Privacy Policy for the LeanShift App
As of: 15 August 2026. This English version is provided for convenience; the German version prevails.
1. Controller
The controller for data processing in the LeanShift app is Lean Shift UG (haftungsbeschränkt), Im Kleff 29, 58762 Altena, Germany, kontakt@lean-shift.com, represented by managing director Matthias Sperling. This policy applies to the LeanShift app on all platforms on which we offer it; the website lean-shift.com is covered by the separate privacy policy in the imprint.
2. Overview
LeanShift is an analysis and working tool for process recording and improvement work that functions without an account and without signing in. Your recordings and evaluations are created and remain on the device. The app contains no analytics tools, no tracking libraries and no advertising. The only data transfer to us is the licence activation (section 4). If you use the optional AI coach (off by default), the app downloads the language model once from servers operated by Hugging Face and GitHub when you first start an AI response; this technically exposes your IP address to those providers, no content from the app is transmitted. The model then runs entirely locally.
3. What the app stores locally
Stored locally on the device: process recordings with the details you capture, including names of people, coaching answers, target condition scenarios, metrics and settings; a consultant profile for exports, if you fill it in (name, company, address, email, phone, logo); after an activation, the licence status including the licence key and the purchase email address it contains. For the details you record about third parties (such as employee names in process recordings), you are yourself the data controller; we never receive this data. Under Privacy, the app offers “Delete all data”, which removes all locally stored content and settings.
4. Licence activation and purchases through Google Play
The app's only network connection to us is the activation and deactivation of a licence, caught up on the next start if activation happened offline. The app transmits the licence key, a randomly generated device identifier (a UUID with no link to person or hardware) and the product identifier to our licence server, operated on the infrastructure of Cloudflare, Inc. as a processor; any transfer to third countries is safeguarded by EU standard contractual clauses. The licence key itself carries the email address given at purchase. On the licence server, each device's activation is recorded, including this email address and the device identifier, to enforce the licence's device limit. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). The licence server processes IP addresses only briefly to protect against abuse and deletes them automatically (Art. 6(1)(f) GDPR). Content from the app is never transmitted. Purchases through Google Play: if you instead buy a paid tier directly in the app through Google Play, the data transfer works differently. When you purchase, the app sends Google a pseudonymous account identifier (a hash of the device identifier, never the identifier itself) and receives a purchase receipt (purchaseToken) from Google. The app then transmits this purchase receipt, the app's package name and the device identifier to our licence server. Our licence server verifies the purchase server-side with Google (Google Play Developer API) and then issues the licence. We store a hash of the purchase receipt (never the receipt itself), together with the licence identifier, licence tier, product name and package name, for six years. We do not process an email address through this purchase path. The legal basis for verification and issuance is performance of the contract (Art. 6(1)(b) GDPR). If Google reports a cancellation with refund or a revoked purchase, our licence server blocks the corresponding licence; the legal basis for this is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). To renew an active licence, the app checks again with our licence server on its own. For the purchase itself, Google acts as the store's independent provider: your purchase contract is with Google Commerce Limited (Ireland), Google displays the price and handles payment, and cancellation and refunds are processed through Google Play. Google's own privacy policy applies to this in addition.
5. Retention and deletion
The licence record on the licence server exists for the duration of licence administration. You release the device assignment via the app's licence deactivation; we carry out the complete deletion of your licence record including the email address on request to kontakt@lean-shift.com, unless statutory retention obligations prevent it. You delete all locally stored data on your device yourself; section 3 names the ways.
6. Device backup on Android
On Android, the app's storage may be included in the device backup of your Google account if you use your device's backup feature. That backup lives in your own Google account; we have no access to it. The app's delete function does not remove data from an already existing backup. You control that via your device's backup settings.
7. Your rights
You have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. For all requests, contact kontakt@lean-shift.com.
8. Changes
We publish changes to this policy at this address and point them out in the app or in the store listing.