Privacy policy – PlanLos! for Android
This is an English translation for your convenience. Only the German version is legally binding.
This privacy policy applies to the Android app PlanLos! (package name de.mitplanlos.planlos). The website at mitplanlos.de is covered by the separate website privacy policy.
1. Privacy at a glance
General information
The following gives you an overview of what happens to your personal data when you use the PlanLos! app. Personal data is any data that can be used to identify you personally.
Data collection in the app
Who is responsible?
Data is processed by the app provider. You’ll find the contact details under “Controller”.
How do we collect your data?
Some of your data is collected because you give it to us (e.g. when you sign up or add content to a group). Other data is created technically when the app communicates with our servers, uses push notifications or – with your consent where required – shows ads via Google AdMob.
What do we use your data for?
We process data to provide the app: group planning (finding a date, Bring, To-dos, splitting costs), sign-in, sync and – if turned on – push notifications. To fund the app, we show ads in the Android app via Google AdMob (see the section “Advertising / Google AdMob”). For audience and usage analysis, the Android app uses Google Analytics for Firebase (GA4) (see the section “Analytics”).
What rights do you have?
You have the right at any time to access, correction, deletion, restriction of processing, data portability and objection and – where consent was given – withdrawal. You also have the right to lodge a complaint with the competent supervisory authority.
2. Hosting and backend
The app connects to our backend at mitplanlos.de. We host it with:
Hetzner
The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Details: hetzner.com/legal/privacy-policy.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable operation) or Art. 6(1)(b) GDPR where processing is necessary to perform the contract (use of PlanLos!). We have a data processing agreement with Hetzner (Art. 28 GDPR).
3. General information and mandatory information
Controller
The party responsible for data processing in the app is:
Tommaso Maiocchi
Gertrudenstr. 34c
21244 Buchholz
Germany
Email: info@mitplanlos.de
Storage period
Unless a more specific storage period is stated, your personal data stays with us until the purpose of processing no longer applies. If you make a justified request for deletion or withdraw your consent, we delete the data unless statutory retention obligations prevent this.
Legal bases
Depending on the operation, we rely on Art. 6(1)(a) GDPR (consent, e.g. push notifications, optional biometrics, personalized ads via AdMob, analytics where required), Art. 6(1)(b) GDPR (contract / pre-contractual steps – use of the app and your account) and Art. 6(1)(f) GDPR (legitimate interest, e.g. secure operation, preventing abuse, server logs, funding the app through non-personalized ads where permitted).
Withdrawal and objection
You can withdraw consent you have given at any time with effect for the future. For processing based on Art. 6(1)(f) GDPR, you have the right to object under Art. 21 GDPR.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation.
Access, correction, deletion and other rights
Within the statutory provisions, you have the right to access, correction, deletion, restriction of processing and data portability. For this and any other questions, contact info@mitplanlos.de.
SSL/TLS encryption
The app communicates with our backend over HTTPS (TLS). This is meant to protect transmitted data from being read by third parties.
4. What data the app processes
Account and sign-in
To use the app, we store in particular your name, email address and – if you sign in with a password – the password in hashed form on the server. You can optionally add a PayPal.Me handle to your profile so other members see a payment link when settling up. For API sign-in, we store a device/session token (Sanctum), which the app keeps locally in the app settings (SharedPreferences).
Legal basis: Art. 6(1)(b) GDPR.
Group content
The following data, among others, may be created in your groups and stored on the server: group names and settings, optionally a place or meeting point as free text, memberships and invites (including by email), date planning and votes, bring and shopping entries, tasks, expenses and payments, and optionally a group photo. This content is visible to the other members of the group as far as this is part of using it together.
Legal basis: Art. 6(1)(b) GDPR.
Group photo / image selection
When you choose a group photo, the app accesses an image you selected through the system picker (Photo Picker) and uploads it encrypted to our server. We don’t access your entire media library without asking and don’t request permanent storage or camera permissions.
Importing expenses (e.g. Splitwise CSV)
You can optionally select a CSV file through the system file dialog and send it to our backend so expenses are added to a group. We only store the expense entries created from it in the group; the raw file itself isn’t kept on the device beyond the import.
Location / maps
The app doesn’t collect your GPS location. If a group has a place stored as text, you can open it in a maps app (intent). The privacy policy of the respective maps app applies there.
Device permissions
The app needs internet access. For push notifications, the notifications permission (POST_NOTIFICATIONS) may be requested. For biometrics, the app uses the system API (fingerprint / face recognition) without storing biometric data itself. For advertising, the Android advertising ID may be used (see AdMob). We don’t access the camera, microphone, contacts or the precise device location.
Push notifications (Firebase Cloud Messaging)
If you allow push notifications, the app registers a device token with Firebase Cloud Messaging (FCM) (Google). We store this token and your notification settings (which topics you want to receive, e.g. invites, Bring, To-dos, Costs or date planning) on our server to deliver messages. Delivery is handled by Google (FCM).
