Privacy Statement

This is a translation. The German version of this statement is the binding one. In the event of any discrepancy, the German text prevails. It is available in the application under "File → About / Legal" and on the website at https://software.behpunktdesign.de/beh-stitched/datenschutz/.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Christian Behrenbruch
Schwarzer Weg 11A
22955 Hoisdorf
Germany

E-mail: info@behpunktdesign.de
Telephone: +49 151 11202784

No data protection officer has been appointed, as the statutory conditions requiring one are not met.

2. Principle: the software works locally

The version of Beh.Stitched you acquired processes your designs exclusively on your device. Images, vector paths, stitch data and the created embroidery files are not transmitted to us or to third parties. This characteristic is part of the contract for the version supplied (clause 13 of the licence terms). Should a later version depart from it, this will be described before that version is made available; you are not obliged to switch to such a version.

In the current version there is, beyond that, no usage analysis, no telemetry, no crash reporting and no advertising or tracking measurement; the Software currently contains no components for any of these. Should such functions be introduced in future, we will amend this statement beforehand and — where legally required — obtain your consent.

External connections are used to check desktop licences (section 4) and for iPad in-app purchases and the free-export allowance (section 5), and for the optional Beh.Stitched account if you use it (section 5.3). Designs and embroidery files stay on your device.

3. Processing on your device

The Software stores the following information locally on your device (in the storage of the application or the browser) in order to remain usable between two starts:

• open projects and tabs from the last session,
• program settings (including language, window and panel sizes, display options),
• most recently used colours and your own presets for the pull compensation values,
• most recently opened files,
• your licence key and a randomly generated device identifier (see section 4).

Project contents and settings stay on your device. Licence checks are described in sections 4 and 5. Interrupted machine-file exports are temporarily kept in private app storage so delivery can resume. Removing app data deletes local information but does not reset the free allowance stored on our server.

If you wish to embroider text in the Software, the fonts installed on your device can be accessed on request. The font data is processed exclusively locally and is not transmitted.

4. Licence: purchase and check

4.1 Purchase

The seller of the licence is Digistore24 GmbH, St.-Godehard-Strasse 32, 31139 Hildesheim, Germany. The contract of sale is concluded between you and Digistore24 (merchant of record). Digistore24 processes the data required for the purchase — in particular your payment and invoicing data — under its own responsibility; the privacy statement of Digistore24 applies to that.

After the purchase, Digistore24 sends an automatic notification to our licence server so that the licence key can be issued. This notification contains

• the order number and your email address,
• your first and last name and your country,
• details of the order (product, quantity, amount, currency, tax rate and amount, payment type, language),
• internal identifiers of the distribution partner (buyer, address, merchant and order form).

The record also carries fields for a full postal address (street, postcode, town, state, telephone, company, form of address) — these are empty, because our order form does not collect them.

Only the required order identifiers, product identifiers, information about the order type and delivery, and your email address are used. The product identifier determines the licence type and is not stored. We store the order number, email address and delivery status. For an upgrade, the original and new order numbers are assigned to the same licence. This preserves the existing key and shared device limit and lets us assign refunds to the correct licence. Amounts, currencies and payment details are not stored. After checking the licence key and device identifier, the app receives the order number as part of its personal Digistore24 upgrade link.

All other details — including your name and country — are discarded immediately. They are not stored, not evaluated and not passed on. Technically this is implemented such that, once the authenticity of the notification has been verified, they are no longer available in the program flow at all.

We do not receive your payment data.

• Legal basis: Art. 6(1)(b) GDPR (performance of the contract for the use of the software).

4.2 Check

Purpose. When a licence is activated, re-checked or released, data is transmitted to our licence server in order to establish whether a valid licence exists and on how many devices it is in use.

Controller. We operate the licence server ourselves; the controller is the entity named in section 1. No payment or licensing service provider is involved.

Data transmitted. Transmitted are solely

• the licence key you entered, and
• a randomly generated identifier (UUID) created at the first activation, which makes the device distinguishable.

This identifier is generated by the software itself. It contains no hardware characteristics, no device name, no serial numbers and allows no conclusion about you or your device. For technical reasons your IP address is known to us during the connection — as with every request on the internet.

