Pastor Privacy Policy

This policy applies to Pastor for iPhone and iPad and to Pastor-related support correspondence.

Last updated: 7 November 2026

Controller and contact: Markus Mehlau
Email: apps@mehlau.net

Markus Mehlau is responsible for the personal data processed in providing Pastor-related support. This notice explains the processing under the Swiss Federal Act on Data Protection (FADP).
Your information stays in local app storage: Pastor stores the information you enter on your iPhone or iPad. Pastor has no separate user account or cloud sync service. Trial activation, purchases and restoration use your Apple Account. Pastor does not send your entries or activity dates to Markus Mehlau or an analytics or advertising service. The app contains no advertising or analytics SDKs.
Local activity dates: For each entry, Pastor stores its creation date when known, the most recent edit, view and use dates, and the date from which history is available. Copying a field or opening its website counts as use. These dates help you sort and filter your collection. They are stored locally with the entry; Pastor does not keep a chronological log of every action. Dates from before recording began are unknown. Full-data Pastor CSV preserves any recorded dates supplied with the file; legacy TSV and compatible CSV do not supply those dates.
Device protection: Pastor uses Apple's device data protection and requires a device passcode. Face ID, Touch ID, and device-passcode authentication are handled by Apple. Pastor does not receive your passcode or biometric information. The strength of device protection also depends on your device settings and passcode.
Copies you choose to make: Tapping a field in entry details to copy it places its text on the system clipboard with a two-minute expiration on that device. This expiration does not apply to text copied through the editor's standard selection menu. Depending on your Apple settings, Universal Clipboard may make copied text available on your other devices; Apple controls its availability there. Opening a link uses Safari, where that website's privacy practices apply. CSV and TSV exports contain cleartext entry information, including passwords. Full-data Pastor CSV also includes recorded activity dates; compatible CSV and legacy TSV do not. Pastor removes its temporary device exports when it becomes inactive; you manage any copies transferred elsewhere.
Trial and purchases: Pastor uses Apple's StoreKit service to activate the free trial, check purchase status and restore access. StoreKit communicates with Apple under Apple's privacy terms; Pastor does not send your entry contents to Apple as part of purchase verification or to the developer. The app uses verified purchase information and keeps a protected local marker for a verified earlier paid purchase, together with a clock value used to evaluate trial dates. These values contain no entry contents. The developer does not operate a purchase-verification server or receive your payment-card details from Pastor.
Scan Text: On supported devices, Scan Text uses Apple's built-in camera text input to insert text into the selected field. Pastor does not add an OCR service, save camera photos or upload camera images to a developer-operated server.
Backups and local recovery copies: Your device's backup settings determine whether Pastor's saved entries and protected recovery copies are included in a device backup, including an iCloud device backup. Pastor does not operate its own backup service. Temporary cleartext export folders are excluded from device backups.

Before certain database upgrades or a Replace import, Pastor keeps a protected local recovery copy to help prevent data loss. These copies may contain earlier versions of entries, including entries later deleted from the visible collection. Recovery copies remain within the app's local data; they are not a user-facing archive or a cloud service.
Deleting your information: You can delete entries in Pastor. Deleting an entry does not remove it from earlier recovery copies, device backups, clipboard contents, or exported files. To remove the app's entire local collection and recovery copies, use Delete App in iOS/iPadOS; Offload App retains app data. Keep any backup you need before deleting the app. You separately manage device backups and copies outside Pastor.
Support messages: If you email apps@mehlau.net, the sender and contact details, message, attachments and relevant email delivery/security information are processed to answer your enquiry, provide necessary follow-up and operate the email service securely. Providing this information is voluntary, but an enquiry cannot be answered without suitable contact information. Please do not send passwords or a copy of your collection. The developer cannot access your Pastor entries remotely.
Email hosting and transfers abroad: Support email is handled on the developer’s own mail server, hosted by DigitalOcean, LLC in New York, United States. DigitalOcean provides the hosting infrastructure as a processor. This server does not receive your Pastor collection or local activity dates.

DigitalOcean describes its Swiss–U.S. Data Privacy Framework certification in its privacy statement. Its processing and international-transfer terms are described in its Data Processing Agreement. You can contact apps@mehlau.net for information about the safeguards applicable to support data.
Retention of support correspondence: Routine support correspondence is kept only as long as needed for your enquiry and necessary follow-up. Messages are then moved to the Deleted mailbox. Deleted Pastor support emails are permanently removed from the mailbox during manual cleanup every 30 days. Correspondence required by law or needed for a specific legal claim is retained only as long as that purpose requires.
Your data protection rights: You can contact apps@mehlau.net to request information about personal data held for Pastor support, ask for incorrect data to be corrected, or request deletion or object to processing as provided by applicable law. Other rights, including portability, apply where the statutory conditions are met. Requests for access are generally answered within 30 days, subject to legal exceptions. Only information reasonably needed to verify and handle a request will be sought.

Your entries and activity dates stay in your local app storage. The developer cannot retrieve, change or delete them remotely; use Pastor and your Apple device settings for those actions.

You can raise data protection concerns with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.
Visiting the Pastor website: This notice covers the Pastor app and related support. Visiting mehlau.net involves separate website processing, such as server logs and website analytics. See the general website privacy policy for that processing. Pastor’s in-app absence of analytics does not mean that the website has no analytics.