Privacy Policy

This Privacy Policy explains how Dabei ("Dabei", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and this website (together, the "Service").

By creating an account or otherwise using the Service, you agree to the collection and use of information in accordance with this policy. This policy is designed to comply with the requirements of the Apple App Store and Google Play, as well as the EU General Data Protection Regulation (GDPR).

Data controller / Verantwortlicher (Art. 4 No. 7 GDPR):
Christian Maigual, Sichelstraße 24, 54290 Trier, Germany.
Contact: info@dabeiapp.de. Full legal details are in our Impressum.

Depending on how you use Dabei, we may collect:

• Account data: name, email address, profile photo, and a unique identifier provided by Apple or Google when you sign in.
• Profile & activity data: events you create or join, categories you follow, and your interactions within the app.
• Location data: your approximate or precise device location, with your permission, to show nearby events.
• Content you create: event details, photos, videos, voice notes, and messages you send to other users.
• Audio you record (voice notes): if you record a voice note in a chat, the audio file you send, stored together with the rest of that conversation.
• Channel data: the channels you follow and when you started following them, plus follower counts for each channel.
• Device & usage data: device type, operating system, app version, crash logs, and basic analytics needed to keep the Service reliable.
• Push notification tokens: a token issued by Apple (APNs) or Google (FCM) used to deliver notifications to your device.
• Phone number & contacts (optional): only if you enable contact discovery, your phone number and matches found among your device contacts, used solely to help friends find you and to suggest people you already know who use Dabei.
• Business data (Dabei Business): if you register a business, the business name, email, logo, description, and location you provide, used to display your public business profile and the events you publish.
• Channel owner data: if Dabei assigns you a channel, the email address and password credentials of the account used to manage it, together with the channel name, description, photo, and the events you publish.

You can use Dabei as a guest with an anonymous account tied to your device, or sign in with Apple or Google.

Phone number & contacts are optional and off by default. If you enable contact discovery, your phone number is never public and is never shown to other users — it is stored separately from your public profile and used only to find matches. When you tap "Find friends in my contacts", the numbers on your device are checked against people who use Dabei and have also enabled discovery; we do not store your full address book. You can disable discovery or remove your number at any time.

Dabei lets you create an account using Sign in with Apple or Google Sign-In. When you use either option, the provider shares limited information with us — typically your name, email address (or a private relay email, in Apple's case), and a unique account identifier — so we can create and secure your Dabei account.

We do not receive your Apple ID or Google account password. You can manage or revoke Dabei's access to your Apple or Google account at any time from your device or account settings.

Dabei is built around discovering what is happening near you. With your permission, we access your device's location to:

• Show events and plans close to where you are.
• Let you filter events by distance.
• Position events accurately on the map when you create them.

You can allow location access "while using the app" or deny it entirely from your device settings. If you deny location access, some features — such as nearby event discovery — will be limited or unavailable. We do not sell your location data.

When you create an event, the title, description, category, location, date, and any images you attach are visible to other users of the Service, as intended by the feature. Please avoid including sensitive personal information in public event details.

Channels are pages for content creators, venues, museums, institutions, and city councils. Dabei creates and assigns channels itself — there is no public sign-up — and the owner manages the channel and its events with a dedicated email and password account (handled by our authentication provider, Supabase).

When you follow a channel, we store the link between your account and that channel and the date you started following it, so we can show you its events and keep the channel's follower count up to date. Following is voluntary and you can unfollow at any time from the app; the record of your follow is removed when you do. The legal basis for this processing is the performance of our contract with you (Art. 6(1)(b) GDPR), because it is what makes the feature work.

What channel owners see. Owners receive push notifications about their channel, including when someone new follows it, when someone joins one of their events, and when a message is posted in the chat of one of their events. This means your visible profile name is shown to the owner of a channel you follow, join, or write to. Your email address, phone number, and precise location are never shared with channel owners.

Followers-only events. A channel can publish events that are visible only to its followers. If you unfollow the channel, those events stop appearing on your map.

Public channel pages. Every public channel also has a web page at dabeiapp.de/channel/<slug> showing the channel's name, description, photo, follower and event counts, and its upcoming events. That page shows information about the channel only — it never lists who follows it, and individual followers are not identified anywhere on the website.

Dabei allows you to message people you are meeting up with through an in-app chat. Messages are stored securely so that conversation history is available to the participants of a chat. We do not use the content of your private messages for advertising purposes.

In event chats and direct chats you can record a voice note and send it like any other message. Only if you tap the microphone button and grant the microphone permission does Dabei record audio, and only for as long as you keep the recording running. Nothing is recorded in the background, and we never listen to your surroundings.

Recorded voice notes are uploaded as audio files (.m4a) to our chat-media storage bucket at Supabase and are stored alongside the other messages of that conversation. They follow exactly the same access rules as the rest of the chat — only the participants of that chat can play them — and exactly the same retention rules described in section 13, which means the voice notes of an event are deleted with that event's content 30 days after it ends. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR); access to the microphone is based on the permission you grant on your device, which you can withdraw at any time in your device settings.

