Privacy Policy

TravelTribe  ·  Last Updated: 14 June 2026

1. Data Controller

The controller responsible for your personal data is:
Jasper von Hammerstein
Grindelhof 73d
20146 Hamburg, Germany
Email: jasper.vhammerstein@googlemail.com

Full contact details are listed in the Imprint within the app.

2. Data We Collect

When you use TravelTribe, we process the following personal data:

• Account data: email address, username, and your user ID.
• Profile picture: if you upload one, it is stored in our cloud storage.
• Location data: your device location is used to place and collect coins and materials. We do not store your exact coordinates. For material collection and related achievements we record the approximate area as a roughly 250 × 250 m grid cell (geoblock).
• In-app activity: coins, materials, recommendations, messages, and other content you create or interact with.
• Automatically collected data: crash and error reports, and product analytics about how you use the app (see Section 3).

3. Third-Party Processors

We share data with the following service providers, who process it on our behalf:

Service	Purpose	Data Processed	Servers
Firebase (Google)	Authentication, database, file storage, backend	Account data, profile picture, all in-app content	May include USA (SCCs)
Sentry	Crash & error reporting	User ID, email, diagnostic data	EU
PostHog	Product analytics	User ID, email, username, usage events	EU (eu.i.posthog.com)
Google Maps / Places	Geocoding, place search	Location queries, search queries	May include USA (SCCs)

SCCs = EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

4. Purposes and Legal Basis

• Providing your account and the app's core features — performance of our contract with you (Art. 6(1)(b) GDPR).
• Crash reporting and product analytics to keep the app stable and improve it — our legitimate interest (Art. 6(1)(f) GDPR). You can opt out of analytics at any time (see Section 7).
• Enforcing our Terms and preventing abuse — our legitimate interest (Art. 6(1)(f) GDPR).

5. International Transfers

We use EU-hosted servers for Sentry and PostHog, so no transfer to third countries occurs for these services. Where Firebase (Google) or Google Maps process data outside the EEA, that transfer is safeguarded by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

6. Data Retention

We keep your account data for as long as your account exists. When you delete your account, we delete or anonymise your personal data, except where we are legally required to retain it or where content has been made semi-public under our Terms. Crash and analytics data are retained only for as long as needed for their purpose.

7. Your Rights

Under the GDPR you have the following rights:

• Access (Art. 15) — to find out whether and what data we hold about you.
• Rectification (Art. 16) — to correct inaccurate data.
• Erasure (Art. 17) — to have your data deleted where legally permitted.
• Restriction of processing (Art. 18).
• Data portability (Art. 20) — to receive your data in a common format.
• Object (Art. 21) — to processing based on our legitimate interests.

To exercise any of these rights, contact us at jasper.vhammerstein@googlemail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Hamburg is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
datenschutz.hamburg.de

8. Children

TravelTribe is intended for users aged 16 and over. Users under 16 may only use the app with the consent of a parent or guardian (Art. 8 GDPR). If we become aware that a child under 16 has created an account without such consent, we will delete the account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of the app after an update constitutes acceptance of the revised policy.

10. Contact

For privacy questions, contact us at:
jasper.vhammerstein@googlemail.com