Privacy Policy

Last updated: July 1, 2026

1. Who We Are

TinyTrekkers (“we”, “us”, or “our”) operates the TinyTrekkers mobile application and website at tinytrekkers.de— a peer-to-peer marketplace for renting and listing baby and children's gear. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German and EU data protection law.

Contact: privacy@tinytrekkers.de

2. Data We Collect

  • Account information: name, email address, phone number, profile photo.
  • Payment information: processed securely by Stripe. We do not store full card numbers.
  • Listing data: gear descriptions, photos, pricing, and availability you publish.
  • Booking data: rental dates, amounts, and booking status.
  • Location data: approximate location to show nearby listings (only when you grant permission).
  • Messages: in-app chat between renters and owners.
  • Device data: device type, OS version, app version, crash reports, and analytics (anonymised).

3. How We Use Your Data

  • To create and manage your account.
  • To process bookings and payments between renters and owners.
  • To show you relevant listings based on your location.
  • To send transactional notifications (booking confirmations, messages, reminders).
  • To improve app performance and fix bugs.
  • To comply with legal obligations (tax records, fraud prevention).

We do not sell your personal data to third parties. We do not use your data for automated profiling that produces legal or similarly significant effects.

4. Legal Basis (GDPR Art. 6)

  • Contract performance — processing needed to fulfil bookings and run your account.
  • Legitimate interests — fraud detection, app security, and analytics.
  • Legal obligation — tax and financial record-keeping.
  • Consent — optional push notifications and marketing emails (you can withdraw at any time).

5. Third-Party Services

  • Firebase (Google LLC) — authentication, database, cloud functions, and hosting. Data processed in EU regions where available.
  • Stripe Inc. — payment processing and Stripe Connect for owner payouts.
  • Google Maps Platform — map display and location search.
  • Expo / EAS — app build and update delivery.

Each provider acts as a data processor under our instructions and is bound by a Data Processing Agreement.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to keep it (e.g., transaction records for tax purposes — retained for 10 years under German law).

7. Your Rights

Under GDPR you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — ask us to delete your data (“right to be forgotten”).
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — at any time for consent-based processing.

To exercise any of these rights, email us at privacy@tinytrekkers.de. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority (in Germany: the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit — BfDI).

8. Security

We use industry-standard security measures including HTTPS, Firebase Security Rules, Stripe's PCI-compliant infrastructure, and access controls to protect your data. No system is 100% secure; if you discover a vulnerability, please contact us immediately at privacy@tinytrekkers.de.

9. Children's Privacy

TinyTrekkers is a marketplace for adults renting gear for children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before the change takes effect. Continued use of TinyTrekkers after that date constitutes acceptance of the updated policy.

11. Contact

TinyTrekkers
Email: privacy@tinytrekkers.de
Website: https://tinytrekkers.de