Privacy Policy

1. Introduction

Total Creations ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use SignalWalker ("the Application").

2. Data Controller

3. Data Protection Officer

The controller has not appointed a data protection officer, as the legal requirements under Art. 37 GDPR are not met. We are a small company with fewer than 20 employees regularly involved in the processing of personal data.

For data protection inquiries, please contact: [email protected]

4. What Data We Collect

4.1 Account Information

When you register with SignalWalker, we collect:

• Email address
• Username
• Password (stored encrypted)
• Profile information (optional)

4.2 Usage Data

We collect information about your use of the Application:

• Tasks and ideas you create
• Settings and preferences
• Usage statistics (time in app, tasks created, etc.)
• Device and browser information

4.3 Audio Transcriptions

If you use the voice recording feature:

• Audio recordings are sent to third-party providers (Ark Cloud) for transcription
• Transcribed text is stored in your database
• Audio recordings are not permanently stored after transcription

4.4 Payment Information

For premium subscriptions, payment information is processed by our payment provider (Stripe). We do not store full credit card details.

5. How We Use Your Data

We use your data for the following purposes:

• Providing and improving our services
• Managing your account and subscriptions
• Communicating with you about updates and support
• Analyzing usage to improve the Application
• Protecting against fraud and abuse
• Complying with legal obligations

6. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Performance of a Contract (Art. 6(1)(b) GDPR): To provide our services
• Consent (Art. 6(1)(a) GDPR): For optional features like audio transcription
• Legitimate Interest (Art. 6(1)(f) GDPR): To improve our services and security
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with legal requirements

7. Data Sharing with Third Parties

We only share your data with third parties in the following cases:

7.1 Service Providers

• Supabase: Database and Authentication (EU)
• Backblaze B2: Media storage (EU region)
• Stripe: Payment processing (USA, SCCs)
• OpenRouter: AI text processing (USA, SCCs)
• Runware.ai: AI image generation
• Ark Cloud: Audio-to-text transcription
• Telegram: Bot messaging and notifications
• Resend: Email delivery (USA, SCCs)
• Umami: Web analytics (own server, EU)

7.2 Legal Requirements

We may disclose your data if required by law or to protect our rights.

8. Data Storage and Security

We take appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (SSL/TLS)
• Encrypted password storage
• Regular security audits
• Access restrictions to personal data
• Secure data centers in the EU (Supabase)

Your data is stored for as long as your account is active or as required to provide our services.

8.1 Specific Retention Periods

9. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You can request access to your stored data
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your data
• Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of processing
• Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured format
• Right to Object (Art. 21 GDPR): You can object to the processing of your data
• Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw your consent at any time

To exercise these rights, please contact us at: [email protected]

You also have the right to lodge a complaint with a data protection supervisory authority.

10. Cookies and Tracking

We use cookies and similar technologies. For more information, please see our Cookie Policy.

11. Children

SignalWalker is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

12. International Data Transfers

Your data is primarily processed in the EU. Some of our service providers may process data outside the EU. In such cases, we ensure that appropriate safeguards are in place in accordance with the GDPR.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Application. Continued use after such changes constitutes acceptance of the updated terms.

14. Contact

If you have any questions about this Privacy Policy, please contact us at: