Privacy Policy

1. General and Mandatory Information

1.1 Data Protection

The operators of this website and the HotLog app take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and this privacy policy. Personal data is any data with which you could be personally identified. This privacy policy explains what data we process, for what purpose and on what legal basis.

In short: the HotLog app does not collect any data. Your sessions stay on your iPhone, in Apple Health and in your own iCloud account. This website sets no cookies, uses no analytics and loads nothing from third parties. The only personal data we receive is what you send us by email, and the technical data your browser sends when it requests a page.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

1.2 Notice Concerning the Party Responsible for this Website

The party responsible for processing data on this website and in the app is:

Anwert Digital GmbH
Rotenturmstraße 27/2
1010 Vienna, Austria

Email: support@hotlog.app
Phone: +43 699 144 444 99
Website: anwert.io

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

1.3 Revocation of Your Consent to the Processing of Your Data

Some data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

1.4 Right to File Complaints with Regulatory Authorities

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the Austrian Data Protection Authority: www.dsb.gv.at. You may also turn to the authority in the EU member state where you live or work.

1.5 Right to Data Portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

1.6 SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content. You can recognize an encrypted connection in your browser’s address line when it starts with “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

1.7 Information, Blocking, Deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted, and to object to processing that is based on our legitimate interests. You can contact us at any time using the address given above if you have further questions on the topic of personal data.

1.8 Opposition to Promotional Emails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

1.9 Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

2. Data Collection in Our App

2.1 We Do Not Collect Data

In the app, we do not collect any data. HotLog contains no analytics, no tracking and no advertising, and it sends nothing to us. Your sessions, your sauna types and your settings are stored on your iPhone and, if you are signed in to iCloud, in your own iCloud account (see 2.4).

2.2 Behavioral Data from iOS

iOS collects data about the app automatically, such as crash logs and activity reports (more about App Analytics). If you have chosen to share analytics with app developers in your iPhone’s settings, Apple provides us with aggregated statistics that contain nothing that identifies you. If you’d like to deactivate this, have a look into your settings. More about Apple’s privacy policy can be found on their website.

2.3 Health Data

The app asks you for access to your Apple Health data. You decide in iOS which data HotLog may read and write, and you can change that at any time in the Health app or under Settings › Privacy & Security › Health › HotLog.

  • HotLog reads your date of birth, sex, height and weight, only to estimate the calories you burn during a session.
  • HotLog records each session as a workout in Apple Health, with its duration, the estimated calories and your heart rate, if you entered it.
  • HotLog reads back the workouts, heart rate and calories it recorded, so that it can update or remove them when you change or delete a session.

This data stays on your iPhone and in Apple Health. We have no access to it, and we do NOT use it for anything else.

2.4 iCloud Sync

If you are signed in to iCloud on your iPhone, HotLog stores your sessions and your own sauna types in the private database of your iCloud account (Apple CloudKit), so that they are available on your other devices with the same Apple Account. Apple transfers and stores this data under its own terms and privacy policy. We have no access to it. You can turn this off for HotLog in the iCloud settings of your iPhone.

2.5 Sync Report

If syncing does not work, you can create a report on the state of the sync in the app’s settings (iCloud Sync) and share it with us. The report is created on your iPhone. It contains technical sync metadata, the number of your sessions and sauna types and the date of your newest session, but no session details, notes or personal information. It only reaches us if you send it yourself, and then it is treated like an email (see 3.3).

2.6 Siri, Shortcuts and CSV Files

You can log sessions with Siri and Shortcuts. The app handles these requests on your iPhone; what you say to Siri is processed by Apple under its privacy policy. When you export or import your sessions as a CSV file, the file stays on your device or goes wherever you choose to save or send it.

2.7 Purchase and Download

You buy and download HotLog through Apple’s App Store. Apple handles the purchase, the payment and the download as an independent controller under its own privacy policy. We receive no personal data about you from it.

3. Data Collection on Our Website

3.1 No Cookies, No Analytics, No Third-Party Content

hotlog.app is a static website. It sets no cookies and uses no analytics, no advertising and no social media plugins. Fonts, scripts and images all come from our own domain, so your browser contacts no third party when you visit. The video on our home page is not embedded: it is a link, and YouTube only receives data from you if you follow it.

3.2 Hosting and Server Log Files

The website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. To deliver the pages and to protect the service against attacks, Cloudflare processes the information your browser automatically transmits with every request:

  • IP address
  • Time of the server request
  • Requested page
  • Referrer URL
  • Browser type and browser version
  • Operating system used

These data will not be combined with data from other sources, and we keep no server log files of our own. The basis for data processing is Art. 6 (1) (f) GDPR: our legitimate interest in delivering this website securely and reliably.

Cloudflare acts as our processor. Its data processing addendum is part of our agreement with Cloudflare. Where data is transferred to the USA, this is covered by Cloudflare’s certification under the EU–U.S. Data Privacy Framework and by the European Commission’s standard contractual clauses. Details are in Cloudflare’s privacy policy.

3.3 Contact by Email

Anyone who writes to us by email, including from the app, transmits the data in it, for example name, email address and message. This data is processed to handle the request and any follow-up questions. No data is sent to third parties for this.

Emails to us are received and stored in our mailbox at Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft acts as our processor. Where data is transferred to the USA, this is covered by Microsoft’s certification under the EU–U.S. Data Privacy Framework.

Processing is based on consent (Art. 6 (1) (a) GDPR). Consent can be withdrawn at any time; an informal email is sufficient. The lawfulness of processing carried out before the withdrawal remains unaffected.

The data is kept until its deletion is requested, consent is withdrawn or the purpose no longer applies, and for no more than ten years for the traceability of communication. Statutory retention periods remain unaffected.

3.4 Links to Other Websites

This website links to Apple’s App Store, YouTube, X, Facebook and other external websites. Once you follow such a link, the privacy policy of that website applies.

4. Changes To This Privacy Policy

We may update our Privacy Policy from time to time, when the app, the website or the law changes. We will notify you of any changes by posting the new Privacy Policy on this page and updating the date at the bottom.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

5. Contact Us

If you have any questions about our Privacy Policy, feel free to reach out to us:

Last edited: October 22, 2026