Privacy Policy for KTRL App
Last updated: 1.2.2026
1. Introduction
KTRL App ("the App") is a client application that allows users to connect to a KTRL-compatible API in order to list devices and send commands to these devices.
The API can either be:
- self-hosted by the user, or
- hosted by the developer at https://ktrl-api.enea.tech
This Privacy Policy explains how data is processed when using the App in accordance with Swiss data protection law (revDSG).
2. Data Collection and Processing
2.1 Personal Data
The App itself does not actively collect, track, or analyze personal data.
Depending on how the App is used, the connected API may process the following data:
- Authentication or account-related data (for signing in)
- Device identifiers and device-related metadata
- Commands sent to devices
- Technical data such as IP addresses
2.2 API Logs and Database Storage
When using the hosted API at https://ktrl-api.enea.tech:
- Requests may be recorded in server logs for operational and security purposes
- Data required for functionality (such as accounts, devices, or commands) may be stored in a database
- No active tracking, profiling, or analytics are performed
When using a self-hosted API, all data processing and storage are fully controlled by the API operator.
3. Purpose of Data Processing
Data is processed exclusively for the following purposes:
- Authentication and authorization
- Listing and managing devices
- Sending commands to devices
- Ensuring system security and stability
- Debugging and error handling
4. Data Sharing
No personal data is sold or shared with third parties.
Data is transmitted only:
- between the App and the configured API endpoint
- as required to provide the App’s core functionality
5. Data Retention
Server logs are retained only for as long as necessary for operational and security purposes.
Data stored in the API database remains available as long as the corresponding account or devices exist, or until deletion is requested by the user or performed by the API operator.
For self-hosted APIs, retention policies depend entirely on the operator.
6. User Rights (Switzerland)
Under Swiss data protection law, users have the right to:
- request information about stored personal data
- request correction of inaccurate data
- request deletion of their data, where applicable
Requests regarding the hosted API can be directed to the contact information below.
7. Security
Appropriate technical and organizational measures are implemented to protect data processed by the hosted API. However, no system can be guaranteed to be completely secure.
8. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. Any changes will be reflected by updating the “Last updated” date.
9. Contact
If you have questions regarding this Privacy Policy or data processing, you may contact:
Developer: Enea Krähenbühl 3n3a.ch - Impressum
API Host: https://ktrl-api.enea.tech