Privacy Policy

Your privacy is important to us. It is NativeExpress's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you.

This policy is effective as of September 6, 2026.

Information We Collect

We collect information in two ways:

• Voluntarily provided information: Information you actively provide when making a purchase or contacting us
• Automatically collected information: Basic information your device sends when accessing our services

Payment Information

When you make a purchase to access our services, we collect:

• Payment details (processed securely through our payment processor)
• Billing information
• Email address for communication and access management

Web Analytics (Plausible)

Purpose. We want to know how many people visit our pages and which pages are found, so that we can improve what we offer.

Data processed. The page requested, the referring page, approximate origin at country level, device class, browser, and operating system. In our current configuration we additionally record:

• clicks on links leading away from our site, together with the destination address
• the downloading of files
• the fact that a form was submitted, expressly without its contents
• the scroll depth and the time a page was visible in the foreground

Anonymisation. From this information and your IP address, Plausible derives a counting value that changes daily and cannot be reversed. It serves only to avoid counting repeat visits twice within the same day. It does not allow us to draw any conclusion about you personally.

Cookies and access to your device. No cookies are set and nothing is stored on your device. A single value is read from your browser's local storage, and only in order to respect a deactivation of the measurement that you have set yourself.

What does not happen. Your IP address is not stored. No profile is created, there is no cross-site recognition, and no data is passed on for advertising purposes. Visits from a local development machine and from automated browsers are not counted.

Tool. Plausible Analytics, operated as a self-hosted instance on our own infrastructure. The data is not transmitted to the provider of the software or to any other third party.

Legal basis. Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly reach measurement).

Objection. You may object to this processing under Art. 21 GDPR; a message to the address given below is sufficient. You can also prevent the measurement using your browser's Do-Not-Track setting or a content blocker.

Switching the measurement off yourself. In addition to objecting under Art. 21 GDPR, you can deactivate the measurement by setting the value plausible_ignore to true in your browser's local storage. The script respects this and will no longer count your visits.

Use of Information

We use your personal information for:

• Processing payments and providing access to paid services
• Communicating important updates about our services
• Responding to your inquiries or support requests

Service Providers and Recipients

We do not sell your personal information. We share it only with the providers listed below, and only where the relevant service applies to you. If you browse the website without making a purchase, none of these providers receive your data.

Stripe. Payment processing. When you make a purchase, your payment and billing details are processed by Stripe. We never receive or store your card details ourselves. Stripe Payments Europe, Ltd. (Ireland). Privacy policy

GitHub. Delivery of the source code. On completing a purchase, we transmit the GitHub username you provide at checkout to GitHub, in order to add your account as a read-only collaborator on our private repository. GitHub, Inc. (United States). Privacy statement

Resend. Transactional email. We transmit your email address to Resend so that we can send you the message confirming your purchase and containing your access details. This is not marketing email; we do not operate a newsletter. Resend, Inc. (United States). Privacy policy

Discord. Optional community access. The email confirming your purchase contains an invitation link to our Discord server. We do not transmit any data to Discord. If you choose to join, that is a separate relationship between you and Discord, governed by their own terms.

The legal basis for sharing data with Stripe, GitHub, and Resend is Art. 6(1)(b) GDPR (performance of a contract). Where a provider processes data outside the EU/EEA, this takes place on the basis of the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

Our web analytics is self-hosted on our own infrastructure, so no analytics data is shared with a third party. See the Web Analytics section above.

Data Security

We implement commercially reasonable security measures to protect your personal information from unauthorized access, modification, or disclosure. However, no method of electronic transmission or storage is 100% secure.

Data Retention

We retain your personal information only for as long as necessary:

• Payment and account information: As required by law and for our legitimate business purposes

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Request details about what information we hold about you

Children's Privacy

We do not knowingly collect or solicit information from anyone under 13 years of age. If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

Changes to This Policy

We may update this policy at our discretion. Significant changes will be notified to our users via email or through our website.

International Users

Our services are hosted in and operated from the European Union. We process and store your data in accordance with EU data protection laws, specifically the General Data Protection Regulation (GDPR).

Contact Information

For any questions or concerns regarding your privacy, please contact:

Robin Faraj
Email: contact@native.express

GDPR Compliance

As a company based in Germany, we fully comply with the EU General Data Protection Regulation (GDPR). We process your personal data based on:

• Contractual necessity (for processing payments and providing access to services)
• Our legitimate interests (for privacy-friendly reach measurement, and for improving our services and communication)

Your rights under GDPR include:

• Access your data
• Rectify inaccurate data
• Request data deletion ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

You can exercise these rights by contacting us at contact@native.express. We will respond to your request within 30 days.

Supervisory Authority: If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. You can contact the German Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your local data protection authority.