Privacy policy
Last updated: September 2026 · Controller: TBD, TBD, pi2u89@googlemail.com
In short: Pluspunkt stores only what you enter yourselves, on a server in the EU. We know neither your email nor your name (unless you type one), there are no analytics, advertising or tracking services, and you can delete everything in the app at any time.
1. What is stored
| Area | Data |
|---|---|
| Account | random account id, a hash of your login key (derived from the recovery code; the code itself never leaves your device), display name, language, optional avatar, day of last use |
| Couple | everything you enter: points and flags with notes, dates with title, plan, note and – only if you set one – a location, photos, videos, comments, cover photo |
| Technical | session tokens (hashed), optionally a push token of your device, timestamps |
Not collected: email, phone number, contacts, advertising IDs, background location, usage statistics, crash reports.
2. Purpose and legal basis
To provide the app (Art. 6(1)(b) GDPR). Location and push notifications only when you set or enable them (Art. 6(1)(a) GDPR, revocable in the app at any time). Short-lived in-memory counting of requests per IP address to prevent abuse (Art. 6(1)(f) GDPR); it is not stored.
3. Where the data is
On a server we operate at Contabo GmbH, Rechenzentrum Lauterbourg (Frankreich, EU). The hosting provider processes data on our behalf (Art. 28 GDPR).
4. Recipients
- Push notifications: Apple Push Notification Service (Apple Distribution International Ltd., Ireland) and Firebase Cloud Messaging (Google Ireland Ltd.) receive a device token and the notification text (e.g. “Hong gave you a plus point”). Only if you enable notifications.
- Maps: When a map is shown, the app loads map tiles from the OpenStreetMap Foundation (United Kingdom, adequacy decision); your IP address and the map area are transmitted.
- Nobody else. No sharing, no selling, no advertising.
5. Retention
- Content: until you delete it or the last member leaves the couple.
- Sessions: 365 days after last use. Accounts without a couple and without activity are deleted after 90 days; open couples without a second member after 30 days.
- Deleted photos/videos stay in a trash area for up to 30 days (protection against accidents), database backups are kept for 14 days, and the media backup mirror follows the current state (at most 1 day behind).
- There are no server access logs with IP addresses for this service.
6. Deletion and export
In the app: Settings → “Delete account” (immediate) and “Leave couple”. Without the app: account deletion page (recovery code required, because we cannot identify you otherwise). Export as PDF and JSON in Settings. When you delete your account, your name, avatar, sessions and push tokens disappear immediately; the shared memories remain with your partner until they leave the couple too.
7. Your rights
Access, rectification, erasure, restriction, data portability, objection (Art. 15–21 GDPR) and the right to lodge a complaint with a supervisory authority. Because accounts are anonymous, requests require your recovery code or must come from inside the app. Contact: pi2u89@googlemail.com.
8. Children
Pluspunkt is intended for adults (18+).
9. Changes
Changes to this policy are published here and shown in the app.