Privacy Policy
Effective date: 1 June 2026 App: BeerPin (iOS) Operator: Luca Krammer, Germany Contact: support@beerpin.de
This Privacy Policy explains what personal data BeerPin (“the App”, “we”, “us”) collects when you use it, why we collect it, and what your rights are. We comply with the EU General Data Protection Regulation (GDPR).
1. Who can use BeerPin
BeerPin is intended for adults aged 18 or over. We confirm your age during sign-up. We do not knowingly collect data from minors. If we learn that a minor has provided us with personal data, we will delete the account and the associated data.
2. Data we collect
When you create and use a BeerPin account, the following data is processed:
| Category | Examples | Purpose |
|---|---|---|
| Account data | E-mail, password (encrypted), username, date of birth | Authentication, age verification |
| Profile data | Avatar image, display name, privacy preferences | Show your profile in the app |
| User-generated content | Beer ratings, comments, diary entries, photos you upload | Core app feature |
| Location data | Approximate coordinates of beer ratings (only if you opt in) | Show your beers on a personal map |
| Social interactions | Friendships, follows, likes, comments | Social features |
| Push tokens | Your device’s Apple Push Notification token | Send you in-app notifications (only if you opted in) |
| Moderation data | Reports you submit, accounts you block | Safety and content moderation |
| Diagnostic data | App version, OS version, basic crash logs | Technical troubleshooting (no advertising) |
We do not collect: financial data, contacts, health data, browsing history outside the app, precise GPS without opt-in, or tracking identifiers for advertising. We do not sell your data to third parties.
3. Legal basis (GDPR Art. 6)
- Performance of a contract — operating the app and providing its features (Art. 6(1)(b))
- Consent — push notifications, photo library access, location use (Art. 6(1)(a))
- Legal obligation — verifying that users are 18+ (Art. 6(1)(c))
- Legitimate interest — moderation, abuse prevention (Art. 6(1)(f))
4. Service providers (data processors)
We use the following third-party services to operate BeerPin:
- Supabase (Supabase Inc., USA) — database, authentication, file storage, edge functions. Data is hosted in the EU region. Privacy Policy.
- Expo (Expo, USA) — Expo Push Notification service forwarding tokens to Apple. Privacy Policy.
- Apple — App Store distribution, Apple Push Notification service. Privacy Policy.
Standard Contractual Clauses are in place for data transfers outside the EEA where applicable.
5. Public visibility
Your profile is private by default. You can opt to make it public in the in-app settings; in that case, your username, avatar, ratings, and diary entries become visible to other BeerPin users. Switching back to private hides this data from non-friends again.
Friends-of-friends can see only what your account privacy and map settings allow.
6. Retention
We keep your account data for as long as your account exists. When you delete your account, all personal data is removed from our active database within 30 days. Reports you submitted are retained in pseudonymised form for moderation history.
7. Your rights (GDPR)
You have the right to:
- Access — request a copy of your personal data
- Rectify — correct inaccurate data
- Erase — delete your account and personal data
- Restrict — limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing
- Withdraw consent — for anything that relies on your consent
To exercise any of these rights, write to support@beerpin.de. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
How to delete your account
In the BeerPin app, go to Profile → Log out, then write to support@beerpin.de from the email address associated with your account. We will permanently delete your account within 30 days. (An in-app deletion button will be added in a future release.)
8. Security
We use TLS in transit, encryption at rest, and Row-Level Security policies on our database to prevent unauthorised access. Passwords are stored as one-way hashes. No system is fully secure, however — if we ever experience a relevant breach, we will notify affected users.
9. Children
BeerPin is not directed to children under 18. If you believe a minor has provided us with personal data, contact support@beerpin.de so we can remove it.
10. Changes to this policy
We may update this policy from time to time. The “Effective date” above will reflect the current version. Significant changes will be announced in the app.
11. Contact
Luca Krammer (Operator) support@beerpin.de