Privacy

In short: the app needs no account, your location is never stored, and nothing goes to advertising networks.

Hoplala is a map for parents. To make it work we process as little data as we can, and this document says exactly what. Last updated: [publication date]. The German version at /datenschutz is the binding one.

Controller

[First name Last name], [address], Hamburg, Germany. For privacy questions: datenschutz@hoplala.app.

Using the app without an account

You can browse the map, search, filter and save places without creating an account. What arises:

• Connection data. When the app loads places from our server, your device sends its IP address, as any internet connection does. Our hosting provider keeps it briefly in logs to fend off attacks.
• The map area. The app asks for places in the part of the map you are looking at. That is the map view, not your location.
• Your position, if you allow it. With your permission the app uses your device's location to move the map to you, calculate distances and find places nearby. For the nearby search, the app sends your coordinates to our server as part of the request. They are not stored, not logged and not linked to you. No movement profile is built. You can revoke the permission at any time in system settings; the app keeps working, just without distances.
• Saved places and lists stay on your device as long as you have no account.

Legal basis: our legitimate interest in a working app (Art. 6(1)(f) GDPR). For location, your consent through the system prompt (Art. 6(1)(a) GDPR).

Contributing: confirming, reporting, photos

The first time you contribute – confirm a fact, report a problem or upload a photo – the app silently creates an anonymous identifier on our server. It carries no email address and no name. We need it so that "confirmed by 3 parents" means three different people, not one person three times.

• Confirmations ("changing table: yes") are stored with this identifier and a timestamp. They are shown aggregated, never as your personal statement.
• Reports contain a reason and an optional note. Please do not put personal data in the note.
• Photos are reviewed by us before publication. Photos showing identifiable people, especially children, are not published and are deleted. Approved photos are publicly visible in the app. Location data in the image file is removed before upload.
• New places you suggest are reviewed before publication as well.

Legal basis: performance of the service (Art. 6(1)(b) GDPR).

With an account

You only need an account to suggest a new place or to carry your lists to another device. For that we store your email address. There is no password; you sign in with a code we email you. An optional display name appears, when you share a list by link, as the name of the person who made the list, and is visible to moderators next to your contributions. Choose it as you want to be seen.

If you create an account after having contributed, your anonymous identifier becomes that account, so your earlier contributions stay with you.

Deleting your account

In the app under Saved → Profile → Delete account, immediately and without emailing anyone. Deleted: your profile, email address, lists, photos and reports. Your confirmations are anonymised rather than deleted: other parents rely on "confirmed by 3 parents", and that must not quietly become wrong because you left. After anonymisation no confirmation can be traced to you. Details at Delete your account.

Who processes data for us

We run no servers of our own. These providers process data on our behalf, each under a data processing agreement:

Supabase

Database, sign-in and photo storage. Server location: EU, Ireland.

Resend

Sends the sign-in codes by email. Processes your email address for that.

Sentry

Crash reports. We have turned off the transmission of personal data; a report contains the technical state of the app, not your input and not your IP address.

Cloudflare

Stores the Hamburg map data we build ourselves from OpenStreetMap and delivers it to the app. Cloudflare receives your IP address and which parts of the map are loaded – roughly, which district you are looking at. There is no map provider in between.

Vercel

Hosting of this website.

Apple

Distribution through the App Store, under Apple's own terms.

We use no advertising SDKs, no tracking pixels and no analytics that follow you across apps.

Where the places come from

Places on the map come from OpenStreetMap, from open data published by the City of Hamburg, and from parents who confirmed or suggested them in the app. They are facts about places, not about people.

Retention

• Account and email address: until you delete the account.
• Anonymous identifier without an account: until you delete the app; after that nobody can link it to you.
• Confirmations: kept, anonymised after account deletion. Older confirmations lose weight over time and are asked about again.
• Photos we reject: deleted immediately.
• Server logs with IP addresses: a few days, at our providers.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR), and the right to complain to a supervisory authority; ours is the Hamburg Commissioner for Data Protection and Freedom of Information. Consent can be withdrawn at any time. Write to datenschutz@hoplala.app.

A note on access requests: without an account we cannot link your anonymous identifier to a person, and so cannot provide access to it. That is by design.

Children

Hoplala is for parents and other adults accompanying children. The app collects no data about children. Labels like "suitable for ages 1 to 3" describe places, not your child.

Changes

If the processing changes, we change this document and update the date above. Material changes are shown in the app.