prioiq
DE EN

Privacy Policy

Last updated: July 21, 2026

1. Data Controller

The party responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Marian Stocker Applications (sole proprietorship)
Marian Stocker
Garmanstraße 42
78357 Mühlingen
Germany

Email: support.prioiq@gmail.com

2. General Information on Data Processing

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data when using the "prioiq" app (the "App") and its related services. Personal data is any information relating to an identified or identifiable natural person.

3. Hosting and Technical Infrastructure (Base44)

The App is technically operated and hosted on the no-code platform Base44. On our behalf, Base44 processes all data stored within the App, including account data, tasks, notes, projects, and settings.

We use Base44 under its "Builder Plan". Under this plan, data storage (database, application logic, etc.) is by default hosted on servers located in the United States of America (USA). This means personal data is transferred to a third country outside the European Union and the European Economic Area.

Such a transfer is only permissible if an adequate level of data protection is ensured, for example through an adequacy decision by the European Commission (e.g. under the EU-US Data Privacy Framework, insofar as Base44 or its underlying infrastructure is certified under it) or through appropriate safeguards such as EU Standard Contractual Clauses (Art. 46 GDPR).

According to Base44, data transfers to the USA are primarily based on the EU-US Data Privacy Framework; where individual sub-processors are not certified under it, EU Standard Contractual Clauses apply as an additional safeguard.

Upgrading to a higher Base44 plan (Elite/Enterprise) would generally allow data storage within the EU. We are not currently using this option. Please note that even with such an upgrade, certain metadata (including account information, billing data, and some media files) may, for technical reasons, continue to be processed in the USA.

Base44 uses additional sub-processors to provide its services, including for payment processing and email delivery. An up-to-date list of these sub-processors is made available by Base44 in the Trust Center / dashboard of the respective workspace.

4. Registration and User Account

Using the App requires creating a user account. We offer the following sign-up/login options:

When signing in via Google or Apple, we receive from these services the data necessary to create the user account, typically an email address and a unique user identifier. The privacy policies of Google (Google Ireland Limited) and Apple (Apple Distribution International) apply in addition.

Within the App, users may voluntarily provide further information, in particular a display name and a profile picture.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

5. Calendar Integrations

The App allows you to connect external calendar services in order to provide you with a complete overview of your appointments within prioiq. The following providers can be connected:

5.1 Data Transferred

Once connected, calendar event data is primarily exchanged between prioiq and the selected provider. The following fields are transferred: event title, start and end time, duration, all-day flag, location, notes, and time zone. In addition, technical status data is processed, namely the synchronization status, the ID of the event in the external system, and the name of the respective provider.

Attendee email addresses, attachments or files from the external calendar, and any other sensitive metadata not contained in the fields listed above are not transferred.

5.2 Type of Connection

For Google and Microsoft, the connection is established via OAuth authentication. In this process, prioiq does not store your login credentials (username/password) with the respective provider, but only an access token, which is securely stored within the platform infrastructure (Base44).

For Apple/iCloud, the connection is established via an ICS subscription link. This is a one-way connection in which prioiq regularly retrieves the calendar feed.

5.3 Storage and Synchronization Direction

Synchronized calendar data is stored permanently in prioiq's database so that it can also be displayed in the App while offline or with an unstable internet connection. This is therefore not a purely live retrieval without storage, but rather a local copy of the appointment data.

Depending on the selected synchronization direction, changes you make to a synchronized appointment within prioiq are either sent back to the external provider (bidirectional synchronization for Google and Microsoft) or managed exclusively within prioiq without altering the external calendar (one-way import, in particular for Apple/iCloud).

5.4 Responsibility of Third-Party Providers

Once calendar data reaches the systems of Google, Microsoft, or Apple, its processing is governed by each provider's own privacy policy. The privacy notices of Google Ireland Limited, Microsoft Ireland Operations Limited, and Apple Distribution International apply in addition.

