Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does Sourdough Tracker use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

Sourdough Tracker

Compare

Sourdough Tracker: the GDPR-friendly alternative to Loaflo

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

Comparison

Apps

Loaflo

Finn GlasCo-Founder + Engineering

·January 26, 2026·

2 min read

GDPR isn't a checkbox - it's a posture. If you're moving off Loaflo because their AVV / DPA is opaque, Sourdough Tracker is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

Loaflo is a polished app with a large community and it deserves credit for popularising sourdough tracking. The friction point that shows up most in user reviews is its paywall: core features like reminders and full history access sit behind a subscription, which rankles bakers who just want a reliable journal. Sourdough Tracker is a direct alternative: free tier covers everything a home baker needs (unlimited feed logs, photo journaling, rise % tracking, per-starter sharing), AI health analysis is available on the free tier with a monthly quota, and the data stays EU-hosted. The honest answer: if you're already in Loaflo and it's working for you, there's no pressing reason to switch. If you hit the paywall and it annoyed you — or if per-starter sharing and EU hosting matter — Sourdough Tracker is worth a look.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. Sourdough Tracker treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where Loaflo sits on each of these is the rest of this page.

Sourdough Tracker vs Loaflo: GDPR comparison

	Ours Sourdough Tracker	Theirs Loaflo
Free tier with full core logging		Limited
Feeding reminders free
AI starter health analysis	Free quota	Paid plan
Per-starter sharing (not whole app)
Photo journaling
Rise % tracking per feed
EU-hosted data
Large established baking community

When to pick which

Pick Sourdough Tracker when

You hit Loaflo's paywall and decided the features behind it aren't worth the subscription.

You want to share one specific starter with a partner, parent, or friend without giving them access to your whole account.

EU data hosting is a requirement for you.

You want AI analysis included at the free tier.

Pick Loaflo when

You're already invested in Loaflo and the community features (forums, shared recipes) are actively useful to you.

You prefer a large, established user base with a wide range of tutorials and community content.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with Sourdough Tracker

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Finn Glas

Co-Founder + Engineering

Finn is one of the Co-Founders. He owns the engineering side, the infrastructure, and most of the late-night fixes that ship before anyone notices.

finn.glas at aicuflow dot comLinkedIn Website