Ordenda
EN

CLEAR & ACCESSIBLE

Privacy

Ordenda · Website updated: 30 September 2026

Last updated: 30 September 2026

This Privacy Policy explains which personal data is processed when you use the Ordenda app for iPhone and iPad, for which purposes, who receives it and which rights data subjects have. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, takes the EU General Data Protection Regulation (GDPR) into account. The German version is authoritative.

Controller

Xvision Solutions
Mario Mueller
Waldhaus 5
3432 Lützelflüh
Switzerland
office@xvision.solutions

Principles

  • Ordenda works locally: content is first stored on your device. No account is needed for local use.
  • Content only reaches our servers if you sign in and use cloud synchronisation with Ordenda Pro.
  • Ordenda contains no advertising, does no tracking across other companies’ apps or websites and does not sell data.
  • Usage analytics is voluntary and only active with your consent.

Data we process

Data on the device

Without an account, all content stays on your device. The following is stored:

  • workspaces, Areas, projects, tasks, notes, folders, reminders and tags with their metadata such as status, due dates, sort order and modification dates
  • attachments you add to notes and imported Markdown files
  • app settings such as language, appearance, notifications and Privacy Lock

Ordenda does not use iCloud synchronisation for this. The data is removed when you delete the app.

Account and sign-in

An account is only required for cloud synchronisation. The following is processed:

  • email address and password when signing in with email. The password is stored by the authentication service only as a cryptographic hash; we have no access to the password in plain text.
  • with “Sign in with Apple”, an identifier provided by Apple and the email address passed on by Apple, which may be a private relay address from Apple, and your name if you choose to share it
  • user ID, session and sign-in information, and the times of registration and sign-in
  • display name and optional profile picture

The authentication service sends emails to the address on file to confirm the email address.

Cloud synchronisation with Ordenda Pro

If you are signed in and have an active Ordenda Pro subscription, your content is synchronised with our server so that it is available on your devices and a copy exists in the cloud. The following is synchronised:

  • workspaces, Areas, projects, tasks, notes including their text, folders, reminders, tags and the history of changes
  • note attachments as files
  • a randomly generated device identifier so that changes can be assigned to the correct device and updated on your other devices

Synchronisation runs automatically as soon as you change content. Demo content is not synchronised. The data is stored with Supabase in a project located in Zurich, Switzerland, and is only accessible to your account; this separation is enforced on the server at database level.

Purchases

Ordenda Pro is offered as a subscription through Apple In-App Purchase. Payment data is processed exclusively by Apple. We receive the purchase confirmation and verify it with Apple on the server. We store the Pro status, the product, the expiry date and Apple’s transaction identifiers.

Notifications

Reminders are scheduled as local notifications directly on your device. Ordenda does not use push notifications sent via a server. You can turn off notifications at any time in the iOS or iPadOS settings.

Privacy Lock

The optional Privacy Lock uses Face ID, Touch ID or the device passcode through the features of iOS. Ordenda does not receive or store any biometric data, only the setting whether Privacy Lock is enabled. Privacy Lock protects the app interface but does not replace securing the device.

Crash and error diagnostics

To detect and fix crashes and technical errors, Ordenda uses the Sentry service. When a crash or technical error occurs, the app sends a technical report, in particular the type and code of the error, the affected area of the app, technical steps before the error, device model, operating system, app version and build, sign-in status and information on the stability of the app session (start, end, crash).

Reports contain no content from projects, tasks or notes, no email address and no user ID. Screenshots, screen recordings and recording of interactions are disabled. The IP address is technically used for the transmission but is not stored as part of the reports. Reports are stored in Sentry’s EU region (Germany) and deleted when the retention period expires, at the latest after 90 days.

Usage analytics with your consent

On first launch, Ordenda asks whether you consent to usage analytics. Without consent, no analytics data is collected, and Ordenda can be used without restriction.

With your consent, we use PostHog to understand which features are used and where workflows can be improved. Only predefined events are collected, for example opening the app, creating, editing or deleting an entry, starting a search without the search term, synchronisation and steps when taking out a subscription. The events contain the app version, language and technical categories, but no titles, texts, search terms, attachments, email address or user ID. No personal profiles are created. A randomly generated installation identifier makes it possible to analyse events from the same installation together. The data is stored in PostHog’s EU region.

You can withdraw your consent at any time in Settings under Privacy. After that, no further events are collected, and events not yet transmitted are discarded.

Technical data

Technically necessary data is generated when the server is accessed, in particular IP address, time, requested function and error messages. The hosting provider logs this data to ensure operation and security.

