Effective: May 2026 Provider: Qorvano° — Dustin Dondrup Email: info@qorvano.com Website: www.qorvano.com
1. Data Controller
The party responsible for data processing in connection with the app “Lineon” is:
Dustin Dondrup Qorvano° Email: info@qorvano.com Website: www.qorvano.com
2. Scope
Lineon is available as a native app (iOS, Android) and as a web app (https://lineon.qorvano.com/). Data processing differs between the two — please refer to the section that applies to you.
3. Native App (iOS, Android) — no data collection
The native Lineon app itself does not collect, store or transmit any personal data. Distribution of the app and processing of in-app purchases run solely through the Apple App Store or Google Play and are subject to those providers’ privacy policies.
Specifically:
- No registration or account creation required
- No analytics or tracking tools (no Google Analytics, no Firebase Analytics, no Crashlytics)
- No advertising and no ad tracking
- No location data
- No contacts or other device data
- Photo library access only when you actively pick an image — the app processes the selected image strictly locally
- No sharing of data with third parties
All image processing, all calculations and all generated PDFs are produced and stay strictly on your device.
4. Web App (lineon.qorvano.com) — privacy by design
The web variant runs in your browser, served by a host in Germany (IONOS, Frankfurt). Image processing itself happens client-side in your browser — your photo never leaves your device. The server only handles the anonymous payment flow.
4.1 What we store
When you pay for an image, our backend records:
- an anonymous image fingerprint as
HMAC_SHA256(server_secret, sha256(image))— this fingerprint cannot be reversed to the image and is unique to that exact image content, - a timestamp of the payment (
created_at), - an expiry (72 hours after payment,
expires_at), - an export counter (max. 5 re-exports,
export_count), - separately, a replay-protection hash of the PayPal order identifier as
HMAC_SHA256(server_secret, paypal_order_id).
4.2 What we do not store
- No original images — never uploaded to the server
- No generated PDFs — produced in the browser, downloaded directly
- No PayPal order or capture IDs in clear text — only the HMAC hash for replay defence
- No names, email addresses, phone numbers or postal addresses
- No cookies — only the payment status for the active session
4.3 PayPal as payment processor
Payment runs through PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). PayPal processes your payment data under its own privacy policy (https://www.paypal.com/en/webapps/mpp/ua/privacy-full). We only receive a confirmation that a payment succeeded — no card data, no account data, no personal master data.
4.4 Server logs
Caddy (our web server) keeps minimal access logs (timestamp, IP, requested URL, HTTP status) for 14 days for security and error diagnostics. IPs are deleted after that period.
5. In-App Purchases (Native)
Lineon native offers two pricing options:
- Single PDF export — as a consumable via Apple IAP or Google Play Billing
- Lifetime unlock — as a non-consumable, restorable via “Restore purchases” on reinstall
Qorvano° never has access to your payment information (card details, bank information, etc.). Processing is handled solely by Apple or Google:
6. Local Data Storage (Native)
The native app stores the following on your device:
- Currently edited image (during a session, not persistent)
- Generated PDFs (in the app sandbox, until you delete them)
- Purchase status (whether a lifetime unlock is present; single-export credits are consumed at export time)
This data is not synced, not uploaded to any cloud, and not shared with third parties. When you uninstall the app, all local data is automatically deleted.
7. Permissions
Lineon native requires one permission: read-only access to the photo library, requested only when you actively pick an image. The app prompts via the standard iOS / Android system dialogs.
No other permissions are requested — no camera, no microphone, no location, no contacts.
8. Web variant: cookies and local storage
The web variant sets no cookies that require consent. During an active payment flow a short-lived functional session cookie holds the payment status — this is permitted without consent under § 25 (2) No. 2 TTDSG / equivalent EU rules.
Local storage is used only for UI state (e.g. last-used configuration) — without any personal content.
9. Children and Minors
Lineon collects no personal data and is therefore suitable for users of all ages. The app contains no content that would be inappropriate for children.
10. Your Rights
Since we collect no personal data in the GDPR sense (HMAC fingerprints cannot be linked to you), most data subject rights drop out automatically. If you still have questions or want to trace a specific transaction via the PayPal order ID, contact:
Email: info@qorvano.com
11. Changes to This Privacy Policy
We reserve the right to update this policy as needed — particularly when introducing new features or pricing. The current version is always available at www.qorvano.com/en/lineon/privacy.
12. Contact
For privacy-related questions:
Dustin Dondrup Qorvano° Email: info@qorvano.com Website: www.qorvano.com