Privacy Policy

Last updated: May 2026 · Deutsche Version

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you use the Offline app. Personal data means any information that can be used to identify you personally. Detailed information on data protection follows in the sections below.

What data do we collect?

We collect data that you actively provide when registering and using the app (e.g. profile details, interests), and data that is generated through your use of the app (e.g. event participation, chat messages, ratings).

What do we use your data for?

Your data is used to suggest personalised events, connect you with other users and provide app features. A subset is sent to OpenAI for AI-assisted event generation (see section 10).

2. Data controller

The party responsible for data processing under this site is:

Zest UG (haftungsbeschränkt)
Stadtplatz 39, 84529 Tittmoning, Germany
Email: info@offline-events.de

3. Data collected in the app

Profile data

When you register and use the app we collect the following profile data:

  • First name
  • Age
  • Gender
  • City and neighbourhood
  • Interests and activity preferences
  • Profile picture
  • Friendships and follower relationships
  • Login data via Firebase Authentication (email address and password)

Event data

In connection with events we process the following data:

  • Event RSVPs (accepted/declined)
  • Post-event ratings (1 to 10 stars and an optional comment)
  • Ratings of other participants after events
  • Chat messages within events

Posts and feed

When you use the social feed we process:

  • Posts you create (text, images, videos)
  • Likes on other users' posts

Location data

With your explicit permission, we use your device's location (precise GPS) to suggest events near you, surface friends in your area and rank venues by distance. The location is read on the device only when you actively use a location-aware feature and is transmitted to our backend (Firestore) so we can match you to events in the right city. You can revoke the permission at any time in your device's system settings.

Legal basis

Processing of your profile and usage data is based on contract performance under Art. 6(1)(b) GDPR, since this data is necessary to provide the app's features. Where data is processed to improve our services, we rely on our legitimate interest under Art. 6(1)(f) GDPR.

4. Storage and deletion

Your data is stored for as long as you use the app. You can delete your account permanently at any time under Settings > Delete account, or via offline-events.de/delete-account. When you delete your account, all personal data — including profile, posts, event participations and chat messages — is deleted immediately and irreversibly. Deleted data cannot be restored.

Where statutory retention obligations apply, the relevant data is kept until the respective period ends and then deleted.

5. Data sharing

We share your personal data with third parties only in the following cases:

  • When required to provide app features (e.g. displaying first names and profile pictures to other event participants)
  • For AI-assisted event generation to OpenAI (see section 10)
  • To Google for using Firebase (authentication and data storage)
  • To Google AdMob for displaying ads in the free version of the app
  • To RevenueCat (subscription receipt validation) and the respective app store (Google Play / Apple) for processing in-app purchases
  • Where a legal obligation requires disclosure

6. Your rights

You have the right at any time to:

  • Access: Request information about the data we hold about you
  • Rectification: Request the correction of inaccurate data
  • Erasure: Request deletion of your data — in the app at any time via Settings > Delete account
  • Restriction: Request restriction of processing
  • Objection: Object to processing, in particular where it is based on legitimate interest
  • Data portability: Receive your data in a common, machine-readable format
  • Withdraw consent: Withdraw any consent given, with effect for the future

To exercise these rights please contact us at: info@offline-events.de

7. Advertising (Google AdMob and Google AdSense)

Google AdMob (app)

In the free version of the app we display ads via Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. AdMob may process device identifiers and usage data to deliver personalised advertising.

Processing by AdMob is based on your consent under Art. 6(1)(a) GDPR, which is collected at first app launch via Google's User Messaging Platform (UMP). You can change your consent in the app's settings at any time.

Google AdSense (website)

On our website offline-events.de we use Google AdSense, an ad service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdSense uses cookies and similar technologies (e.g. web beacons) to collect information about your usage behaviour and to display relevant ads.

Google specifically processes the following data: IP address (truncated), cookie identifiers, device information, visited pages, click and scroll behaviour and approximate location (based on IP). Google uses this data to serve personalised ads, measure ad performance and detect misuse.

Processing is based solely on your consent under Art. 6(1)(a) GDPR. We collect this consent via our cookie banner (Google CMP) on your first visit. You may withdraw consent at any time for the future by reopening the cookie banner via the "Cookie settings" link in the footer.

Transfer of your data to the USA and other third countries cannot be ruled out. Google has self-certified under the EU-US Data Privacy Framework. Where no adequacy decision applies, transfers are based on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.

You can permanently disable personalised ads in your Google account at adssettings.google.com. Further information on Google's data processing is available at policies.google.com/privacy and specifically for AdSense at policies.google.com/technologies/ads.

8. Hosting and technical infrastructure

Google Firebase (authentication and data storage)

Your app data (profile, events, chats, posts) is stored in Google Firebase, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Firebase provides us with the technical infrastructure for authentication (Firebase Authentication) and database services (Firestore).

Processing is based on a data-processing agreement under Art. 28 GDPR. Transfers to third countries take place only under the conditions of Art. 44 et seq. GDPR. Further information: firebase.google.com/support/privacy

Netlify (website hosting)

Our website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. Netlify automatically collects technical access data (IP address, browser type, operating system, date and time of the request). Data transfer to the USA is based on the EU Standard Contractual Clauses. Further information: netlify.com/privacy

9. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Website: www.baden-wuerttemberg.datenschutz.de

10. AI processing (OpenAI)

Event generation with GPT-4o

To generate personalised events, your profile data and activity preferences are transmitted to OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA. OpenAI processes this data to produce matching event suggestions via the GPT-4o language model. The transmitted data includes information such as interests, age, city and activity preferences. No full real names or directly identifying contact information are transmitted.

The legal basis for this processing is Art. 6(1)(b) GDPR (contract performance), since AI-assisted event generation is a core feature of the app, as well as Art. 6(1)(f) GDPR (legitimate interest in improving our services). Data transfer to the USA is based on the EU Standard Contractual Clauses.

Further information on OpenAI's data processing: openai.com/privacy

Fine-tuning of the AI model

To continuously improve the quality of generated events, we use positive user feedback (high ratings, event participation) as the basis for fine-tuning our AI model. Only anonymised prompt/response pairs are used. No directly identifying data such as names, email addresses or user IDs is included. The resulting training data may be transmitted to OpenAI for model optimisation.

The legal basis is our legitimate interest in improving the service under Art. 6(1)(f) GDPR.

Content moderation (Cloud Vision SafeSearch)

To comply with content-safety policies and store guidelines, every image uploaded to the app is automatically analysed by Google Cloud Vision SafeSearch (Google Ireland Limited). Content classified as adult, violent or otherwise inappropriate is automatically removed. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in maintaining a safe platform) and Art. 6(1)(c) GDPR (legal compliance with platform regulations).

Last updated: May 2026