Purposes

We process data to:

  • provide the app and its local features
  • provide and secure the account and sign-in
  • synchronise content between your devices with Ordenda Pro and provide a cloud copy
  • verify purchases and unlock Ordenda Pro
  • ensure secure and stable operation, prevent misuse, and detect and fix crashes and errors
  • analyse usage and improve the app, with your consent
  • answer support requests
  • comply with legal obligations

Where the GDPR applies, we base processing on the following legal bases:

  • performance of the contract of use, in particular for the account, synchronisation and Ordenda Pro (Art. 6(1)(b) GDPR)
  • legitimate interests in secure, stable and abuse-free operation, including crash and error diagnostics (Art. 6(1)(f) GDPR)
  • consent for usage analytics (Art. 6(1)(a) GDPR)
  • compliance with legal obligations (Art. 6(1)(c) GDPR)

Under the FADP, processing takes place within the purposes stated above and in line with the principles of proportionality, purpose limitation and data security.

Recipients and processors

Personal data is only disclosed where this is necessary for operation, required by law or the data subject has consented. Service providers process data on our behalf and only for the agreed purposes.

  • Supabase, Inc. (USA) provides the database, authentication, file storage, server functions and real-time synchronisation. The project is located in Zurich, Switzerland.
  • Apple Inc. (USA) or Apple Distribution International Ltd. (Ireland) for distribution through the App Store, in-app purchases and “Sign in with Apple”. Apple’s privacy policy also applies to these services.
  • Functional Software, Inc. (Sentry, USA) for crash and error diagnostics. Reports are stored in Sentry’s EU region (Germany).
  • PostHog, Inc. (USA) for usage analytics, only with your consent. The data is stored in PostHog’s EU region.
  • Authorities only receive data where there is a legal obligation.

Transfers abroad

Synchronised content is stored in Zurich, crash and error reports and analytics data in the EU. Some of the service providers named above are based in the USA or use sub-processors abroad, for example for operation and support. Data is only disclosed to, or accessed from, a country without an adequate level of data protection if appropriate safeguards are in place, in particular certification under the Data Privacy Framework or standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the European Commission.

Retention and deletion

  • Local content remains on the device until you delete it or the app.
  • Synchronised content is stored for as long as your account exists or until you delete it in the app. If the subscription ends, synchronisation stops; your local content remains usable.
  • You can delete your account at any time in the app under Settings. This deletes the account, all synchronised content, attachments and the profile picture on the server as well as the content on the device. This does not cancel an active subscription; cancel it in your Apple Account settings.
  • Crash and error reports are deleted after 90 days at the latest. Analytics data is deleted when PostHog’s retention period expires.
  • Deleted data may remain in backups until the hosting provider’s regular backup cycles expire and is then overwritten.
  • Statutory retention obligations remain reserved.

Data security

We take appropriate technical and organisational measures, in particular encrypted transmission (TLS), access rules at database level (row level security), private file storage with short-lived signed links and storing the sign-in session in the iOS keychain. Absolute security cannot be guaranteed for electronic transmission and storage. Please therefore protect your sign-in details and unlocked devices.

Your rights

Within the scope of applicable law, you have the right to access, rectification, erasure, restriction of processing, objection and data portability. You can withdraw any consent you have given at any time with effect for the future; this does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on legitimate interests, you can object to it at any time on grounds relating to your particular situation.

Please send requests to office@xvision.solutions. To avoid disclosing data to unauthorised persons, we may ask for proof of identity.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the supervisory authority in your place of residence.

Changes

This Privacy Policy may be updated if Ordenda, the services used or legal requirements change. The version published in the app and on ordenda.app applies. We will inform you of material changes in an appropriate manner.

Contact

If you have questions about data protection, contact us at office@xvision.solutions.

This website

This static website is provided through GitHub Pages by GitHub, Inc. (USA). When you visit it, GitHub processes technical data, including your IP address, in particular to keep the service secure. More information is available in the GitHub Privacy Statement. Where data is transferred to the USA, GitHub relies on certification under the Data Privacy Framework or on standard contractual clauses. The legal basis is our legitimate interest in providing the website securely (Art. 6(1)(f) GDPR).

The website sets no cookies, embeds no analytics, advertising or social media services and loads no fonts or scripts from third parties. Your choice of light or dark appearance is stored only in your browser’s local storage under ordenda-site-theme and is not transmitted. You can remove this setting by clearing the website data.

Contact by email

If you send us an email, we process your email address and the content of your message to answer your request. The email link opens your own email app; no form entries are collected on this website.

office@xvision.solutions

Back to homepage