We do not transcribe your voice notes, do not analyse their content, and do not use them for advertising or profiling.

Participants of a chat can save the photos and videos shared in that chat to their own device gallery. To do this, your device asks you for a write-only photo library permission ("add photos only"). Dabei uses that permission solely to write the selected file into your gallery: we do not read, browse, or upload the contents of your photo library with it, and we receive no information about what else is stored on your device.

Please be aware that once a photo or video has been saved to a device, that copy is outside Dabei's control. It stays on the device of the person who saved it, and our deletion and retention rules no longer apply to it — deleting the event, the chat, or your account does not remove copies other people have already downloaded. Only share content you are comfortable with others keeping, and remember that redistributing someone else's content without their consent is not allowed under our Terms.

We send push notifications to keep you informed about invitations, new messages, and activity relevant to events near you. Push notifications are delivered through Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). You can disable push notifications at any time from your device's notification settings.

If you own a channel, we also send you notifications about your own channel: a new follower, someone joining one of your events, and new messages in the chat of your events. These notifications include the visible profile name of the user concerned so you can recognise who is taking part.

If you upload a profile photo or images for an event, those files are stored in secure cloud storage associated with your account. Images you mark as public (such as an event photo) are visible to other users as part of the relevant feature; profile photos are shown according to your profile visibility settings.

Dabei uses Supabase as its backend infrastructure provider for authentication, database storage, and file storage. Supabase stores your account data, event data, chat messages, and uploaded images on our behalf, under a data processing arrangement. Supabase implements industry-standard security controls, including encryption in transit.

Our data is hosted in the European Union (Frankfurt, Germany). We also use other trusted providers (data processors) strictly to operate the Service: Vercel (hosting of the dabeiapp.de website), Google (Google Maps to display the map, Google Sign-In, and push delivery via Expo), Apple (Sign in with Apple and notifications), Expo (push notification delivery), LiveKit (real-time video for live streams), OpenStreetMap/Nominatim (turning the addresses you type when creating an event into map coordinates) and Resend (email delivery, e.g. reports to partner channels). These providers are contractually bound to protect your information. Dabei does not use advertising or third-party analytics SDKs; it uses only its own first-party usage analytics (which features are used), hosted in the EU, to understand usage and improve the Service, and does not sell your data.

Premium business accounts can broadcast live video inside their event chat. Only if you choose to broadcast and grant permission do we access your device's camera and microphone, and only while the broadcast lasts. The video and audio are sent in real time to event participants through our streaming provider (LiveKit) and are not recorded or stored: when the broadcast ends, the content is gone. People who only watch a broadcast do not need a camera or microphone. You can end a broadcast at any time, and any participant can report it.

Live streaming is not the only use of the microphone: recording a voice note in a chat also requires the microphone permission, but works differently — the audio is saved and delivered as a message instead of being streamed live. See section 6.1 for details.

• To create and maintain your account.
• To show you relevant events, people, and plans nearby.
• To enable chat and communication between users, including photos, videos, and voice notes.
• To show you the channels you follow and their events, including events reserved for followers.
• To send push notifications you have not disabled.
• To maintain the security and integrity of the Service.
• To diagnose issues and improve app performance.
• To comply with legal obligations.

We do not sell your personal data. We share information only with:

• Other users, to the extent required by a feature (e.g. your profile name and photo are visible to people you chat or share events with).
• Channel owners, limited to the visible profile name of users who follow their channel, join their events, or write in the chat of their events.
• Service providers who process data on our behalf, such as Supabase, Apple, and Google, solely to operate the Service.
• Authorities, where required by law, regulation, or legal process.

You can request deletion of your Dabei account and personal data at any time by emailing info@dabeiapp.de from the email address associated with your account, with the subject line "Delete my account".

Once we verify your request, we will, within 30 days:

• Permanently delete your profile, account credentials, and settings.
• Delete events you created, or anonymize them if other users have joined and still rely on that event data.
• Delete your chat messages and conversation history.
• Delete photos, videos, and voice notes you uploaded from our storage.
• Delete the record of the channels you follow.
• Remove your push notification tokens.

We may retain limited information where required by law, to resolve disputes, or to enforce our agreements (for example, records needed for fraud prevention or legal compliance).

We apply data minimization. Events that have ended, and their content (the chat messages, photos, videos and voice notes of that event), are automatically deleted after 30 days. Your profile, your friends and your direct chats with friends — including the voice notes exchanged in them — are kept while your account is active. The record of the channels you follow is kept until you unfollow the channel or delete your account. Push tokens are removed when you sign out or disable notifications. If you delete your account, we delete your personal data within 30 days, except the minimum required by law.

Files you have saved to your own device gallery (see section 6.2) are no longer held by us and are not covered by these retention periods.

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@dabeiapp.de. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Dabei is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Your data may be processed and stored in countries other than your own, including through our infrastructure providers. Where this occurs, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, how your data is handled, or to request access, correction, or deletion of your data, contact us at info@dabeiapp.de.