Data stored. Stored on the licence server are a cryptographic hash of the licence key (not the key itself), the device identifier, the time of activation and of the last check, as well as the order number and email address named in section 4.1.

Legal basis. Art. 6(1)(b) GDPR (performance of the contract for the use of the software) and Art. 6(1)(f) GDPR (legitimate interest in preventing unauthorised use).

No third-country transfer. The licence server is operated in Germany. The processor is checkdomain GmbH, named in section 6.1. A transfer to a third country does not take place.

Use without a connection. After activation, no connection is required to use the software. The software asks again at the earliest 14 days after the last successful confirmation. If that does not succeed it keeps working; only once more than 30 days have passed since the last successful confirmation does the export function pause, until the next contact is established. A failed attempt does not extend this period. The same period is stated in clause 3.6 of the licence terms.

Storage period. The licence-key hash and the device identifier are stored for as long as the licence is active on the device. If you release the device, the activation is lifted on the licence server; if you remove the application data, they are deleted on your device.

5. iPad: App Store and free exports

5.1 Purchase

Personal and commercial licences are one-time in-app purchases handled by Apple. Apple is the seller and processes payment details. We receive neither payment details nor your Apple ID, name or email address. Apple's privacy policy applies. Purchased licences continue to be verified with StoreKit and do not require our free-export counter.

5.2 Five free machine-file exports once per Apple account

Purpose. The allowance is shared across an Apple account's iPads. Our licence server prevents reinstallations, concurrent exports and repeated requests from multiplying it. The allowance is provided automatically; no separate activation or offer code is required. Free exports require internet. Drawing and saving projects remain available offline.

Transmitted data. The app sends Apple's signed proof of acquiring the app (AppTransaction), containing an app-specific account identifier, app identifier and version, acquisition information and cryptographic verification values. The counter action and a random export operation ID are sent as well. No designs, images, filenames, stitch data or embroidery files are transmitted. The proof contains no Apple ID login address or payment details.

Verification and storage. Apple's official library verifies the signature and the app identity. The proof is then discarded and never stored in files or application logs. Public certificate information is checked with Apple's certificate service without sending the app proof. On our server we store only a cryptographically derived account identifier, consumption and necessary operation identifiers with their state and expiry. Test and production allowances are separate. The pseudonymous identifier allows the same allowance to be recognised on another iPad.

Retention. The account identifier, consumption and confirmed operation IDs are kept while the free offer exists, to enforce the once-only allowance and resume interrupted delivery. Reservations expire after ten minutes. Cancelled and expired operations are removed within 30 days. Backups expire within 30 days. You may request deletion using the contact in section 1. The counter reference can be copied in the app for such a request, without sharing an Apple ID. Deleting the entire counter removes its account identifier, consumption and operation records from our server. A later request creates a new counter; the previous consumption can no longer be associated with it. Deleting the free counter does not affect purchased personal or commercial licences.

Legal basis and hosting. Processing provides the agreed allowance and prevents repeated use under Article 6(1)(b) and (f) GDPR. The existing checkdomain server is hosted in Germany (section 6.1). Apple's certificate service is contacted for signature verification without sending the app proof or derived account identifier. Apple's privacy policy applies to Apple's processing. Your IP address is necessarily visible during a connection. Technical server logs follow the retention periods in section 6.1.

5.3 Optional Beh.Stitched account

Purpose. The account lets you use a verified personal or commercial licence on iPad, Windows and Mac. It is optional. Existing purchases, licence checks and free exports remain available without a Beh.Stitched account. Projects, designs, images, filenames and stitch data are not uploaded to the account server.

Data and verification. We use your email address for sign-in codes and changes you request. Linking a Digistore purchase also requires verification of the order email address. Addresses are encrypted; codes and session secrets are stored as purpose-bound verification hashes. Other records include public installation keys, platform, derived purchase and receipt identifiers, licence type, verification times, device seats and replacement periods. On iPad, shared access is bound to the app-specific Apple account identifier verified through Apple's signed app proof. This does not disclose your Apple sign-in email address or payment data. Apple proofs are discarded after verification. Necessary purchase recheck references are stored only in encrypted form.

Local protection. Sessions, private installation keys and verified offline grants use protected operating-system storage. The private key stays on the device. Sign-in alone does not unlock exports: the server must verify the purchase and device. Grants last at most 30 days after the last confirmed purchase check. Connection failures do not extend this period.

