Privacy Policy

The controller responsible for data processing is: Damon Basler Kampstraße 20, 20357 Hamburg, Germany Email: support@schmatch.app Phone: +49 151 56940462

Anonymous account: No registration is required. On first launch, an anonymous account with a random user ID (UUID) is created automatically via our backend provider Supabase. We do not ask for your name, email address or a password.

Profile data: Optionally you create profiles (a display name and avatar color) and save your favorite dishes (emoji, dish name, venue name). This information is tied to your anonymous account and stored in the backend so it persists across your devices.

Voting & history: Your swipe choices, the winning dish, and the history of past votes are stored in the backend to power the group features and the history view.

Local storage: The session token for your anonymous account is stored locally on the device via Capacitor Preferences so you stay signed in on the next launch.

Over-the-air updates: The app fetches web updates through the Capgo service. Technical metadata (e.g. IP address, app and device version) is processed to deliver the correct update bundle.

Advertising (planned): We plan to fund the app through advertising via Google AdMob. Once advertising is active, AdMob may process device and advertising identifiers as well as your IP address to serve and measure ads. On iOS we ask for permission first via App Tracking Transparency (ATT); personalized advertising only happens with your consent. As of this version, no advertising is active yet.

To avoid any misunderstanding — the app uses no camera or microphone, no location data, no contacts, no push notification system, and no in-app purchases or subscriptions. We do not sell data.

This website is hosted by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA). When you visit, server logs (including IP address, timestamp, requested page and browser type) are processed for technical reasons.

We use Vercel Web Analytics to measure use of the website in aggregate and improve it technically and editorially. Timestamp and requested URL or route, referring website, filtered URL parameters, approximate geographic information, browser, operating system, device type and analytics script version are processed. We do not intentionally send names, email addresses or other direct identifiers.

Vercel Web Analytics does not use cookies and does not store a persistent visitor identifier in the browser. A daily visitor identifier is derived from technical request data; the hash used for this purpose is discarded after 24 hours and does not allow recognition across different days or websites. Therefore, no cookie banner is required for this service. Analytics data is stored in accordance with our Vercel plan and contractual settings and is then deleted or aggregated.

Further information about privacy in Vercel Web Analytics: https://vercel.com/docs/analytics/privacy-policy

• Supabase — backend, database and anonymous authentication
• Capgo — delivery of over-the-air updates
• Google AdMob — ad delivery (planned, currently inactive)
• Apple App Store / Google Play — app distribution
• Vercel — hosting of this website and Vercel Web Analytics

Processing is based on Art. 6(1)(b) GDPR (providing the app’s functions), Art. 6(1)(f) GDPR (legitimate interest in operation, security, updates, privacy-preserving audience measurement and improvement of the website) and — for personalized advertising — Art. 6(1)(a) GDPR (consent).

Account-related data is stored until you delete your account. You can delete your account at any time in the app under “Profile → Delete account”; deletion is permanent. Alternatively, send an email with the subject “Delete account” to the address above.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these, contact the controller above with your user ID. You also have the right to lodge a complaint with a data protection supervisory authority.

The app is intended for people aged 16 and over. We do not knowingly collect data from children below this age.

We update this policy when the app or the services it uses change — in particular when advertising is introduced. The current version is always available on this page.