Privacy policy

Last updated: 2026-10-27

Controller under the GDPR: Balane GmbH · Balanstraße 84 · 81541 Munich · Germany Commercial register: HRB 301320, Amtsgericht München · VAT ID: DE455102718 Represented by the managing director Jonas David Höttler support@balane.tech

Balane Content Planner is the content planning app of Balane Office for macOS, iOS, iPadOS, Android and Windows. Your data is kept as readable files in a folder you choose. There is no account, no sign-in and no provider server. Without AI, the app makes no outside connections.

1. What the app stores — and where

A workspace is a folder of your choice. It holds posts, ideas, brands with style guides, channels, content pillars, the weekly plan, metrics and media as readable files. You bring in media and metrics (as CSV) through the file dialog. Settings and the recently opened workspaces are kept in the app's own folder.

This content is not transmitted to the provider.

If the folder is in iCloud Drive, Apple syncs it between your devices; for other synced folders, the same applies to the respective service. This follows that service's terms, not this policy.

2. No access to your channels

The app is connected to no account on Instagram, LinkedIn, TikTok or any other platform and publishes nothing itself. You share media through the system's share sheet and copy fields to the clipboard; what the app or platform you choose does with them follows its own terms.

3. Reminders

The app schedules reminders for planned posts as local notifications on the device. On Android it restores them after the device restarts. No push service is involved.

4. AI features (optional)

The AI features are switched off until you add your own API key in the settings. Before the first request, the app asks for your consent; “Use AI” can be switched off again at any time.

• →Requests go directly from your device to Anthropic (Anthropic PBC, USA), not through any provider server. Only your instruction and the excerpts the app puts together for the request (such as the selection or visible areas) are sent, plus a style guide if you have set one up. The app shows exactly what was sent under “Sent Context”. Nothing is sent without a request.
• →If you enter your own endpoint instead of Anthropic, such as a gateway in your company or a local model server, requests go there. Its operator is responsible for the processing there.
• →The key is kept in the operating system's secure storage (the keychain on macOS and iOS, Android Keystore, protected by DPAPI on Windows), never in your files or in the app's settings files. When you add it, the app checks it with a free request to the service.
• →Processing at Anthropic is governed by Anthropic's terms and privacy notices; billing runs through your account there. The provider of this app receives neither the key nor the content.
• →The app only applies AI suggestions once you accept them.

Without AI, the route via copied prompts remains: the app puts them on the clipboard and in a file in the workspace. Where you paste them is up to you.

5. App lock and biometrics

If you like, an app lock protects the app with a code. Only a hash of it (PBKDF2 with a random salt) is stored, in the operating system's secure storage. Face ID, Touch ID, Windows Hello or a fingerprint are checked by the system; the app never sees biometric data, the system only reports whether unlocking succeeded. With “Hide previews” the app shows no content in notifications and preview images.

6. Distribution, updates and store data

The app is distributed through the App Store (Apple), Google Play (Google) and the Microsoft Store (Microsoft). Downloads, installation and updates run through the respective store; the app does not check for updates itself. The store operators process data as independent controllers under their own terms, including crash reports if you have allowed sharing them in your system settings. In the store consoles the provider sees aggregated statistics (such as download counts) and the crash reports you share with developers; these don't tell the provider who you are.

7. No analytics, no telemetry

The app contains no analytics, tracking or crash-reporting libraries. It sends no usage data to the provider, aggregated or otherwise, and there is no account.

8. Your rights

Because the provider receives no personal data through the app, requests for access, rectification or erasure directed at the provider will generally have no subject matter. For email or form support requests, the general privacy policy of this website applies: https://www.balane.app/en/privacy

You remove your local data by deleting your files and uninstalling the app. Entries in the operating system's secure storage (such as an AI key or the app lock code) are best removed in the app's settings first; depending on the system, they may otherwise remain in the keychain after uninstalling.