Privacy Policy

Last updated: January 18, 2026

Overview

Variables is a personal data logging application. This policy explains what data is collected, where it's stored, and how it's processed.

Data Collected

Account Data

Email address (required for account creation). Passwords, if used, are hashed with bcrypt and never stored in plain text.

User-Generated Content

All variables you create (names, types, units) and all values you log, including dates and timestamps.

Data Clips

Saved queries, including natural language prompts and generated SQL.

Session & API Data

Login sessions (1-year expiry) and API key prefixes for identification. Full API keys are hashed.

Where Your Data is Stored

The Variables backend application and database are hosted on Heroku, a cloud platform provided by Salesforce. Servers are located in the European Union (Ireland).

  • All user-generated content is stored in a PostgreSQL database hosted on Heroku's EU infrastructure
  • Your data remains on these servers and is subject to Heroku's security and storage policies
  • Data does not leave the EU for storage purposes

AI Services

Variables uses AI to power features like natural language queries and voice input parsing. Here's how that works:

  • AI functionality is provided through microservices hosted on Make.com (formerly Integromat), subject to Make.com's privacy policies
  • These microservices connect to third-party AI providers: Anthropic (Claude), Google (Gemini), and OpenAI (ChatGPT)
  • The specific provider used for any given request is selected automatically based on cost efficiency and quality
  • When you use AI features, relevant context (such as your variable names and the query you're asking) is sent to these providers to generate a response

Analytics & Tracking

Variables does not track your behavior inside the app. There is no usage analytics, no event tracking, and no third-party analytics tools running within the application itself.

The landing page (logvariables.com) uses Google services for analytics and advertising:

  • Google Ads (gtag.js) is used for conversion tracking to measure advertising effectiveness
  • This tracking only runs on the marketing website, not inside the app
  • Requires your explicit consent via the cookie banner
  • Can be declined without affecting app functionality

Data Isolation & Security

  • Each user can only access their own variables, values, and data clips
  • All data access requires authentication
  • Passwords and API keys are cryptographically hashed
  • Sessions are stored server-side with secure tokens

Data Retention

  • Your data is retained for as long as your account exists
  • There is no automatic deletion policy—your historical data remains available to you
  • You can request deletion of your account and all associated data at any time

Third-Party Services Summary

Service Provider Purpose
Hosting & Database Heroku (Salesforce) Application and data storage (EU)
AI Orchestration Make.com AI microservice hosting
AI Processing Anthropic, Google, OpenAI Natural language processing
Email External mail service Magic link authentication
Advertising & Analytics Google Ads (gtag.js) Landing page conversion tracking (consent required)

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access your personal data
  • Rectify inaccurate personal data
  • Erase your account and all associated data
  • Export your data in a portable format
  • Object to processing of your personal data
  • Withdraw consent for optional processing (like landing page analytics)

Data Controller

Variables is operated by an individual, not a company. The data controller for your personal data is:

Johannes Klumpe
johannesklumpe@gmail.com

Contact

If you have questions about this Privacy Policy or want to exercise your data rights, email johannesklumpe@gmail.com.