Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you use this website and the Monte app. Personal data is any data that can be used to personally identify you.

2. Data Controller

The party responsible for data processing on this website is:

LuminousApps
Patrick Kass
Wiltbergstraße 90, Haus 37
13125 Berlin
Email: contact@luminousapps.de

3. Data Collection on This Website

Hosting

This website is hosted on Cloudflare Pages. For technical reasons, Cloudflare may collect data such as IP address, browser type, and access time when you visit these pages.

Contact

If you contact us by email, your information including the contact details you provide will be stored for the purpose of processing your inquiry and in case of follow-up questions.

4. Monte App: Data Processing

User Account

A user account is required to use the Monte app. This involves storing your email address, name, and role (parent/staff/director).

Children’s Data

The app allows recording data about children (name, date of birth, group, allergies, care hours). This data is used exclusively for managing daycare operations and is only accessible to authorized persons.

Notifications

Monte can send email and push notifications. Emails are sent via Brevo (formerly Sendinblue). Push notifications are delivered via Firebase Cloud Messaging.

5. Data Processing Agreements

We use the following service providers as data processors:

• Supabase (database, authentication) – EU servers
• Cloudflare (hosting, CDN) – EU presence
• Brevo (email delivery) – EU servers
• Firebase/Google (push notifications)

6. Your Rights

You have the right at any time to:

• Access your stored data
• Rectification of inaccurate data
• Deletion of your data
• Restriction of processing
• Data portability
• Object to processing

Please contact contact@luminousapps.de.

7. Data Security

We implement technical and organizational measures to protect your data. These include transport encryption (TLS/SSL), role-based access controls, and regular security audits.