1. An overview of data protection

General information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website and use the Kreatures web application. Personal data comprises all data that can be used to personally identify you. For detailed information, please consult our Data Protection Declaration found below.

Data recording on this website
Who is the responsible party for the recording of data on this website?
The data on this website is processed by the operator of the website. The contact details are available in the Impressum.

2. Hosting and Content Delivery Networks (CDN)

External Hosting via Google Firebase
This website is hosted by an external service provider (host), Google Firebase. Personal data collected on this website is stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

3. Data Collection on our Website and Application

Registration on this website (Google Authentication)
You can register on our website to use additional functions (the Kreatures Dashboard). We offer registration via Google Authentication. We use the data entered exclusively for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration (email address and basic profile info provided by Google) must be provided in full. Otherwise, we will reject the registration.
The legal basis for processing this data is the fulfillment of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

User-generated Content (Firestore)
When you use our tools (like Pilot Mode, Clarity Coach, Priority Engine), the text and data you input are stored securely in our database (Google Firestore) so that you can access your productivity history across devices. This data is strictly private and is processed on the basis of contract fulfillment (Art. 6(1)(b) GDPR).

AI Transparency & EU AI Act Compliance
Kreatures utilizes artificial intelligence (AI) to provide personalized productivity recommendations and guided journaling. In compliance with the EU AI Act transparency requirements, we explicitly inform you that you are interacting with an AI system (e.g., in Pilot Mode and Clarity Coach). The AI models we use are designed to assist you and do not make automated decisions that produce legal effects concerning you or similarly significantly affect you. They do not qualify as "high-risk" AI systems under the EU AI Act. Furthermore, we comply with the GDPR principle of data minimization; your personal inputs are not used to train foundational AI models without your explicit, separate consent.

Cookies
Our website uses so-called "cookies." Cookies are small text files that do not cause any damage to your device. We use strictly necessary cookies to ensure the core functionalities of the web app (like keeping you logged in).
Because these cookies are strictly necessary for the service, they are set based on Art. 6(1)(f) GDPR. We do NOT use tracking, advertising, or third-party marketing cookies without your explicit consent.

4. Your Rights

As a data subject under the GDPR, you have the right to:

Access: Request information about your stored personal data.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your data ("Right to be forgotten").
Restriction: Request restriction of processing your data.
Data Portability: Receive your data in a machine-readable format.
Revocation: Revoke consent previously given at any time.

To exercise these rights, please contact us at care@kreatures.org..