Privacy Policy for the BirdieMate App

A. Scope and Separation

This page covers data processing within the BirdieMate app (for example account, friends, rounds, feed, notifications, and map features).

The BirdieMate landing page and waitlist are covered by a separate policy: https://birdie-mate.com/legal/datenschutz.html.

B. Data Controller

AppMate UG (haftungsbeschränkt)
Ochsenwerder Elbdeich 233
21037 Hamburg, Germany

Privacy contact: privacy@birdie-mate.com

Support: support@birdie-mate.com

C. Categories of Personal Data

• Account and profile data (for example email, username, profile image, handicap, and club reference)
• Calendar and round data (for example availability, location, date and time, participants, and invitations)
• Content data (for example posts, comments, reactions, and linked media)
• Usage and device data (for example app version, device type, technical logs, and diagnostics)
• Notification data (for example push token and notification preferences)
• Location data for map and distance features during active rounds, where permission is granted

D. Purposes and Legal Bases

• Providing app functionality and contract performance (Art. 6(1)(b) GDPR)
• Security, abuse prevention, service stability, and support (Art. 6(1)(f) GDPR)
• Consent-based processing, including push and permission-based access (Art. 6(1)(a) GDPR)
• Compliance with legal obligations where applicable (Art. 6(1)(c) GDPR)

E. Recipients and Service Providers

We use technical service providers to operate BirdieMate, especially cloud and communication services.

• Firebase/Google services for authentication, database, functions, and push
• Map and geolocation services for course and map rendering
• IT and support service providers where operationally required

Where required, we enter into data processing agreements under Art. 28 GDPR.

F. Transfers Outside the EU/EEA

Some service providers may process data outside the EU/EEA. Such transfers are based on appropriate safeguards, especially Standard Contractual Clauses.

G. Retention Period

We retain personal data only for as long as necessary for the stated purposes or as required by law.

If you delete your account, personal data is deleted or anonymized as far as technically and legally possible.

H. Your Rights

Under the GDPR, you have the following rights in particular:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent at any time with effect for the future
• Complaint to a supervisory authority (Art. 77 GDPR)

I. Data Security

We apply technical and organizational safeguards to protect data against loss, unauthorized access, and manipulation. Data in transit is encrypted (TLS/HTTPS).

J. Minors

BirdieMate is not specifically directed to children under 16 years of age. Where required, parental or guardian consent is necessary.

K. Changes to This Policy

We may update this privacy policy if features, processing activities, or legal requirements change.

L. Version

Version: April 2026