Legal basis. Requested account management and shared licence access rely on Article 6(1)(b) GDPR. Protection against unauthorised purchase linking, additional licence seats and abusive requests relies on Article 6(1)(f) GDPR, using only necessary identifiers and periods. Provider verification requires contact with Apple or existing Digistore licence records; see sections 4 and 5.1. Account records and backups are hosted on our German licence server by checkdomain GmbH, named in section 6.1. Verification emails use the mailbox configured with that host.

Retention and deletion. Verification codes last ten minutes; consumed or expired codes are removed daily. Rate-limit events are removed after 24 hours. Refresh sessions expire after 90 days of inactivity; ended sessions are removed daily.

Delete your account under Settings → Account & licence → Delete account, confirming with a separate email code. Deletion removes the account address, sessions, associated installation keys, pending codes and encrypted provider references. Original purchases and independently managed free-export allowances remain. Minimal pseudonymous purchase and receipt identifiers and existing seat/replacement limits remain attached to the original licence for as long as needed to relink that licence and prevent additional usage rights. These records remain personal data. You may also request their deletion; we assess whether continued retention is necessary and explain the result individually.

Backups are removed after 30 days. A separate erasure journal holds only the environment, random account ID and deletion time, and is removed after 35 days. Confirmed deletions are reapplied before restored records are used. Existing grants on other devices may continue until expiry; no new grants are issued after deletion. Without access to the app, request deletion at info@behpunktdesign.de or follow the instructions at https://software.behpunktdesign.de/beh-stitched/delete-account/.

6. Website

6.1 Accessing the website (server log files)

When our website is accessed, the hosting service provider automatically records information in server log files which your browser transmits. This is in particular the IP address, the date and time of access, the file requested, the volume of data transferred, the browser type and the operating system.

• Purpose: technical operation, stability and security of the website.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in trouble-free and secure operation).
• Storage period: the log files are deleted after 14 days at the latest. IP addresses are anonymised after 24 hours where this is technically possible and sensible.

Processor: checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider. The service is performed exclusively in Germany, in a member state of the European Union or in a state party to the Agreement on the European Economic Area.

6.2 No cookies, no analysis, no external content

At the time of this statement, our website sets no cookies that are not strictly necessary for operation. There is no reach or usage analysis, and no fonts, maps, videos or other content are loaded from third-party servers. Should that change, we will amend this statement beforehand and — where required — obtain your consent. For this reason no consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is required, and no consent banner is displayed.

6.3 Linked external services (YouTube, Instagram)

Our tutorial videos are hosted on YouTube; we also run an Instagram profile. Neither is embedded in our website — they are only linked. Visiting our pages therefore loads nothing from YouTube, Google, Instagram or Meta — no cookies are set and no data is transmitted to these providers. The preview images are held on our own server as well.

Only when you click such a link do you leave our website and reach YouTube or Instagram. From that moment the controller is:

• for YouTube: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); its privacy policy applies (https://policies.google.com/privacy);
• for Instagram: Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland); its privacy policy applies (https://privacycenter.instagram.com/policy).

The provider may set cookies, analyse your usage and also transfer the data to the United States of America. If you are signed in to an account there, the provider can associate the visit with your account.

We have no influence over that processing and receive no personal data about your visit from these providers.

6.4 Contact form and e-mail

If you contact us via the contact form or by e-mail, we process the information you provide (in particular your name, e-mail address and the content of your message) in order to answer your enquiry.

• Legal basis: Art. 6(1)(b) GDPR where your enquiry serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
• Storage period: we delete your enquiry at the latest 12 months after it has been finally dealt with, unless statutory retention obligations prevent this.

7. No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

8. Your rights

You have the following rights against us in respect of the personal data concerning you:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• withdrawal of a consent given, with effect for the future (Art. 7(3) GDPR).

An informal message to info@behpunktdesign.de is sufficient to exercise them.

9. Right to complain to a supervisory authority

Without prejudice to other remedies, you have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany

10. Changes to this statement

We adapt this privacy statement when the Software, our website or the legal situation changes. The version published on our website at the relevant time applies.

Version: October 2026