Gradora SIOP collects no personal data and holds none about you. This page says so precisely, and then sets out the one place where any personal data arises at all — ordinary web server logs on this site — together with the legal basis for it and what you can do about it.
The app collects nothing. There is no account, no server of ours, no cloud sync, no analytics, no crash reporting and no advertising. Nothing you import, type, calculate or export is transmitted anywhere. The only outbound request the app makes is to Apple's App Store, to check whether your subscription is active — and that carries no planning data and no identifier of ours.
Gradora SIOP is made by Nikola Sretenovic, trading as Handful Apps, a one-person studio. For the small amount of processing described in Section 6, that is the data controller.
Contact for anything in this policy: hello@no.spam.invalid.handfulapps.com. There is no data protection officer, because the scale of processing here does not require one.
All of it. Specifically:
These live in the app's own storage inside Apple's application sandbox on your Mac or iPad. They are included in your device backups if you back the device up, which is a matter between you, your device and Apple.
Worth stating plainly, because this is a business tool and the question comes up in procurement.
Some fields can hold a person's name — the owner of an action, the "prepared by" line on a meeting pack, the list of meeting participants, the author recorded against an override. If you type a colleague's name there, that is personal data, and you are its controller, not us. Gradora SIOP is software running on your own device; it is not a processor acting on your instructions, because nothing reaches us to process. We have no access to those fields, no copy of them, and no ability to disclose them to anyone.
The same applies to anything personal inside an ERP extract you import. It stays where you put it.
Gradora SIOP is sold by subscription, so the app asks Apple's App Store whether the subscription attached to your Apple Account is active. That exchange is handled entirely by Apple's StoreKit framework.
We never see your Apple Account, your name, your email address or your payment details. Apple does not send them to us and the app has no way to ask. The purchase happens in Apple's interface, not ours. Apple is the merchant of record for every App Store sale.
Apple gives us aggregated, anonymised sales reports — units per country and the money owed — as it does for every app on the App Store. Nothing in them identifies a person. For its own part of the transaction Apple is an independent controller, under Apple's privacy policy.
If your employer bought your seat through Apple Business Manager, the assignment of that seat is managed by your own organisation's device management, and what they can see about it is a matter between you and them.
This website is served by a commercial web host, and like every web server it writes access logs. Those logs contain the IP address of the requesting device, the time, the page requested, and the browser's user-agent string. An IP address counts as personal data, so this section gives it the treatment it is due.
| What | IP address, timestamp, URL requested, user-agent, response status |
| Why | To keep the site running and to investigate abuse, errors and attacks |
| Legal basis | Legitimate interests (GDPR Article 6(1)(f)) — operating and securing a website. Balanced against your interests: the logs are not read routinely, are never combined with anything else, and are used for nothing but keeping the site up. |
| Who else sees it | The hosting provider, Namecheap, as our processor. Nobody else. Nothing is sold, shared or transferred for advertising. |
| How long | Short-term, on the host's normal rotation. We do not archive, export or retain copies ourselves. |
| Automated decisions | None. No profiling of any kind. |
That is the complete list. There are no cookies on this site, no analytics, no tag manager, no embedded video, no social buttons, and no web fonts fetched from anyone else's server.
The app exports plan archives, PDF meeting packs and Excel workbooks. Those go wherever you tell the file picker to put them, and what happens next is in your hands. Emailing a meeting pack to a finance director is your act, not the app's. If you set an auto-archive folder, a full archive is written there after every publish — choose a folder you control.
Where data protection law applies to you, you have rights of access, rectification, erasure, restriction, objection and portability over personal data a controller holds about you.
For the app, there is nothing to exercise them against. We hold nothing, so there is nothing to disclose, correct or delete on request. Your planning data is already portable by design — the plan archive is plain JSON and the meeting pack exports as PDF and as a workbook with live formulas. Deleting a plan, or the app, removes the data from your device; nothing survives elsewhere because it was never anywhere else.
For the server logs in Section 6, write to the address in Section 2 and we will do what can be done — though be aware that without knowing your IP address at a given moment we usually cannot identify which entries are yours, and the law does not require us to collect more data in order to find them.
You also have the right to lodge a complaint with a data protection supervisory authority, normally the one where you live or work. In the EEA the list is at edpb.europa.eu; in the UK it is the ICO. You do not have to come to us first, though we would rather you did.
Subscriptions, refunds and payment details are held by Apple as merchant of record. Requests about those go to Apple.
Gradora SIOP is a professional tool for manufacturing planning. It is not directed at children, is not offered to them, and collects no data from anyone of any age.
If this policy changes, the date at the top changes with it. A change that made the app collect anything would be announced in the app's release notes rather than quietly edited in here.
Questions go to hello@no.spam.invalid.handfulapps.com and are answered by the person who wrote the app.