Privacy Policy – "App4it - Social Events&Meetups"

Last updated: 08 Jan 2026

This Privacy Policy explains how App4it ("App4it", "we", "us") processes information when you use the "App4it - Social Events&Meetups" mobile application for Android and iOS (the "App").

1) Who we are & how to contact us

App4it is the developer name/pseudonym under which the App is published. For privacy questions or requests, contact: privacy@app4it.de. A contact mechanism is provided so users can submit privacy inquiries.

2) Summary (key points)

• The App lets users create and discover events and post content (events, comments, images/memories, descriptions, profile images).
• Content you post is visible to all App users (not to non-users).
• Event addresses and coordinates are stored and shown to other users, so do not post private addresses unless you want other users to see them.
• The App uses Supabase (core backend), Brevo (transactional email delivery), OneSignal (push notifications), and Geoapify (address autocomplete/geocoding).

3) What data is processed

3.1 Account data

When you register and use the App, the following may be processed:

• Email address
• Username
• Authentication data required to sign in (passwords are handled by the authentication system; plaintext passwords are not accessible to App4it)

3.2 User-generated content (public to App users)

The App processes and stores content you create or upload, such as:

• Events (including event title/description and event address)
• Comments
• Images, "memories", and descriptions
• Profile information and profile images

3.3 Location data

The App can process location data in two different ways:

• Precise device location (optional): If you grant location permission, the App uses your device's precise location to calculate which events to display around you and to render the event map experience; this device location is not stored by App4it as a profile attribute.
• Event location (stored): If you create an event, the event address and its coordinates are processed and stored so other users can see the event location.

3.4 Camera and photos/media access

If you grant permission, camera and photo library access is used:

• To take/upload photos for posts
• To upload/update your profile image
• To scan QR codes for in-app features (e.g., adding a friend)

3.5 Push notifications

If you enable push notifications, the App uses OneSignal to deliver notifications to your device. As described by OneSignal, their SDK processes push tokens and may process additional device/app signals (e.g., device OS, language, timezone, and similar fields) for notification delivery and related functionality.

3.6 Technical data (logs)

When you use the App, technical data (such as IP address, timestamps, and request metadata) may be processed in backend logs for:

• Security and abuse prevention
• Debugging and reliability

Other than the categories described above, the App does not request access to your contacts, calendars, or call/SMS logs.

4) How data is used (purposes)

Data is processed to:

• Create and manage user accounts and authenticate users
• Provide the App's core features (posting content, creating events, viewing events)
• Display event locations and nearby events (including map functionality)
• Send transactional emails (email verification, password recovery)
• Send push notifications (if enabled)
• Maintain security, prevent abuse, and keep the service reliable

5) Sharing & third-party services

The App relies on third-party services to operate:

• Supabase: authentication, database, file storage, and backend functions.
• Brevo (SMTP): delivering transactional emails (e.g., verification, password recovery), which involves processing your email address for delivery.
• OneSignal: push notifications; OneSignal processes push tokens and other fields described in its "data collected by the SDK" documentation.
• Geoapify: address autocomplete/geocoding; address fragments you type are sent from your device to Geoapify to return suggestions and coordinates.

6) Retention and deletion

• Data is retained until you delete it or delete your account.
• When you delete content in the App, deletion is performed without undue delay.
• When you delete your account in the App, data associated with your account is deleted; events/albums may remain for other users, but will be unassigned from your account (the event/album owner reference becomes empty/NULL).

7) Your choices and controls

• Access / export: You can request a data export by contacting privacy@app4it.de.
• Rectification: You can change certain information in the App where available, or contact privacy@app4it.de.
• Deletion: You can delete certain data in the App and delete your account within the App.
• Notifications: You can disable notifications in your device settings and/or in-app prompts (where available).
• Account and data deletion requests: You can contact privacy@app4it.de to request the deletion of your account or overall data. Please note that event data will still not be deleted, but rather it will be unassigned from that user account (the event/album owner reference becomes empty/NULL).

8) Security

The App uses HTTPS for data transmission and applies access controls (including database access policies) to help protect stored data. No method of storage or transmission is 100% secure, but reasonable measures are used to reduce risk.

9) Age restriction

The App is intended for users 16+ and does not allow registration for users under 16.

10) Changes to this policy

This policy may be updated from time to time, and the "Last updated" date will show the latest version.

11) Contact

Privacy questions and requests: privacy@app4it.de.

For our Terms of Service, please see: Terms of Service.