Privacy Policy
Last updated: July 7, 2026
IT-Systems ("we", "our") operates the DynamicDNSPro mobile application and the website dynamicdnspro.com (the "Service"). This policy describes how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).
Data Controller
IT-Systems, based in Spain. Contact email: privacy@it-systems.es
Data We Collect
- Account data: name, email address, username, and encrypted password when you register.
- Device data: device model, operating system, app version, and push notification token (APNS/FCM) to send you alerts.
- Sync data: detected public IP address (WAN), local IP address of the active device interface, assigned subdomains, and date/time of updates.
- Payment data: transactions and subscriptions are processed entirely by the Apple App Store or Google Play Store. We do not store card numbers or bank details.
- Social login: if you use Apple or Google Sign-In, we receive your email and public name. We do not access your contacts or post on your behalf.
Purpose of Processing
- Manage your account and authenticate you to the Service.
- Sync and update the public IP of your subdomains in real-time.
- Send you push notifications about IP changes, inactivity alerts, or plan expiry.
- Process and verify your in-app purchases and subscriptions.
- Improve and maintain the security of the Service against abuse or malware.
Legal Basis
We process your data based on: (a) performance of the service contract, (b) your consent for push notifications and optional communications, (c) our legitimate interest in improving the Service and preventing fraud.
Data Sharing
We do not sell or transfer your personal data to third parties. We only share data with:
- Apple Inc. / Google LLC: to process purchases and manage push notifications (APNS/FCM).
- Hosting provider: our servers are located in the European Union.
Data Retention
We retain your data while you maintain an active account. IP update history is retained for 12 months. If you delete your account, all your personal data is erased within a maximum of 30 days.
Your Rights
Under the GDPR, you have the right to:
- Access: obtain a copy of your personal data.
- Rectification: correct inaccurate data from your profile or upon request.
- Erasure: delete your account and all your data from the app or by contacting us.
- Portability: export your data in a structured format.
- Objection and restriction: object to processing or request its restriction by contacting us.
- Withdraw consent: disable push notifications from the app settings at any time.
To exercise your rights, contact: privacy@it-systems.es. You may also file a complaint with the Spanish Data Protection Agency (AEPD).
Cookies
The website uses strictly necessary session cookies for authentication and dashboard control. We do not use tracking or advertising cookies.
Security
We implement technical and organizational measures to protect your data: HTTPS encryption on all communications, secure password storage with bcrypt, and secure encrypted credential storage on the mobile device.
OTP Vault — 2FA Authenticator
Local & Offline-First Processing: The OTP Vault - 2FA Authenticator application generates two-factor authentication codes (TOTP, RFC 6238 / RFC 4226) 100% locally on your device. Secret keys are encrypted and stored inside the native secure enclave (iOS Keychain / Android Keystore).
Optional Cloud Synchronization: If you choose to log in with your DynamicDNSPro account, your 2FA accounts are synced securely over HTTPS / TLS 1.3 with AES-256-GCM authenticated encryption on our EU servers, enabling integration with your NAS servers and cross-device recovery. When used in offline/local mode without an account, no secret data ever leaves your device.
Zero Trackers & Zero Advertising: OTP Vault contains no third-party analytics, no tracking libraries, and no telemetry. Your secret keys are never shared or sold to anyone.
Complete Disclaimer of Liability: The application is provided "as is", without warranty of any kind. You are solely and exclusively responsible for securing your devices and maintaining physical or offline backups of your account recovery codes provided by third-party services. IT-Systems and DynamicDNSPro assume no liability for lost account access, account lockouts, direct or consequential damages arising from device loss, hardware failure, or negligence in security key management.
Children
The Service is not intended for children under 16. We do not knowingly collect data from children under this age.
Changes to This Policy
We reserve the right to modify this policy. We will publish any changes on this page and, if significant, notify you through the application.
Contact
If you have questions about this privacy policy, you can contact us at: privacy@it-systems.es