Privacy
Privacy Policy for Padshout
Last updated: 7 September 2026
The short version
Padshout calls out combinations. That's it. There is no account and no sign-in. We do not see how you train, how often you open the app, or who you are — your training history stays as a file on your iPhone.
There is one exception, and it belongs here rather than in the small print: we use a service provider to handle purchases. It learns that a device opened the app. Section 4 says exactly what it receives.
That is why this policy is short. It is still complete.
1. Who is responsible
Theodor Staubach An der Bogenheide 45 16348 Wandlitz Germany Email: contact@padshout.com
We are based in Germany, so the EU General Data Protection Regulation (GDPR) applies to this app wherever you use it.
2. Your training history stays on your device
When you finish a session, the app writes a summary of it to a file on your iPhone. That summary contains:
- when the session took place
- which sport and which level
- how long it lasted and how many rounds
- how many techniques were called, and how they split across punches, kicks, knees and elbows
Nothing else. No name, no email address, no device identifier, no location.
The file sits in the app's protected storage on your device. It is not uploaded, not backed up to us, and not shared with anyone. We have no access to it — not technically, not legally.
Why we may store it: without that file, the History feature would not exist. Storing it is therefore strictly necessary to provide the service you explicitly asked for (Section 25(2) No. 2 TDDDG, the German implementation of the ePrivacy rules). To the extent the entries relate to you at all, the legal basis is Article 6(1)(b) GDPR — providing the feature you are using.
How long: for as long as you keep it. You can delete any individual session inside the app. Delete the app and the file goes with it. We neither have to do anything, nor can we.
3. The calls are audio files inside the app
Padshout ships its calls as finished audio files. They were produced in advance with the service ElevenLabs and are contained entirely in the app. Nothing is sent and nothing is generated while you train — the app plays a file, that is all. ElevenLabs does not learn that you use the app and receives no data about you from us.
All voices are artificially generated. They do not imitate any particular real person.
If an audio file is ever missing, the iOS speech function speaks the text instead. Only the name of the technique is handed over in that case. Nothing about you goes with it, because the app knows nothing about you. How Apple operates speech synthesis is governed by Apple's own privacy policy: https://www.apple.com/legal/privacy/
4. Purchases go through Apple
If you subscribe or buy Lifetime, that happens in the App Store, not in our app. We never see your payment details. Apple is an independent controller for that processing, and Apple's privacy terms apply.
From Apple we receive only aggregated sales reports — how many purchases happened in which country. No individual is identifiable in them. Our legal basis for reviewing those reports is our legitimate interest in running the business properly, Article 6(1)(f) GDPR.
To know whether your purchase is valid, we work with RevenueCat, Inc., San Francisco, USA. RevenueCat is our processor under Article 28 GDPR; a data processing agreement is in place. What is transmitted: the identifier your iPhone gives our app (the identifier for vendor), your Apple purchase receipt, device model, operating system version and country.
Two things matter here:
- The identifier is tied to no name and no email address. We set no identifier of our own. Anyone who resets it or deletes the app is a new device to us.
- Contact happens at first launch, not only at purchase. That is technically necessary so the app knows whether Premium has already been paid for.
The legal basis is Article 6(1)(b) GDPR (performing the purchase contract) and otherwise (f). The transfer to the USA relies on the European Commission's Standard Contractual Clauses. RevenueCat's own policy: https://www.revenuecat.com/privacy/
5. What we do not do
- We have not built in any analytics or crash reporting.
- We use no advertising identifiers and do no cross-app tracking. That is why Padshout never asks for tracking permission.
- We set no cookies. The app opens no website on its own.
- We do not sell personal information. We share only what Section 4 describes, and only with our processor for handling purchases. If you are a California resident: we do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA, and we do not process sensitive personal information. The same holds for the other U.S. state privacy laws.
6. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21).
Honestly: we store nothing about you and cannot identify you. If you write to us, we cannot link you to any usage — that is not an excuse, it is Article 11(2) GDPR. Everything you have saved is on your device and under your control. Write to us anyway if you have a question: contact@padshout.com
You may also complain to a supervisory authority. Ours is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany poststelle@lda.brandenburg.de
7. Children
Padshout is made for adults and for teenagers who train martial arts. We do not knowingly collect data from children — we collect none at all.
8. Changes
If the app gains a feature that touches data, we will update this policy first and put a new date at the top. If a feature ever sends something to us or to a third party, we will say so plainly inside the app before you use it.