Hybrid AutoPress

App privacy

Privacy Policy for the Hybrid AutoPress App

This is a courtesy translation; the German version is the binding one. In short: AutoPress has no account, runs no servers of its own and contains no analytics, advertising or tracking services. The app talks to your WordPress site and to the App Store, and to nobody else.

This policy covers the app for iPhone, iPad and Mac. The website hybrid-autopress.com has its own privacy policy.

2. The essentials first

Hybrid AutoPress uploads Markdown files from your device as posts and pages to a WordPress site that you name yourself. There is no user account with the developer, no server of its own and no analytics, advertising or tracking service. As the developer, I never have access to your documents, pictures, credentials or websites.

3. Your documents and pictures

The app reads only what you give it: the Markdown files and folders you pick or drag into the window, and the pictures in or next to them. On the Mac the app runs in the sandbox; on iPhone and iPad the system's file access applies. A photo from your library reaches the app only when you choose it one by one in the system's photo picker; the app has no access to the rest of your library.

Converting Markdown into WordPress blocks and scaling, cropping and captioning pictures happens entirely on your device. When you upload, text, pictures and the details you set (title, status, date, categories, tags, excerpt, author, SEO fields, credit, alt texts) go from your device straight to your WordPress site, where the privacy rules of the site's operator or your hosting provider apply. The app keeps nothing of your documents beyond the session.

4. Websites and credentials

To connect a website, the app calls its WordPress REST API (among other things the site's address, the user profile, categories, tags, authors and the post schema, to learn which fields the site accepts). Websites are only contacted via https; an unencrypted connection is allowed solely to a test installation on your own machine (localhost).

With sign-in via the browser you sign in to your own website, and WordPress creates an application password for AutoPress; your login password does not reach the app. Alternatively you enter a user name and an application password you created yourself. For WordPress.com the sign-in runs on Automattic's sign-in page, where the privacy policy of Automattic Inc. applies.

Application passwords and access tokens are kept in the keychain of your device, never in the settings or a file, and are transmitted to nobody but the website they belong to. Every application password can be revoked in your WordPress profile; “Manage Websites” in the app removes a website and its credentials from the device.

5. Settings on the device

The connected websites (without secrets), the image settings and the choice “post or page, draft or publish” live in the app's settings on your device. They never leave it and are removed when the app is deleted.

6. Subscription and free trial (App Store)

The AutoPress Pro subscription is handled entirely through Apple's App Store (StoreKit). Purchase, payment, billing, renewal and cancellation are processed by Apple under Apple's own privacy policy; I receive neither your name nor your address or payment details. The app only asks the App Store whether a valid subscription exists. The start of the seven-day trial is stored locally in your device's keychain.

7. No data collection by the developer

AutoPress contacts no developer servers and contains no third-party analytics or crash-reporting services. Crash reports reach me at most in anonymised form via Apple, and only if you have allowed the sharing of diagnostic data in your device's settings yourself.

8. Links to the outside

On your command the app opens pages of your website (view the post, edit in WordPress, open the profile) as well as Apple's terms of use and this privacy policy in the browser. Only when you follow such a link does the respective provider process data under its own rules.

9. Your rights

To the extent that I process personal data at all (in practice only when you write to me by e-mail), you have the rights under Articles 15 to 21 GDPR: access, rectification, erasure, restriction, data portability and objection.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR); the authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany. For data on your WordPress site its operator is your point of contact; for data at the App Store it is Apple.

10. Currency

Version: September 2026. If the app changes, for example through new features, this policy will be updated.

Back to the home page Website privacy policy