Privacy Policy

Effective date: [EFFECTIVE_DATE]

1. Who we are

sharewood is an app for sharing items among friends. It is operated by:

[YOUR_FULL_NAME]
[YOUR_ADDRESS]
Email: [YOUR_EMAIL]

We are the data controller for your personal data within the meaning of the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

2. Data we collect

Data	Purpose	Legal basis
Email address	Account creation, login, password reset, important service notifications	Contract performance (Art. 6(1)(b) GDPR)
Username / display name	Identifying you inside the app to your friends	Contract performance
Items you share (title, description, photos, tags, category)	Core feature — displaying your items to your friends	Contract performance
Booking data (dates, status)	Managing reservations and loans of items	Contract performance
Chat messages	Communication between friends about items	Contract performance
Comments	Discussions on shared items	Contract performance
Friend connections	Building your network within the app	Contract performance
Device push token	Sending push notifications (booking reminders, messages, etc.)	Consent (Art. 6(1)(a) GDPR)
Device session information	Security — managing active login sessions	Legitimate interest (Art. 6(1)(f) GDPR)

3. Third parties

We use the following third-party services which may process your data:

Google Firebase

• Firebase Authentication — manages sign-in via Google, Apple, or email/password. Google may receive your sign-in credential. Firebase Privacy
• Firebase Cloud Messaging (FCM) — delivers push notifications to your device. Google receives your device push token.
• Firebase Analytics — collects anonymous usage statistics (app opens, screen views). No personally identifiable data is transmitted. You can opt out in your device settings.

Google Sign-In / Apple Sign-In

When you sign in with Google or Apple, that provider shares your email address (and optionally your name) with us. We never receive your password from them. Please review:

• Google Privacy Policy
• Apple Privacy Policy

4. Data storage

• Your data is stored on a server located in [SERVER_LOCATION, e.g. "Germany" or "the EU"].
• Photos you upload are stored on the server and are only visible to your friends.
• Passwords are hashed — we never store or see your password in plain text.
• Communication between the app and our server is encrypted via HTTPS/TLS.

5. Data retention & deletion

• Your data is stored as long as your account is active.
• When you delete your account, all your personal data (profile, items, bookings, chats, comments, friend connections) is permanently deleted.
• Expired login sessions and revoked tokens are automatically purged.

6. Your rights (GDPR)

You have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — have your data deleted ("right to be forgotten"). You can delete your account directly in the app.
• Data portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent for push notifications at any time via your device settings.
• Lodge a complaint — file a complaint with the competent data protection supervisory authority.

To exercise these rights, contact us at: [YOUR_EMAIL]

7. Children

sharewood is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data to us, please contact us and we will delete it promptly.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date. Continued use of sharewood after changes constitutes acceptance of the updated policy.

9. Contact

For questions about this Privacy Policy or your data:
[YOUR_EMAIL]