Privacy Policy for the “Rillsoft Connect” app (Android)

Last updated: August 14, 2026

Diese Erklärung auf Deutsch: https://www.rillsoft.de/datenschutz-rillsoft-connect/

1. Overview

Rillsoft Connect is a mobile work app for time tracking, photo and document capture, vacation requests and viewing project schedules. It is used by employees of an organization that runs Rillsoft software. The app exchanges data only with the Rillsoft Integration Server used by that organization — either the Rillsoft Cloud hosted by us, or the organization’s own server on its premises.

This policy describes how the app processes data. For visits to our websites, the policy at https://www.rillsoft.com/privacynotice/ applies.

2. Who decides about your data

The controller under the General Data Protection Regulation is the organization that provides your access, usually your employer or client. It decides which data is collected, how long it is kept and who may see it.

The role of Rillsoft GmbH depends on the operating model:

• Rillsoft Cloud: We operate the server on behalf of the organization and act as a processor under Art. 28 GDPR, based on a data processing agreement with that organization.
• Own server (on-premises): The organization operates the server itself. We have no access to the data and process it only if the organization asks us for support or remote maintenance in a specific case.

The app sends no data to Rillsoft. There is no Rillsoft service reading along in the background.

3. What data the app processes

• a) Sign-in data: user name, access token and display name. If you enable “stay signed in”, user name and password are stored encrypted on the device.
• b) Server address: the address of the Rillsoft server entered by you or your organization.
• c) Organization and master data: tenants, projects, tasks, employees with names, roles and groups, and permissions — loaded from the server as far as your role is allowed to see them.
• d) Time tracking: planned and reported working hours, breaks, remaining effort, notes and approvals, each related to a task, a person and a day.
• e) Vacation: requests with period, status and comments, and entries of the team calendar.
• f) Photos and documents: images you take or pick in the app, and documents from the document management including description, file name and timestamp. Photos may contain technical metadata such as the time the picture was taken.
• g) Technical data: the device’s time zone and language setting for display, and the network status for synchronization.

The app does not collect location data, does not access contacts, calendar, messages or calls, and uses no advertising ID.

4. Purposes and legal bases

Processing serves the performance of the employment or service relationship: recording hours worked, documenting progress, handling vacation requests and providing the project information needed for this. The legal basis is regularly Art. 6(1)(b) and (f) GDPR, for employee data in Germany additionally Sec. 26 BDSG, where applicable supplemented by a works agreement. The information provided by your organization prevails.

5. Recipients — where the data goes

The app transfers data only to the Rillsoft server configured in it. There is no transfer to third parties: no analytics service, no ad network, no crash reporting service, no social networks. The app contains no tracking or analytics libraries.

Where the data resides depends on the server: for the Rillsoft Cloud the servers are located in Germany; for an own server the organization determines the location.

6. Storage on the device

So the app remains usable without a network connection, it stores the data of your working period locally:

• a local database with master data, time entries, vacation requests and document information,
• downloaded and captured files in a private app directory,
• sign-in data and the access token in an encrypted storage area of the operating system,
• display settings such as language, date format and server address.

Other apps have no access to this data.

7. Permissions

• Camera (optional): take photos directly in the app. You may decline; picking existing images remains possible.
• Internet and network state: sign-in and synchronization with the server.

The app requests no storage, location or contacts permissions.

8. Security of the transfer

Publicly reachable servers are contacted exclusively over an encrypted HTTPS connection; an unencrypted address is rejected. Only for servers in private networks, such as an internal address in a company network, does the app also allow an unencrypted connection. In that case the organization is responsible for securing its network.

9. Retention and deletion

On the server, retention follows the requirements of your organization. In cloud operation we delete data on its instruction and according to the data processing agreement.

On the device, the “sign out” function removes the credentials, the access token, the local database and the downloaded files. Uninstalling the app also deletes all local data. Data already sent to the server is not affected.

Accounts are not created in the app but issued by your organization; accordingly they are also blocked or deleted by it. To have your account and the related data deleted, please contact your organization. For questions about cloud operation you can reach us at info@rillsoft.de.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection under Art. 15 to 21 GDPR, and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Please address these matters to the controller responsible for you, usually your organization or its data protection officer. If a request reaches us directly and concerns data from cloud operation, we forward it to the responsible organization and support the response.

11. No purchases, no advertising

The app contains no advertising, no in-app purchases and no payment function. Any subscription is concluded by your organization outside the app.

12. Children

The app is intended for employees and is not directed at children.

13. Changes to this policy

We adapt this policy when app features or the legal situation change. The version published at this address applies; the date at the top shows its status.

14. Contact

Rillsoft GmbH
Mollenbachstr. 14
71229 Leonberg
Germany

Phone: +49 (0)7152 30725570
E-mail: info@rillsoft.de