Privacy Policy

1. Data Controller

2. Data We Collect

We only collect data that is necessary to operate our services. This may include:

• Account credentials
• Usage and activity data
• Payment references (processed via Stripe — card numbers are never stored locally)
• Push notification tokens
• User-submitted content (e.g. photos, retained for 90 days then deleted)

3. Data Storage & Processing

Account and application data is stored in Supabase (Frankfurt, EU region). Payment processing is handled by Stripe. Payment records are retained for 10 years in accordance with German tax law (§ 147 AO).

4. Third-Party Services

We use third-party providers including Stripe, Google, Mapbox, and Expo. Some of these are based in the USA. Data transfers to these providers are safeguarded by Standard Contractual Clauses (SCC) pursuant to GDPR Article 46.

5. Your Rights

Under GDPR, you have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Request data portability
• Request human review of automated decisions within 14 days

To exercise these rights, contact us at strehldevs@gmail.com.

6. Complaints

You have the right to lodge a complaint with the supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf.