Privacy Policy

Last updated: March 2026

1. Controller

Julian Huth, [Address], Email: kontakt@huthfabrik.de

2. What data we collect and legal basis

Codex is designed with privacy in mind. We collect minimal data:

Server connection data: Server URLs and credentials you provide to connect to Jellyfin or Audiobookshelf (stored locally on your device) — legal basis: Art. 6(1)(b) GDPR (contract performance)
App settings: Your preferences and playback position (stored locally) — legal basis: Art. 6(1)(b) GDPR (contract performance)
Usage data: Anonymous analytics data to improve the app (optional) — legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service)
Device data: Device type, operating system, and app version — legal basis: Art. 6(1)(f) GDPR (legitimate interest)

3. Local data storage

Codex stores most data locally on your device:

Server credentials and connection details
Downloaded audiobooks for offline listening
Playback progress and bookmarks
App settings and preferences

This data is not transmitted to our servers.

4. Third-party services and international data transfers

Jellyfin / Audiobookshelf: Codex connects to your self-hosted server. Data exchange is between your device and your server directly.
Firebase Analytics (Google LLC, USA): Optional anonymous usage statistics — transfer basis: EU-US Data Privacy Framework (DPF)

5. Analytics and opt-out

We use Firebase Analytics to collect anonymous usage statistics. IP addresses are anonymized. You can disable analytics in the app settings at any time.

6. Data retention

Codex stores data primarily on your device. When you delete the app, all local data is removed. Analytics data is retained in anonymized form by Google for up to 14 months.

7. Your rights

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

If data processing is based on consent, you may withdraw your consent at any time with future effect (Art. 7(3) GDPR).

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You may contact the supervisory authority of your place of residence or the authority responsible for us.

9. Contact

For privacy-related questions: kontakt@huthfabrik.de