English · Deutsche Version
KiezPilot — Privacy Policy
Effective date: 14 June 2026 · Last updated: 7 August 2026
KiezPilot ("the app", "we") helps parents in Berlin find family-relevant places and events. We built the app to be private by design: in this version we collect no name, no email address, no phone number, and no other information that directly identifies you.
This policy explains what limited data the app does process, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible (controller)
Ramzi Merhej
Neuenburger Straße 22a
10969 Berlin, Deutschland
Email: privacy@kiezpilot.com
(See also our Impressum.)
2. What we process, why, and on what legal basis
2.1 Anonymous account identifier
When you first open the app, it creates an anonymous account — a random identifier (UUID) with no personal details attached. This lets the app remember your favorites and contributions without you signing up. Authentication is handled by our backend provider Supabase (see §4). We never ask for or store your name, email, or phone number.
- Legal basis: Art. 6(1)(b) GDPR (providing the service you requested); Art. 6(1)(f) (our legitimate interest in a working app).
2.2 Location
If you grant location permission, the app uses your device location while you are using the app to find places and events near you. Your coordinates are sent to our backend to return nearby results. We do not build a movement profile, do not track you in the background, and do not store your location as a history.
- Legal basis: Art. 6(1)(a) GDPR (your consent, given via the operating system permission). You can withdraw it any time in your device settings; the app then falls back to a default Berlin view.
2.3 Information stored only on your device
Your favorites, recently-viewed places, language, and app settings are stored locally on your device (not as part of an online identity). Uninstalling the app removes them.
- Legal basis: Art. 6(1)(b) GDPR.
2.4 Community contributions (optional)
If you choose to add or correct information about a place (e.g. "is it fenced in?", "report outdated info"), that contribution is saved against your anonymous identifier and may be shown to other parents as "reported by parents". Please do not include any personal information in free-text contributions.
- Legal basis: Art. 6(1)(a) GDPR (consent, by choosing to contribute) / Art. 6(1)(b).
2.5 Map tiles
Maps are rendered using map images ("tiles") from OpenStreetMap. To deliver those images, the OpenStreetMap Foundation necessarily receives your device's IP address when a map loads. This is governed by the OpenStreetMap Foundation Privacy Policy.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing a map).
2.6 Technical/operational logs
Our backend provider may process technical data (such as IP address and request metadata) transiently for security and to operate the service. This is standard processor logging and is not used to identify or profile you.
- Legal basis: Art. 6(1)(f) GDPR.
2.7 Product analytics
To understand which features actually help parents and to find and fix problems, we use PostHog, a product-analytics tool, on its EU-hosted infrastructure (EU region), configured privacy-protectively: usage events are tied only to your anonymous identifier, are not used for advertising, are never sold, and we do not store IP addresses for tracking. We do not use any advertising or cross-app-tracking technologies.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app).
2.8 Crash reporting
If the app crashes or encounters a technical error, we use Sentry (EU/German data region) to receive a technical report (error message, app version, device model, OS version) so we can fix the problem. Reports are not linked to your name (we don't have one) and we configure Sentry not to collect personal data; your IP address may be processed transiently for delivery.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, safe app).
2.9 Severe-weather alerts (optional)
If you switch on severe-weather alerts (off by default; you turn them on with an explicit tap), we send you a push notification when the German Weather Service (Deutscher Wetterdienst, DWD) issues a severe-weather warning for your area. To do this we store, linked to your anonymous account identifier:
- a push notification token (an anonymous delivery address for your device, issued by Apple/Google via Expo) — used only to deliver these alerts, never for tracking or analytics; and
- a coarse region code (your Ortsteil, one of Berlin's ~97 districts). This is derived on your device from your location; your precise GPS coordinates never leave your device and are not stored — only the district code is sent, and it is overwritten (no location history is kept).
- Legal basis: Art. 6(1)(a) GDPR and § 25(1) TTDSG (your consent). You can withdraw consent at any time in Settings → Severe-weather alerts; turning it off deletes the push token and region code.
- Recipients: the Expo push service and Apple/Google's push gateways act as processors to deliver the notification (this may involve a transfer to the US under the relevant transfer safeguards).
What we do NOT do
- No advertising, no ad identifiers, no cross-app tracking (no App Tracking Transparency prompt is needed).
- No selling or sharing of personal data.
3. Children's data
KiezPilot is a tool for parents and caregivers and is not directed at children. We do not create accounts for children. If you enter your child's age band (e.g. birth year/month) to filter recommendations, that information is used only to tailor results and is treated as part of your local, pseudonymous app data — it is not linked to a real-world identity.
4. Where your data is processed (processors & location)
- Supabase (database, anonymous authentication, storage) — hosted in the EU (Frankfurt, Germany).
- PostHog (product analytics) — EU region.
- Sentry (crash reporting) — EU/German region.
- OpenStreetMap Foundation (map tiles) — see §2.5.
- Apple / Google — only insofar as you download the app from their stores and their operating systems may collect their own diagnostics, governed by their policies, not ours.
- Expo (push-notification delivery) — only if you opt in to severe-weather alerts (§2.9); relays the notification to Apple/Google's push gateways.
Except for the optional severe-weather push delivery (§2.9), which routes through Expo and Apple/Google push gateways (possible US transfer under the relevant safeguards), we do not transfer your personal data outside the EU/EEA. (Map-tile IP handling by the OpenStreetMap Foundation, based in the UK, relies on the UK adequacy decision.)
5. How long we keep data
Your anonymous record and contributions are kept until you delete them or request deletion (see §6). Data stored on your device remains until you uninstall the app. Because the account is anonymous, reinstalling the app creates a new identity and leaves the old anonymous record without any link to you.
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, objection, and data portability. Because we hold no information that identifies you, exercising some of these rights requires you to provide your anonymous identifier so we can locate the record.
- To delete your data: in the app, open Settings → Account → "Delete my data" to permanently erase your anonymous account and all associated data (this cannot be undone). You can also email privacy@kiezpilot.com. Uninstalling the app removes all data stored on your device.
- Questions / requests: privacy@kiezpilot.com
- You also have the right to lodge a complaint with a supervisory authority (in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit).
7. Changes to this policy
We may update this policy; the "Last updated" date above reflects the current version. Material changes will be surfaced in the app.