Legal basis: Art. 6(1)(a) GDPR (consent given by actively connecting the respective calendar account) and Art. 6(1)(b) GDPR (performance of a contract).

6. AI-Powered Features (Now Section & Review)

The App offers AI-powered features that operate in the background, including the "Now Section" for context-based task recommendations and the "Review" summaries. For this purpose, task data and context information you provide (e.g. location, available time, energy level) may be technically processed.

This feature is technically provided via the Base44 platform. Base44 acts as an AI service gateway and automatically and dynamically selects a suitable language model from a multi-model infrastructure, depending on the request, which comprises models from different providers (including OpenAI, Google, and Anthropic). The provider used in any given case is therefore not fixed to a single company but may vary from request to request. Base44 is our technical contractual partner and ensures that the connection to these models takes place via data-protection-compliant API integrations.

Legal basis: Art. 6(1)(b) GDPR.

7. Payment Processing (Stripe)

For paid subscriptions (Pro, Premium), we use the payment service provider Stripe (Stripe Payments Europe, Limited). Payment is processed via a checkout page hosted by Stripe. Complete payment data (e.g. card details) is processed exclusively by Stripe and is not disclosed to us.

As part of subscription management, Stripe provides us with the following data, which is stored in our App database (operated via Base44, see Section 3): email address, payment status, and, where transmitted by Stripe, name, billing address, and country.

Legal basis: Art. 6(1)(b) GDPR.

8. Email Delivery (Resend)

For sending transactional emails (welcome email, password change confirmation, project invitations), we use the email service provider Resend, which is integrated as a technical sub-processor via Base44. This involves processing the email address, name, and information about the triggering action (e.g. "password changed", "project invitation").

An agreement on data processing exists between Base44 and Resend as part of Base44's platform agreements; corresponding evidence can be found in the Trust Center or data protection documents of the Base44 workspace.

Billing-related emails (e.g. payment confirmations) are sent directly by Stripe.

Legal basis: Art. 6(1)(b) GDPR.

9. Project Invitations

Users can invite other people to join a shared project. An invitation can only be sent to people who already have a user account; the invitation feature cannot be used without an existing account. Accordingly, no data of individuals without their own user account is processed.

Invitation records (the invited person's email address, invitation token, status) are stored in our App database (operated via Base44). The invitation token is valid for 7 days by default. If the invited person does not accept the invitation, the record remains in the database until it is manually deleted by the inviting user or by us.

Legal basis: Art. 6(1)(b) GDPR.

10. Support Requests

When you contact us via support.prioiq@gmail.com, the data you provide (including sender name, email address, subject, and content of your message) is processed in order to handle your request. The support inbox is operated via Gmail (Google Ireland Limited); no separate ticketing system is currently in use.

Legal basis: Art. 6(1)(b) and/or (f) GDPR (legitimate interest in responding to inquiries).

11. Push Notifications

The App may send you push notifications (e.g. reminders). This is technically handled via the Base44 platform. Push notifications can be disabled at any time in your device or App settings.

12. Analytics and Tracking Tools

We do not currently use any analytics, tracking, or advertising tools (e.g. Google Analytics, Mixpanel, advertising SDKs) within the App.

13. Retention and Deletion

We only store personal data for as long as necessary for the purposes described above, or as required by statutory retention obligations. Users may delete their account and the associated data themselves within the App at any time.

Following account deletion, data in the active database is marked for deletion immediately. Because our infrastructure (Base44) uses cyclical backups, deleted data may still exist in backup systems for a transitional period of up to 90 days before being permanently removed as part of the routine backup rotation.

14. Minimum Age

Use of the App requires a minimum age of 16. Individuals under the age of 16 may only use the App with the consent of a parent or legal guardian.

15. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

To exercise your rights, please contact: support.prioiq@gmail.com

16. Changes to this Privacy Policy

We reserve the right to amend this privacy policy whenever changes to the App, the services used, or the applicable law make this necessary. The version in effect at the time of your visit or use shall apply.