Privacy Policy

The controller responsible for data processing within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Maximilian Friedl

Römerstraße 22

80801 Munich

Germany

Email: mine.journal.contact@gmail.com

As the developer of the "Mine" app, I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

1. Special Functional Modes of the App

A. Use Without Registration (Anonymous Mode / Guest Mode)

You can use the app entirely without creating a user account. In this case, all data you enter (themes, comments, daily ratings, tracked habits, and photos) remains exclusively stored locally in the secure storage of your end device.

In this mode, no transmission or storage of your journal data takes place on external servers. Data processing is performed strictly locally based on Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures).

B. Use With Registration (Cloud Synchronization)

If you actively register or log in to the app (e.g., via Google Sign-In), your data is transmitted via an encrypted connection (TLS) to our cloud infrastructure. This is required to protect your entries from data loss when switching devices and to enable cross-device synchronization.

2. Use of Google Firebase (Infrastructure and Backend)

For the provision, security, and synchronization of the app, we use the platform "Google Firebase" provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google").

The following Firebase sub-services are specifically used in this app:

• Firebase Authentication: Enables you to securely register and log in. This processes your unique User ID, your email address, and, if applicable, your name. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).
• Cloud Firestore: A cloud-based NoSQL database. This stores your created themes, journal entries, daily responses, and app settings, allowing you to access them across multiple devices. The data is automatically encrypted by Google on a server level (Encryption at Rest). The legal basis is Art. 6(1)(b) GDPR.
• Firebase Cloud Storage: A cloud storage space where photos optionally and actively uploaded by you to specific tasks and days are securely stored. The legal basis is Art. 6(1)(b) GDPR.
• Firebase Hosting: This service is used to provide this Privacy Policy securely and reliably. When accessing this page, technically necessary server log files (including IP address, date/time of access) are processed. The legal basis is our legitimate interest in providing a fault-free website (Art. 6(1)(f) GDPR).

Third-Country Data Transfer: Google processes data, among other places, in the USA. Please note that Google operates on the basis of EU Standard Contractual Clauses as well as certification under the EU-US Data Privacy Framework, ensuring a level of data protection compliant with EU regulations.

3. Required App Permissions (Device Access)

To function properly, the app requests certain permissions on your smartphone during operation:

• Access to Storage / Photo Gallery: This permission is requested as soon as you want to add a photo to a journal entry. The photo is compressed locally and, in registered mode, uploaded to Cloud Storage.
• Notifications (Push Messages): This permission is used to deliver your configured daily or weekly task and affirmation reminders. You can completely deactivate these reminders at any time in the app settings.

Activating these permissions is voluntary and based on your consent at the system level (Art. 6(1)(a) GDPR).

4. Your Rights as a Data Subject

Under applicable statutory provisions, you have the right at any time to:

• Access information about your stored personal data, its origin, recipients, and the purpose of data processing (Art. 15 GDPR).
• Rectification of incorrect data (Art. 16 GDPR).
• Erasure of your data stored by us (Art. 17 GDPR).

Simple Data Deletion Directly Inside the App:

You can exercise your right to erasure independently and without any waiting time. To do so, use the "Delete account and all data" button in the app settings. This will irrevocably and completely delete your user account, all journal entries, histories, and all uploaded images from the Firebase database and Cloud Storage.

You also have the right to lodge a complaint with the competent data protection supervisory authority (e.g., the Bavarian State Office for Data Protection Supervision).

5. Data Retention and Storage Duration

We store your personal data only for as long as it is necessary to fulfill the purposes set out in this Privacy Policy or as long as your user account exists:

• Anonymous / Guest Mode: Your data is stored locally on your device until you delete the app or clear the app data via your device settings.

• Registered Accounts: Your journal entries, photos, and account settings stored in Google Firebase remain stored until you actively delete your account or specific data using the "Delete account and all data" feature inside the app. Upon initiating account deletion, all associated data stored in our cloud backend (Cloud Firestore, Firebase Storage, and Firebase Authentication) will be deleted immediately and irrevocably.

• Statutory Obligations: If legal retention obligations apply, processing of the relevant data will be restricted and deleted after the expiry of the statutory retention periods.

6. Data Security

To best protect your data against accidental or intentional manipulation, loss, or unauthorized access by third parties, this app exclusively uses encrypted connections (SSL/TLS) to Google Firebase servers. Local data on your end device is subject to the security mechanisms of the Android operating system.

As of: August 2026