Last updated: 16.01.2026

1. Data Controller

Controller (GDPR):

DropSpot UG (haftungsbeschränkt)

Neureuthstraße 36.

83684 Tegernsee

Germany

Privacy contact: [email protected]

2. Scope of this Policy

This is the in-app privacy policy for DropSpot. It applies whenever you use the app, including when the app is running in the background.

3. Information We Collect

3.1 Location Data (Mandatory Disclosure)

DropSpot processes your device location, including background location, if you grant permission.

Location type: Precise, Approximate

Collection method: Continuous, Periodic, Significant location change

Note: The app uses high-accuracy location (precise) when you are walking or stationary, and lower accuracy (approximate) when in a vehicle. Location is collected continuously in the background to enable real-time features.

Why background location is required:

Background location is required to provide the app’s core functionality, including:

• Real-time visibility of nearby users
• Proximity-based matching
• Live map updates
• Location-based notifications (“live pings”)

If background location is disabled, core features will not function.

You can change or revoke location permissions at any time in your device settings. Limiting or disabling location access may restrict or disable core features.

3.2 Account and Profile Data

We process data you provide when creating and using an account:

• Phone number (for account verification)
• First name and last name
• Date of birth
• Profile photo
• Bio
• Interests
• Relationship status
• Instagram username
• Current status

3.3 Usage Data

We process data about how you use the app to improve the user experience, including:

• Error events (for troubleshooting purposes)

3.4 Device and Technical Data

We process limited technical data necessary to operate and secure the app:

• Device information (device type, operating system)
• Error logs and technical diagnostic information

Third-party SDKs used:

• Firebase Cloud Messaging (Google LLC) – for push notifications
• Google Maps Platform (Google LLC) – for mapping services
• Background Geolocation (Transistor Software) – for location tracking
• Notifee – for local notifications
• React Native Contacts – for contacts access (if permission granted)

3.5 Contacts Data (if permission granted)

DropSpot may access your contacts only if you grant permission. Contacts are uploaded to our servers solely to help you find friends and connections within the app. We will not share your contacts with third parties without your consent.

You will be asked explicitly for your consent before any contacts are uploaded. You can revoke this permission at any time in your device settings, in which case your contacts will no longer be uploaded or processed.

4. How We Use Your Information

We use your information to:

• Create and manage your account
• Provide and improve app functionality
• Enable real-time location-based features (nearby users, proximity matching, map updates)
• Send location-based notifications (“live pings”)
• Process and deliver messages and communications
• Ensure app security and prevent abuse
• Troubleshoot technical issues

5. Data Storage & Security

All data is encrypted in transit and stored securely on our servers.

Server processing:

• Personal data, including location data, is processed on our servers to operate the app and deliver real-time features
• Data is primarily processed within the EU/EEA
• Location data is stored persistently on our servers to enable real-time features

Hosting: Our servers are hosted on infrastructure provided by our service providers.

6. Data Retention

Personal data is retained only as long as necessary for the purposes described:

• Location data: Retained for as long as your account is active
• Technical logs: Retained only as long as necessary for security and troubleshooting purposes
• Account data: Retained for as long as your account is active

7. Data Sharing

We do not sell personal data.

We share data only with service providers acting on our behalf to operate the app:

• Firebase (Google LLC) – for push notifications and cloud services
• Google Maps Platform (Google LLC) – for mapping services
• Background Geolocation service (Transistor Software) – for location tracking
• Our hosting infrastructure providers

All service providers are bound by contractual obligations to protect your data.

8. International Data Transfers

Some service providers (e.g. Google LLC) may process data outside the EU/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data when transferred outside the EU/EEA.

9. Legal Bases (GDPR)

We process personal data on the following legal bases:

• Art. 6(1)(b) GDPR – performance of a contract (core app functionality)
• Art. 6(1)(a) GDPR – consent (e.g. device permissions)
• Art. 6(1)(f) GDPR – legitimate interests (security, abuse prevention)
• Art. 6(1)(c) GDPR – legal obligations, where applicable

10. Account & Data Deletion

You can delete your account at any time. To delete your account:

1. Open the app
2. Go to Profile
3. Go to Settings
4. Select “Delete Account”
5. Confirm deletion

Upon account deletion:

• Your account and all associated data are permanently deleted immediately
• This includes all location data, profile information, and usage data
• Some data may be retained only if required by law

If you want only some of your data deleted, contact us at [email protected].

11. Your Rights (GDPR)

Depending on your location, you may have the right to:

• Access your data
• Request deletion
• Correct inaccurate data
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at [email protected].

12. Children

The app is not intended for users under the age of 16.

13. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. The current version is always available in the app.

14. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact us at:

[email protected]