Privacy Policy for “Zocken”

Last updated: 21 October 2026 · Deutsche Fassung

1. Controller

Daniel Cornesse
Kenner Pfad 6, 54338 Schweich
E-Mail: info@media-daco.de

2. What this is about

Zocken helps groups find the days when everyone is free. This policy explains which data is processed, why, where it is stored and how you can delete it. The app contains no advertising and no analytics or tracking services.

3. Data we process

• Account: When you sign in with Google or Apple, the app receives a user ID, your name and your email address (for Apple possibly a relay address) from that provider. Name and email are stored in Firebase Authentication. For Google accounts the app uses only your first name as display name; you can change it at any time. The app never receives your password.

• Groups: group name and emoji, who the admin is, member user IDs and display names, the invite code (it is part of the invite link) with the time of the last join, and the “counts from” setting.

• Availability: the times you enter for the next 14 days (stored as hours in UTC) and the time of the last change. All members of a group can see the entries of the other members of that group.

• Time away: if you add it, the start and end of the period, stored in the groups you choose for it. Their members see on which days you are away, but no reason.

• Weekly template: if you create one, the hours per weekday when you are usually free for that group, and up to which day it has been filled in. Only you can read it. The days it fills in are normal entries (see Availability).

• On your device (not on our servers): last selected group, appearance, language, quiet hours for notifications, muted groups, the last seen state of your groups, which is used to report only real news, and in which groups you have a weekly template.

• Notifications: They are created locally on your device. A background task checks roughly every two hours whether something changed in your groups. There is no push service and no device token on our servers.

• Technical data: As with any internet connection, your IP address and connection data are processed by Google when the app connects to Firebase.

• Invite link web page: If you open an invite link without the app installed, you see a page at zocken-flutter.web.app, served by Firebase Hosting (Google). This involves your IP address, the requested address including the code and browser details, which Google processes to deliver the page. The page sets no cookies, loads nothing from third parties and stores nothing.

• Voluntary support: Payments are handled entirely by Google Play or the App Store. We receive no payment data and no payer name, only the store's statements.

4. Purposes and legal basis

Data is processed to provide the app: sign-in, groups, shared scheduling and notifications (Art. 6(1)(b) GDPR). You can switch notifications off in system settings or per group. Permission is given through the system prompt (Art. 6(1)(a) GDPR).

5. Recipients and processors

Data is stored with Firebase (Authentication, Cloud Firestore and Hosting), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. A data processing agreement is in place. Firestore location: Europe (Multi-Site). Where data is transferred to the USA, this is based on the EU Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

Sign-in uses Google Sign-In or Sign in with Apple, and the privacy policies of Google and Apple apply in addition. There are no other recipients. Data is not sold and not used for advertising.

6. Retention and deletion

• The app automatically deletes entries for individual days once they are older than 30 days.

• If you leave a group, your entries, time away and weekly template there are deleted and you disappear from the member list. The admin can remove members. When the last member leaves, the group is deleted.

• Delete account: in the app under Settings → “Delete account”. You leave all groups and your account including name and email is deleted. For Apple sign-in the authorisation is also revoked (iOS only).

• You can also request deletion by email to the address above, preferably from the email address of your account.

• Data on your device is removed by uninstalling the app.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw consent at any time. You may lodge a complaint with a data protection authority.

8. Children

Zocken is not directed at children under 16.

9. Changes

If the app changes so that other data is processed, this policy will be updated beforehand. The date above shows the current version.