🔒 Privacy & data protection

Privacy as a feature — not just legal text.

• Data minimisation: the aim is to process only the data a function needs.
• Location defaults to city level; no live location of others.
• Visibility controllable per field; profile can be deactivated anytime.
• No tracking, no ads: no analytics or advertising components are included. The app loads nothing from Google (strict Content Security Policy).
• Session tokens are stored server-side only as a hash.
• Encryption of secrets at rest (e.g. calendar tokens) and of database backups.
• Data export (Art. 15) and account deletion (Art. 17), the latter even without login.
• Consents are recorded; especially sensitive ones (e.g. blind date) only explicitly.