Privacy Statement

This privacy statement describes how the Reanimatie Timer app handles your data. We treat personal data with care and comply with the General Data Protection Regulation (GDPR).

Data controller

BennIT (Benjamin Ootjers) is responsible for the processing of personal data as described in this statement.
Chamber of Commerce: 61334286  ·  VAT: NL002200567B42
Contact: info@bennit.nl

---

Data processing

All session data — such as duration, sets, shocks and timestamps — is stored exclusively locally on your device and is not sent to external servers. The only data the app transmits is license data (only when using an organization license) and fully anonymous usage statistics. Both are described below.

Local storage

Session logs are kept on your device and are not shared automatically. You can export sessions as PDF or CSV; in that case you are responsible yourself for any further processing of that file.

License data

To use an organization license, the following data is stored on secure servers within the European Union (Supabase):

• Organization name and email address — for identification and communication about the license
• A device ID — a randomly generated code, unique to this device, with no link to personal information
• Time of last app launch — to check whether the license is actively in use

This data is used solely for license management and is not shared with third parties or used for any other purposes.

Anonymous usage statistics

To improve the app, we collect fully anonymous, aggregated usage statistics:

• On each app launch: app version, platform (iPhone/iPad), license status (trial, free or licensed) and location (country, region and where available city, derived from the IP address; the IP address itself is not stored)
• At session end: a duration category (short/medium/long), the number of sets and the number of shocks. No exact duration is transmitted.

A city is only shown in aggregate from five launches onwards; below that it remains visible only at region level, so that individual users can never be identified.

No device ID, email address or other personal data is sent along. The data is kept only as a daily total, so that individuals cannot be identified. You can disable this via Settings → Privacy in the app.

---

Legal basis for processing

• License data — performance of the license agreement (GDPR art. 6(1)(b))
• Anonymous statistics — legitimate interest to improve the app (GDPR art. 6(1)(f)); because the data is anonymous and aggregated, it cannot be traced back to a person

Retention period

License data is kept for as long as the license is active and up to a maximum of one year afterwards. The anonymous statistics have no person-related retention period, because they cannot be traced back to a person. Local session data remains on your device until you delete it yourself.

Recipients and processors

To store license data and process the anonymous statistics we use Supabase as a processor, with storage within the European Union.

To determine country, province and city from the IP address, ipwho.is is temporarily used as a geo service. The IP address is briefly sent to this service for the lookup and is then immediately discarded — not retained by us, and ipwho.is does not log requests.

No data is sold to third parties.

---

System permissions

The app requests access to the following device features:

• Notifications — for sound alerts when the app is running in the background
• Audio — for the metronome and warning sounds during resuscitation

These permissions are used solely for the core functionality of the app.

No tracking or advertising

The app does not use advertising networks or user tracking that follows individuals. Apart from the anonymous statistics described above, no data is shared with third parties.

---

Your rights (GDPR)

You have the right to access, rectification and erasure of your personal data, and to restriction of or objection to the processing. Because the anonymous statistics cannot be traced back to a person, they cannot be linked to an individual. For requests regarding license data you can get in touch via the address below. In addition, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).

---

Changes

We may amend this privacy statement from time to time. The most recent version is always available on this page, with the date of the last change at the top.

Contact