Privacy Policy

Effective Date: April 2026

Our Philosophy: Skales is built with a strict "Privacy First" architecture. We believe your local data should stay local. This document explains exactly what data we collect (only with your explicit permission), what we absolutely never collect, and how we protect your rights.

1. Introduction

Welcome to Skales. This Privacy Policy applies to:

Skales is a private, non-commercial project operated from Austria.

2. Data Controller

The responsible Data Controller according to the General Data Protection Regulation (GDPR) is:
Mario Simic
Vienna, Austria
Email: dev@mariosimic.at
(Private project, no commercial entity)

3. Data Collected by the Skales Apps (Opt-In Only)

The Skales apps (Desktop and Mobile) do not collect any data by default. If you explicitly opt-in to help us improve the apps or participate in the community features, we collect the following limited, anonymized data:

4. What We Strictly DO NOT Collect

To ensure your absolute privacy, the Skales apps are architected to never collect, log, or transmit:

5. Mobile App-Specific Data Handling

5.1 On-Device Storage

The Skales Mobile App stores all your data locally on your device using platform-appropriate secure storage:

5.2 Mobile App Permissions

Skales Mobile requests the following permissions only when needed, and only for local functionality:

5.3 Local Web Interface (Mobile only)

The Skales Mobile App includes a local Web Interface feature that lets you control the app from a browser on the same WiFi network. This server runs entirely on your device, is protected by a PIN you set, and transmits data only within your local network. No data is sent to Skales servers through this feature.

5.4 Third-Party AI Providers (BYOK Architecture)

When you use Skales with third-party AI providers (OpenAI, Anthropic, OpenRouter, Google, Groq, etc.), your prompts and responses go directly from your device to that provider using YOUR OWN API key. Skales is not an intermediary. Their privacy policies apply to that communication. We do not see, log, or store this data.

5.5 Local AI Models (Gemma)

Skales Mobile supports fully offline AI via local Gemma models. When using local models, no data leaves your device at all — not even to third-party AI providers.

6. Data Collected by the Websites

We operate two websites: skales.app (download, updates, and app backend) and getskales.app (marketing and documentation). Neither has login systems or mandatory registration.

7. Cookie Policy

8. Legal Basis for Processing

We process your data entirely based on your Consent (Art. 6 Abs. 1 lit. a DSGVO). Whether it is opting into app telemetry, joining the Discover Feed, submitting an email for a bug report, or accepting website cookies — nothing happens without your explicit, opt-in action.

9. Data Storage and Security

All server-side data (telemetry, bug reports, feed entries) is stored on secure shared hosting provided by Hetzner Online GmbH, located entirely within Germany (European Union). Data is stored in flat JSONL files with strict access controls.

On your device, the Skales Mobile App uses hardware-backed encryption where available (iOS Keychain, Android EncryptedSharedPreferences) for sensitive data like API keys. All other local data is stored in MMKV, a secure encrypted key-value store.

10. Data Retention

11. Your Rights under the GDPR

As a user within the European Union (and extended globally by us out of principle), you have the following rights:

If you wish to exercise these rights, simply email dev@mariosimic.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

12. Third-Party Services

Note: No third-party services process your Skales app data through us. All app backend communication goes directly to our own Hetzner server.

13. Children's Privacy

Skales is not directed at children under the age of 13 (16 in the EU/EEA). We do not knowingly collect personal information from children. The Skales Mobile App is rated for general audiences but does not include parental controls for online content. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at dev@mariosimic.at and we will promptly delete it.

14. California Residents (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA). Since Skales does not sell personal data, most CCPA provisions do not apply. However, California residents retain the right to access, delete, and opt out of data collection using the mechanisms described in Section 11.

15. Changes to this Policy

We may update this Privacy Policy occasionally to reflect new features or legal requirements. We encourage you to review this page periodically. Continued use of Skales after changes signifies your acceptance of the updated policy. Material changes will be announced in the app or via email if you are subscribed to updates.

16. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:
Email: dev@mariosimic.at

Imprint (Impressum)

Mario Simic
Vienna, Austria
Email: dev@mariosimic.at
Website: mariosimic.at
This is a private, non-commercial project. No VAT number or trade registration required under Austrian law for non-commercial activities.