Try Now

Privacy Policy

Privacy Policy

Last updated: 17 June 2026

1. Data Controller

The controller responsible for data processing on this website and within the CullKit app is:

idyation GmbH
Represented by: Ingo Dyrbusch
Käthe-Kollwitz-Ring 2
40822 Mettmann
Germany
E-Mail: info@cullkit.com

2. This Website

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit this website, Vercel’s servers automatically log standard access data including your IP address, browser type, operating system, referring URL, and the date and time of your visit. This data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and reliable website operation). Log files are retained for a limited period and then deleted. Vercel acts as our processor under a data processing agreement compliant with GDPR (including Standard Contractual Clauses for transfers to the US). See Vercel’s privacy policy: vercel.com/legal/privacy-policy.

Cookies

This website does not use cookies — no session cookies, tracking cookies, or analytics cookies. No cookie consent banner is required.

Analytics and Performance Monitoring

We use Vercel Analytics and Vercel Speed Insights to understand how visitors use this website and to monitor page performance (Core Web Vitals). Both tools are cookieless and do not collect personally identifiable information. They record aggregated data such as page views, referrer, country/region, device type, and web performance metrics. IP addresses are used only to derive the approximate country and are not stored. No data is shared with third parties for advertising or cross-site tracking purposes. The legal basis is our legitimate interest in operating and improving this website (Art. 6 para. 1 lit. f GDPR). No consent is required because no cookies are set and no personal data is processed.

3. The CullKit App

What data does the app access?

CullKit connects directly to your Synology NAS over your local network or via Synology QuickConnect. The app accesses:

  • Your NAS login credentials (stored securely in your device’s Keychain — never transmitted to us)
  • Photo thumbnails and metadata from your NAS (cached locally on your device)
  • Star ratings and XMP sidecar files stored on your NAS

Your photos never leave your network

CullKit does not upload your photos, thumbnails, or metadata to any server operated by idyation GmbH or any third party. All data flows directly between the app on your device and your Synology NAS. We have no access to your photos or your NAS.

Local cache

Thumbnails are cached locally on your device to enable fast browsing and offline access. This data is stored in the app’s sandboxed container and is deleted when you delete the app. You can also clear the cache at any time from the app’s settings.

In-App Purchases

Subscription purchases are handled entirely by Apple via the App Store. We do not receive or store your payment details. Apple’s privacy policy governs the purchase process: apple.com/legal/privacy.

Crash reporting and diagnostics

The app may use Apple’s built-in crash reporting (if you have opted in to share diagnostics with developers on your device). This data is anonymised and processed by Apple. We receive aggregated crash reports through App Store Connect. No personally identifiable information is included.

In-app feedback

If you choose to send feedback from within the app (via the feedback card or Settings → Send Feedback), we transmit the following to a backend operated for us by Cloudflare:

  • The feedback message you write
  • Your email address — only if you choose to provide one so we can reply (it is optional and blank by default)
  • Basic technical context: the app version and build, your operating system version, and your device model (e.g. “iPhone”)

We use this data solely to understand and improve the app. It is not shared with third parties for advertising, not used to track you, and not linked to your identity. We do not collect any device identifier with your feedback. The legal basis is your consent and our legitimate interest in improving the app (Art. 6 para. 1 lit. a and lit. f GDPR). Submitting feedback is entirely voluntary; please do not include sensitive personal information in your message.

The feedback backend runs on Cloudflare Workers with data stored in the European Union. Cloudflare acts as our processor under a data processing agreement. See Cloudflare’s privacy policy: cloudflare.com/privacypolicy. We retain feedback only for as long as needed to act on it and then delete it.

4. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and port the personal data we hold about you. You also have the right to object to processing and to lodge a complaint with a supervisory authority (in Germany: the relevant Landesbeauftragte für Datenschutz).

To exercise your rights, contact us at: info@cullkit.com

Since we process minimal personal data and your photos are processed exclusively on your own device and NAS, most requests will be straightforward to fulfil.

5. Changes to this Policy

We may update this policy as the app and website evolve. The current version is always available at this URL. Significant changes will be communicated via the App Store release notes.