Veritas Deutsch

Privacy policy

As of 12 October 2026

1. Who is responsible

Jeremiah Schiebel
Hammstraße 30
52222 Stolberg (Rhld.)
Germany

E-mail: contact@cidix.dev. CIDIX is the software development brand of Jeremiah Schiebel; full details are in the legal notice.

2. In short

  • Veritas has no accounts. What you read, save and check is stored on your device and is not sent to us.
  • Article text reaches our server only when you use an AI feature, and is not stored there.
  • For a subscription we store a one-way hash of the purchase, the plan, its end date and request counts.
  • No analytics, no advertising, no tracking, in the app or on this website.

3. The app on your device

Your sources, the articles fetched from them, saved articles, checks, summaries, questions and settings are kept in a database on your device. We have no access to it. “Delete everything” in the app’s settings removes it; so does uninstalling the app.

If you subscribe, the proof of purchase that the store gives the app is kept in the device’s secure storage (Keychain on iOS, Keystore on Android).

The optional daily reminder is scheduled on the device itself. No push service is involved.

4. Publishers

To load feeds, articles and images, the app contacts the publishers’ servers directly, as a browser would. They receive your IP address and see that the request comes from Veritas. They are responsible for what they do with that; we receive none of it.

5. AI features

When you ask for a check, a comparison, a summary, an answer or the briefing, the app sends what the feature needs to our server: the text of the article or the headlines and opening lines of the reports, your question if there is one, and the language to answer in. The server passes this to the Gemini API of Google and returns the answer to the app.

Our server does not store these contents: no article text, no questions, no answers. It records only that a request was made (section 6).

Google processes the contents on our behalf under its terms for paid API services. Under those terms Google does not use them to improve its products, and may keep them for a limited time to detect misuse. For checks and answers, Gemini also searches the web with Google Search. Google may process data in the USA; it is certified under the EU–US Data Privacy Framework.

After a check or an answer, the app follows the source links it received, to show you where they lead. These requests go from your device to Google and to the sites concerned, which receive your IP address.

Legal basis: Art. 6(1)(b) GDPR (providing the service you asked for).

6. Subscription

Premium is bought through the App Store or Google Play. Apple or Google handle the purchase and the payment and are responsible for that; we do not receive your name, your e-mail address or your payment details.

To know that a subscription is active, the app sends our server the proof of purchase the store gave it (a purchase token from Google Play, or a transaction signed by Apple). The server checks it: with Google through the Google Play Developer API, with Apple by verifying Apple’s signature, which includes asking Apple whether the signing certificate is still valid.

The server then stores: a one-way hash (SHA-256) of the purchase identifier, the platform, the plan, the end of the paid period, when it was first and last checked, and per day the number of AI requests and the amount of text processed. It cannot tell from this who you are.

A subscription record is deleted 90 days after the subscription ends. Daily counts are deleted after about two months.

Legal basis: Art. 6(1)(b) GDPR (the subscription) and Art. 6(1)(f) GDPR (limits that protect the service from abuse).

7. Server and this website

The server and this website run on a machine rented from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (data centre in Berlin), which acts as our processor.

No access logs are written. The server logs each request with its kind, its duration, its size and the first characters of the subscription’s hash, without IP address and without contents. IP addresses are processed in memory for as long as it takes to answer and, for about a minute, to limit the number of requests. Legal basis: Art. 6(1)(f) GDPR (security of the service).

This website sets no cookies, uses no analytics and loads nothing from other servers; its fonts are served from here.

8. Who receives data

  • IONOS SE, Germany: hosting, as processor.
  • Google (Google Ireland Limited, Google LLC): the Gemini API for AI features, as processor; the Google Play Developer API to check Android purchases.
  • Apple: asked whether a signing certificate is valid when an App Store purchase is checked.

Beyond that we pass on no data, in particular not for advertising.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21).

What the server holds cannot be traced to a person by us (Art. 11 GDPR): there is no account, and a purchase is stored only as a hash. What the app holds is on your device and under your control. If you have a question about any of this, an e-mail to contact@cidix.dev is enough.

You may lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. Further notes

  • There is no automated decision-making about you and no profiling.
  • Connections to our server use TLS.
  • When Veritas changes, this policy is updated. The version published here applies.