App: Findflasche Controller: Mehrdad Peykari, 1120 Vienna, Austria Email: support@findflasche.com Version: 6 September 2026
Protecting your personal data is important to us. We process your data exclusively in accordance with the applicable legal provisions (GDPR, Austrian Data Protection Act, TKG 2003). Below we inform you about the type, scope and purpose of data processing when you use our app "Findflasche".
We process the data that you provide to us as a user of the app or that is generated automatically through your use of the app.
You can create and log into an account with: - Email and password - Google Sign-In - Sign in with Apple Depending on the method you choose, we collect: - Email address - Password chosen by you (only for email registration; stored in encrypted form) - Username (nickname) If you sign in with Google or Apple, we receive from that provider the data needed to create or log into your account (typically your email address and, where provided, your name or a provider user ID). We do not receive your Google or Apple password. Legal basis: Performance of a contract (Art. 6 (1) (b) GDPR), as the app cannot function fully without an account.
The core feature of "Findflasche" is the "deposit radar". To show you refundable bottles or interested users in your vicinity, we collect your location data (GPS coordinates). When? The location is only retrieved when you actively use the app (foreground) or when you activate the "notify nearby" feature (background). Purpose: Displaying markers on the map and calculating the distance to other users/objects. Disclosure: Your exact location is not passed directly to other users, but is only displayed as an approximate distance or marker on the map, provided you initiate this by creating a listing or a search. Legal basis: Your consent (Art. 6 (1) (a) GDPR), which is requested when you first start the app. You can withdraw this permission at any time in your device settings.
We use push services (e.g. Firebase Cloud Messaging or Apple Push Notification Service) to inform you about the following events: - New messages in the chat - New refundable bottles in your area - Important app information or campaigns (marketing) For this purpose, your device is assigned a pseudonymised identifier (device token). Legal basis: For service messages, performance of a contract. For marketing messages, our legitimate interest (Art. 6 (1) (f) GDPR) or your consent. You can deactivate push notifications at any time in the app settings.
If you communicate with other users via the app, the content of the messages is stored on our servers in order to ensure delivery. We do not read private messages unless there is a justified suspicion of criminal offences or violations of the terms of use. Please avoid sharing unnecessary personal details (e.g. phone number) in chat unless you are comfortable with the other user seeing them.
You can optionally add up to 3 photos to your offers. If you do, we store these images on our servers so they can be shown to other users with your listing. Photos are taken using the in-app camera when you choose to add them. New offers (including photos) may be reviewed by us before they are published, to maintain a safe community. Purpose: Illustrating your offer for other users. Legal basis: Performance of a contract (Art. 6 (1) (b) GDPR) / legitimate interest in operating a safe marketplace (Art. 6 (1) (f) GDPR).
We use Google Firebase Analytics to understand how the app is used (for example screen views and technical events) and to improve stability and features. For this purpose, a pseudonymised identifier and, when you are logged in, your user ID may be sent to Google, together with usage events and general device information (such as app version, operating system and language). Legal basis: Our legitimate interest in analysing and improving the app (Art. 6 (1) (f) GDPR).
For the app to function, we require the following permissions on your smartphone: - Location: For the radar feature (see section 2.2). - Network access: To synchronise data with the server. - Camera: Only when you choose to take a photo for an offer (see section 2.5).
We do not sell your data. Data is only passed on to service providers that are necessary for the technical operation of the app: - Hosting providers (e.g. servers for the database) - Google Maps to display the map. IP addresses and location data may be transmitted to Google in this process. - Google Firebase Analytics for usage analytics (see section 2.6). - Sign-in providers (Google and Apple) when you choose to log in with those services. - Push services (Google/Apple) for delivering notifications. These service providers are contractually obliged to process the data only in accordance with our instructions (processors).
We use technical and organisational measures (e.g. SSL encryption, password hashing) to protect your data against access by third parties.
We store your data for as long as your user account exists. If you delete your account, your personal data will be deleted or anonymised without undue delay. Statutory retention periods remain unaffected.
Under the GDPR you have the following rights: - Access: You can ask which data we hold about you. - Rectification: You can correct inaccurate data. - Erasure: You can request deletion of your account and your data. - Withdrawal: You can withdraw consents you have given (e.g. for location data) at any time. To exercise these rights, please contact us at: support@findflasche.com
We may adapt this privacy policy when we add or change features in the app. The most current version is always available in the app and on our website at findflasche.com/privacy-policy.html.