Legal basis: Art. 6(1)(a) GDPR (consent via the system prompt or app settings). You can turn push off at any time in the Android settings or in the app; the token is then no longer used for notifications or is removed.
Information about Google: policies.google.com/privacy and firebase.google.com/support/privacy.
Server log files
When the API is accessed, technical data may be recorded in server logs, e.g. IP address, time, requested endpoint and user agent. We don’t combine this data with other data sources to build advertising profiles. Legal basis: Art. 6(1)(f) GDPR.
Analytics
The Android app uses Google Analytics for Firebase (Google Analytics 4) of Google Ireland Limited. We use it to collect pseudonymous usage data, in particular app opens, screen views, device and app information, an app instance ID and optionally a pseudonymous user ID set by us (without name or email). Google shortens or anonymizes IP addresses in the analytics context as far as the configuration provides for this.
The purpose is to analyze app usage and improve stability and features. Legal basis: Art. 6(1)(a) GDPR where consent is required (e.g. via the consent form / UMP), otherwise Art. 6(1)(f) GDPR (legitimate interest in audience measurement) where applicable. Data may be transferred to Google servers outside the EEA, in particular to the USA; for this, Google relies among other things on the standard contractual clauses (Art. 46 GDPR).
More information: policies.google.com/privacy and firebase.google.com/support/privacy.
Advertising / Google AdMob
We show ads in the Android app (e.g. banners in group views). For this, we use Google AdMob (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA, among others).
When ads are served, the following data in particular may be processed: device and app information, IP address, approximate location (as far as it can be derived from the device or network), interactions with ads and the Android advertising ID, if available and if you haven’t reset it in the device settings or limited personalized ads. Google may use this data to select ads (including personalized ads if you have consented), to detect fraud and abuse, and to measure ad delivery.
Where personalized ads or similar processing require consent in the European Economic Area, we obtain it through Google’s consent management (UMP / Consent). Non-personalized ads may also appear without this consent where technically and legally permitted. You can withdraw consent at any time with effect for the future by resetting the advertising ID in the Android settings and turning off personalized ads; if the app shows a consent dialog again, you can also object or withdraw there.
Legal basis: Art. 6(1)(a) GDPR (consent) for personalized ads and – where applicable – related storage of or access to information on the device; otherwise Art. 6(1)(f) GDPR (legitimate interest in funding the app through ads) where applicable. Data may be transferred to Google servers outside the EEA, in particular to the USA; for this, Google relies among other things on the EU Commission’s standard contractual clauses (Art. 46 GDPR).
More information: policies.google.com/privacy, AdMob and privacy and the ad settings in your device’s Android settings.
External links (e.g. PayPal)
When you open a payment link (PayPal.Me) or other external addresses, this happens in the system browser or Custom Tabs. The respective providers are responsible for data processing there.
Deleting your account
You can delete your account at any time in the app under the account settings (confirmed with your password). You can do the same in the account settings on mitplanlos.de or by emailing info@mitplanlos.de.
When you delete your account, we remove your login, session tokens, push device tokens and groups in which you are the only active member. In shared groups, entries (e.g. expenses or lists) remain under your display name but are no longer linked to an account. Legal basis for storage until then: Art. 6(1)(b) GDPR; deletion happens at your request.
5. Data processing on the device
Biometrics (fingerprint / face)
You can optionally turn on biometric unlock for signing in. Your biometric data stays on your device and is neither stored by us nor transmitted to servers. The app uses the system API (BiometricPrompt) to confirm whether authentication was successful. So that sign-in can continue after successful biometrics, the app stores your email and password locally in the app settings (SharedPreferences) when you turn this on. You can turn the feature off in the app at any time; the locally stored sign-in details are then removed.
Legal basis: Art. 6(1)(a) GDPR (voluntary activation).
Local storage
The app stores locally in SharedPreferences in particular: the API token (Sanctum), the FCM device token, your push topic settings and – only with biometrics turned on – your email and password for signing in again. Technical states (e.g. whether a hint was dismissed) may also be stored locally. When you sign out, the token and sign-in details are removed; when you uninstall the app, this local data is usually removed along with the app’s storage.
6. Recipients of data
Personal data may reach the following parties in particular:
- Hetzner as hosting provider / processor for our backend
- Google for push delivery (Firebase Cloud Messaging) and advertising (AdMob), see the respective sections
- Group members, as far as you share content in a shared group
- PayPal or other external services, only if you open an external link yourself
We don’t pass your account data (e.g. name or email) on to ad networks. To serve ads, Google processes the device and usage data described above as part of AdMob.
7. Contact
Questions about privacy in the app: info@mitplanlos.de.
Last updated: November 2026