on your device

Content and settings that you create or enter in the app are stored locally on your device, in the app’s protected storage area. We do not operate a server for this data and have no access to it.

Sensitive information such as passwords or access keys (for example API keys) is stored in the encrypted keychain of your device (iOS Keychain).

If you back up your device via iCloud or to a computer, the backup may also contain the app’s data. Whether and where this happens is up to you in your device settings; iCloud backups are subject to Apple’s terms and the Apple Privacy Policy. We have no access to these backups.

4. Third-party services

When you use the corresponding functions, the app connects directly to the following services:

  • YouTube
  • X

When you use a function that relies on one of these services, the app sends the data required for it – for example the text or files you enter as well as technical connection data such as your IP address – directly from your device to the respective provider. The data does not pass through our servers.

Information on whose account the requests use and on the role of the providers can be found under “Additional information”.

Data is only transmitted when you use the corresponding function. The legal basis is Art. 6(1)(b) GDPR (providing the function you requested).

One or more of these providers are based outside the European Union or the European Economic Area – for example in the USA – or process data there. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR). Otherwise, the transfer is based on EU standard contractual clauses (Art. 46(2)(c) GDPR) or other appropriate safeguards under Art. 46 GDPR; you can request a copy from us, and further information can be found in the privacy policy of the respective provider.

5. Access to device functions

The app may ask you for access to the following functions of your device. You decide whether to allow access and can change your decision at any time in your device settings (Settings › MemoDrop).

  • Camera – to take photos or videos when you use a function of the app that needs the camera.
  • Photos – to select images or videos from your photo library or to save them there.
  • Notifications – to send you notifications. If notifications are sent from a server (push notifications), Apple’s Push Notification service assigns your device a push token, which is transmitted to that server for this purpose. You can switch notifications off at any time.
  • Face ID / Touch ID – to protect access to the app or to confirm actions. The check is carried out by the operating system; the app does not receive any biometric data.

Data that the app obtains through these functions is used only for the respective function and as described in this privacy policy.

6. Recipients and transfers to third countries

We only pass on personal data to the extent described in this privacy policy. The following recipients only receive the data they need for their respective task:

  • the providers of the third-party services listed above (YouTube and X)

We confirm that these recipients provide the same or equal protection of user data as stated in this privacy policy and as required by Apple’s App Store Review Guidelines.

Some recipients may also process data outside the European Union or the European Economic Area (for example in the USA). In that case, we only transfer data if the requirements of Art. 44 et seq. GDPR are met – in particular on the basis of an adequacy decision of the European Commission (Art. 45 GDPR, for example under the EU-U.S. Data Privacy Framework) or of EU standard contractual clauses (Art. 46(2)(c) GDPR). You can request a copy of the safeguards used from us; further details can be found in the privacy policies of the respective recipients.

7. Purchases

Paid content or functions of the app are purchased via Apple’s App Store. Payment is processed exclusively by Apple; Apple’s terms and privacy policy apply. We do not receive your payment details (such as credit card data) or your name. To unlock your purchase, the app only receives a confirmation of the purchase from Apple (for example the product, the date and the status of the purchase). The legal basis is Art. 6(1)(b) GDPR.

8. App Store

You obtain the app via Apple’s App Store. To download, install and update the app, Apple processes data such as your Apple Account and information about your device under its own responsibility; we have no influence on this. The Apple Privacy Policy applies.

If you have agreed in your device settings to share analytics data with app developers (Settings › Privacy & Security › Analytics & Improvements), Apple may provide us with crash reports and usage statistics in a form that does not identify you personally.

9. Contact by e-mail

If you contact us by e-mail – for example via the support page – we process your e-mail address, your message and any information you provide voluntarily (such as your device model or app version) in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to the use of the app, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). We delete your request once it has been dealt with, unless statutory retention obligations apply.

10. Obligation to provide data

You are not legally or contractually obliged to provide personal data. However, individual functions cannot be used without the data required for them.

11. Additional information

Link previews: When you save a link, MemoDrop loads the page's title, description and preview image directly from the linked website (the preview image from the address the page names for it). For links to YouTube and X, the app asks their public oEmbed services (www.youtube.com and publish.twitter.com) for the title and preview image. These requests contain the link's address and, as with every connection, your device's IP address; nothing else from your library is sent. They use no account and no key, neither ours nor yours, and cookies that websites set are discarded after the preview. YouTube and X answer these requests as independent providers under their own privacy policies. Link previews are on by default; you can turn them off in Settings › Capture & Display › Load Link Previews.

Screen capture on the Mac: To capture an area of the screen, the Mac app asks for the macOS permission to record the screen. The picture is saved in MemoDrop on your Mac.

Backups: A backup is a file that you create in the app and keep wherever you choose, for example in Files, in iCloud Drive or on a computer. We do not receive it. If you set a password, the file is encrypted.

12. Storage period and deletion

  • Data that the app stores on your device remains there until you delete it in the app or delete the app; deleting the app removes this data from your device.
  • However, entries in the iOS Keychain may remain on the device even after the app has been deleted, until the device is reset.
  • How long a third-party provider stores data that the app has sent to it depends on its terms and – where it processes the data on our behalf – on our instructions (see “Additional information”). To have such data deleted, you can contact the provider or us.
  • Otherwise, we delete personal data as soon as it is no longer needed for the purposes stated, unless statutory retention obligations require longer storage.

13. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR)
  • right to withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR)

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

The supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg)
Stahnsdorfer Damm 77
14532 Kleinmachnow
lda.brandenburg.de

To exercise your rights, an informal message to hello@skibinski.dev is sufficient. You can also use the form “Privacy request”.

14. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Children

We do not knowingly collect personal data from children under 13 – or from children under 16 in the EU/EEA unless a parent or guardian has consented (Art. 8 GDPR). If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at hello@skibinski.dev; we will then delete this data.

16. Changes to this privacy policy

We will update this privacy policy if the app, the services used or the legal requirements change. The current version is always available on this page. This version is effective as of 4 November 2026.