We reserve the right to change this policy, which we will do through online posting. We use your data solely to provide you with services in which you enroll.
Who We Are
Ulysses GmbH & Co. KG is a German company located in Brockhausstraße 88, 04229 Leipzig. We comply with the European law for Data Protection (“GDPR”).
What Information We Collect and How We Use It
We collect solely information that is necessary to provide you with our services and to improve our product.
Basic Subscriber Information. To manage and verify your subscription across multiple devices, we collect your digital purchase receipts from Apple together with a unique device identifier. The digital purchase receipts only include information about the type and the time of a purchase. We do not see any contact or payment information. We also do not have access to your Apple ID. We are using to a unique, pseudonymized identifier that is stored inside your iCloud account and only accessible to our app. In addition to the basic purchase information, we collect data about redeemed trial and promotional codes. - Legal basis Art. 6(1)(b) GDPR
Purchase Statistics. For statistical reasons and fraud protection, we collect pseudonymized data about the time and type of a purchase or the redeemed trial or promotional code, the unique user identifier, an anonymous device identifier, the version of the app and the language settings. - Legal basis Art. 6(1)(b) and 6(1)(f) GDPR
Diagnostic Data (Optional). To help identify and solve specific problems with our products and services, we occasionally solicit diagnostic reports and other troubleshooting, bug, and crash reports from customers. - Legal basis Art. 6(1)(a) GDPR
Email Newsletter Subscription (Optional). To inform our users about new features, releases and blog posts, we provide a newsletter for which you can subscribe with your email address.
We use Campaign Monitor to manage our newsletter and other email lists. Campaign Monitor provides us with data concerning your email activity, that is, the place, date and time where and when you open our messages, the device type you are using, and your interactions with our messages such as clicking a link.
You can unsubscribe from our newsletter by clicking on the unsubscribe link provided at the end of the newsletter. If you don’t want us to track your email activity, you can click the preferences link at the end of the newsletter. It will take you to your newsletter preferences, where you can opt out from email activity tracking. You can also email firstname.lastname@example.org to update or unsubscribe your email address, to request that we delete your email address, or that we stop tracking your email activity. - Legal basis Art. 6(1)(a+f) GDPR
Student Application. If you apply for a student subscription, we collect your name, your email address and a photo of your student ID for the process of validation. - Legal basis Art. 6(1)(b) GDPR
Where We Store Your Data
Personal Content. Your content, e.g., your written words, keywords, daily goals, etc., is not saved on our servers nor do we have access to this data. This data is saved as human-readable text files locally on your Mac or iOS device and, in case you are using the iCloud function of the application, synchronized with your personal iCloud Drive storage (Apple service). iCloud Drive creates backups of your data and syncs it between your devices automatically. You always have the option to disable iCloud from the system settings.
In case you use the Dropbox integration, your content is stored on Dropbox, and we do not have access to this data.
Basic Subscriber Information. The digital purchase receipts, as well as the redeemed trial or promotional codes, are stored in Apple's CloudKit to sync your subscription data between your Apple devices. We do not have direct access to any data stored in your iCloud account.
Purchase Statistics. The purchase statistics are stored on servers of Heroku.
Usage Data and Device Information (Optional). The usage data and device information are stored with a pseudonymized user and device ID on our own servers hosted by Hetzner Online. It is not possible for us to resolve your name or other personal information from this data.
Diagnostic Data (Optional). Crash reports of the application are collected and sent to HockeyApp by users who explicitly opt into our beta software programs or who explicitly choose to provide diagnostic data to us.
Student Applications. For the process of validation, the student application data is stored at Heroku. After the application is processed, we store your data for another week before we delete the copy of your student ID and, in case of a denial, your whole student application. If your student application was accepted we solely store your name and email address for the duration of your license plus six months.
The server hosting company Melting Mind creates regular backups of our email traffic which includes all emails sent to you during the application process.
Customer Support Emails. For customer support and email services, we use Front as our help desk software. This means that every email you send to us will be stored at Front. Additionally, we are legally required to archive all email traffic for ten years. This is done by our server hosting company Melting Mind. We do not have direct access to the created backups.
How Long We Store Your Data For
We store your data for as long as German law requires, or as is necessary for the fulfillment or the initiation of a contract, or as long as we claim legitimate interests. After the expiration of that period, the corresponding data is routinely deleted or completely anonymized. We have detailed some of the deletion periods under “Where We Store Your Data”. Statistical and diagnostic data is generally never deleted.
We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or can result from contractual provisions (e.g., information on the contractual partner).
Depending on the usage of our services your personal data might be processed by the following services:
CloudKit database service and iCloud Drive file storage service provided by Apple, Inc.
Personal Data: Digital purchase receipts, usage of promotions and trials, pseudonymized user identifier
Country of Data Processing: Europe or USA
Email marketing service provided by Campaign Monitor Pty Limited, Australia.
Personal Data: Email address
Country of Data Processing: USA or Australia
Help desk software provided by FrontApp, Inc.
Personal Data: Support emails
Country of Data Processing: USA
Hosting service provided by Heroku, Inc.
Personal Data: Purchase statistics and student application status
Country of Data Processing: Europe
Hosting service provided by Hetzner Online GmbH.
Personal Data: Usage Data and Device Information
Country of Data Processing: Germany
Crash analytics software provided by Microsoft Corporation.
Personal Data: Crash reports
Country of Data Processing: USA
Email server hosting company.
Personal Data: Email traffic
Country of Data Processing: Germany
Your Privacy Rights (Under GDPR)
Right to Access. You can request Ulysses to provide you with information on how we collect, use, and store your personal information, and to provide you with a copy of your personal information we store.
Right of Rectification. You can request that we correct inaccurate information about you.
Right to Delete. You can request that we delete information collected about you, given that we are not required by law to preserve it, that it is not necessary for contract fulfillment and that we can still identify your records.
Right to Object. You can object to the processing of your information in certain cases, as well as request that Ulysses does not use your personal information for direct marketing purposes.
Right to Data Portability. If requested, we will provide you all data under our control in common, machine-readable formats. If requested, we will provide you with instructions to obtain your data, in cases where we do not have direct access.
Contact for Data Privacy
If you have any questions regarding your personal data as well as your privacy rights, please contact
Ulysses GmbH & Co. KG
Data Protection Officer
Responsible Body for Data Privacy
Responsible body for the processing of personal data within the meaning of the law. Art. 4 (7) GDPR :
Ulysses GmbH & Co. KG
We may use your contact information to communicate with you about our product, diagnostic data and error reports, provide support, and send you other information such as product updates and announcements. You can opt out of news and announcements by unsubscribing from our newsletter.
If the confidentiality of customer data is breached, we recognize our responsibility to our customers and to the public to disclose the nature of the risk and provide a transparent account of the events without undue delay. At a bare minimum, we must inform the applicable supervisory authorities as required by law and regulation.
Consent for Underage Enrollment
Those under the age of 16 may not use the services without the consent or authorization of their parent or legal custodian.
Ulysses (or sometimes “we”, “us” or “our”) refers to the company Ulysses GmbH & Co. KG.
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to an identified or identifiable natural person without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Last updated: Jun 12, 2018