Datenschutz

Privacy policy

Draft – this text has not been reviewed by a lawyer yet and contains placeholders.

This page explains which personal data Parare processes, what for, and which rights you have. It covers the app (web, iOS, Android) and this website.

1. Who is responsible

The controller in the sense of the General Data Protection Regulation (GDPR) is:

Email: [CONTACT EMAIL]

2. In short

• We process the data you enter to run the app for you and your crew.
• No advertising, no tracking, no analytics, and we do not sell data.
• What you add to a plan is visible to the crew of that plan, not to other users and not to the public – with one exception for photos, see section 5.
• You can delete your account yourself at any time.

3. Data we process in the app

Your account

Email address, name, password (stored only as a hash), the time you accepted the terms, and optionally a profile photo. If you sign in with Google or Apple, we receive your name, email address and, if available, your picture from that provider. We also keep the sessions of the devices you are logged in on, so you can log out other devices.

Legal basis: performance of the contract with you (Art. 6 (1) (b) GDPR).

Plans and what is in them

Plans with their title, dates, place and cover photo; the blocks of a plan (ideas, options and votes, pros and cons, to-dos, checklists, costs); comments and chat messages with reactions; whether you are coming; your role in the crew; and whether you are counted in the budget split. Costs in Parare are plans and estimates – we do not process payments.

Legal basis: Art. 6 (1) (b) GDPR.

What your crew sees about you

People in the same plan see your name, your photo, your role, your answer and what you add or write. In the chat they also see whether you have it open right now (“online”), whether you are typing, and that you have read messages (“Seen by”). Your email address is shown only to the organizers of a plan.

Invitations

An organizer can invite someone by email. We then store that email address with the invitation and send the invitation, and a reminder if the organizer asks for one, to it. A member can suggest a person with name and email address to the organizers. Invitations that are not used expire; an organizer can cancel them before that.

Legal basis: our legitimate interest and that of the inviting person in bringing a crew together (Art. 6 (1) (f) GDPR). If you received an invitation you did not want, write to us and we remove your address.

Notifications

We store notifications about what happens in your plans (for example a mention, a new cost, a to-do assigned to you) and whether you have read them, and your notification settings.

Feedback

When you report a bug or request a feature, we store your message together with your account, the screen you were on, your platform and the app version.

Legal basis: our legitimate interest in improving the app (Art. 6 (1) (f) GDPR).

Technical data

When you use the app or this website, the servers process your IP address, the time of the request, the address requested and information your browser sends about itself. This is needed to deliver the service and to keep it secure.

Legal basis: Art. 6 (1) (f) GDPR.

4. Storage on your device, cookies

The app stores on your device what it needs to work: your login session, the theme you chose (system, light or dark) and, if you opened an invite link before signing in, that link until you have signed in. This storage is strictly necessary (§ 25 (2) TDDDG), so there is no cookie banner. This website sets no cookies. Neither the app nor the website uses tracking or analytics tools, and the fonts are delivered by us, not loaded from a third party.

5. Photos

Profile photos, cover photos of plans and photos of options are stored as files that anyone who has their exact web address can load. The addresses are long and random and are only shown to people in your plans, but they are not protected by a login. Do not upload photos you would not want anyone else to see.

6. Who receives data

We use the following service providers, who process data on our behalf (Art. 28 GDPR):

• Database, file storage and login: Supabase (Frankfurt, Germany)
• Delivery of emails: [EMAIL DELIVERY PROVIDER AND COUNTRY]
• Hosting of this website: Cloudflare (worldwide network)

If you choose to sign in with Google or Apple, that provider learns that you use Parare. Otherwise we pass on data only if the law obliges us to.

[TRANSFERS OUTSIDE THE EU / EEA: state here whether any of the providers above processes data outside the EU / EEA and on which basis, e.g. standard contractual clauses – or that all data stays in the EU.]

7. How long we keep data

We keep your data for as long as you have an account. When you delete your account (Account settings → Delete account), your profile, your photo, your memberships, votes and notifications are deleted right away. Plans that only you are part of are deleted too. What you added to plans of other people – for example ideas, costs, comments and messages – stays there for the crew, but without your name. If you are the only organizer of a plan with other members, you choose a new organizer first.

Feedback you sent stays with us without the link to your account. Server logs are deleted after [LOG RETENTION PERIOD].

8. Your rights

You have the right to:

• know which data we hold about you, and get a copy of it (Art. 15, 20 GDPR),
• have wrong data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• have the processing restricted (Art. 18 GDPR),
• object to processing that is based on our legitimate interests (Art. 21 GDPR), for reasons arising from your particular situation.

To use these rights, write to [CONTACT EMAIL] from the email address of your account. You can change your name, photo, email address and password yourself in the account settings. You also have the right to complain to a data protection supervisory authority, for example the one at your place of residence.

9. Do you have to provide data?

Without an email address, a name and a password (or a Google / Apple login) we cannot create an account for you. Everything else is up to you.

10. Age

Parare is meant for people aged 16 and over.

11. Changes

When the app changes, we update this page. If a change is important for you, we tell you in the app or by email. See also the Terms (AGB).

Last updated: [DATE]