Privacy Policy

1. Introduction

Pfandi ("we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Account Information

When you sign in with Google, we collect and store information associated with your account, including:

• Your Firebase user ID
• Your Google display name
• Your email address, if provided by Google
• Your joined date
• Your chosen username inside Pfandi

Pfandbon Data

When you upload or scan a Pfandbon, we may collect and store:

• Pfandbon photos, stored in Firebase Storage
• Pfandbon value information such as amount, amount text, and currency code
• Store-related information such as store brand, store address, and store ID
• Pfandbon details such as barcode number, barcode type, bottle count, printed date, and creation date
• Extracted line-item information, if available
• Pfandbon status information, including current status and status history such as from-status, to-status, timestamp, and the user ID that made the change
• Technical file information such as storage path, storage bucket, and content type

Location Data

If you enable location access, Pfandi uses your device location to help sort bons by nearest store. Location data is processed on-device and is not stored on our servers by Pfandi.

Local Device Data

Pfandi also stores limited preferences locally on your device using local app storage, including:

• The most recently viewed bon ID and date
• Your selected bon filter option
• Whether location sorting is enabled
• Whether the in-app notification toggle is enabled

This local device data does not leave your device unless the operating system or a third-party backup service handles it separately.

3. How We Use Your Data

We use your data:

• To authenticate you and manage your account
• To store, display, and manage your bons
• To upload and retrieve Pfandbon photos
• To display Pfandbon barcodes and related Pfandbon information
• To sort bons based on distance to stores when location access is enabled
• To support app reliability, security, and future improvements

We do not sell your personal data to third parties. We do not use your personal data for third-party advertising.

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance to provide the service you signed up for
• Legitimate interest to operate, secure, and improve the app
• Consent for optional features such as location access

5. Third-Party Services

Pfandi uses the following third-party services:

• Firebase Authentication to manage account sign-in
• Cloud Firestore to store account and Pfandbon-related data
• Firebase Storage to store Pfandbon photos
• Google Sign-In to authenticate your account

These services may process data according to Google's privacy policy: https://policies.google.com/privacy

6. Data Retention

We retain your data for as long as your account remains active or as long as needed to provide the service.

If you delete your account through the app, Pfandi attempts to delete your associated user profile, bons, and uploaded Pfandbon photos from our Firebase-backed services. In some cases, deletion may not be immediate in backups, logs, or technical systems maintained by service providers.

7. Your Rights (GDPR)

Depending on applicable law, you may have the right to:

• Access to request a copy of your personal data
• Rectification to correct inaccurate data, such as your username
• Erasure to request deletion of your account and associated data
• Restriction to request that we limit how we process your data
• Portability to request your data in a structured format where applicable
• Lodge a complaint with a relevant data protection authority

To exercise these rights, contact us at support@getpfandi.com.

8. Data Security

We use Firebase and related access controls to help protect stored data against unauthorized access. However, no method of transmission or storage is completely secure.

9. Children's Privacy

Pfandi is not intended for children under the age required by applicable local law to use the service without parental permission. We do not knowingly collect personal data from children in violation of applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the date above and provide notice through the app or website where appropriate.

11. Contact

For privacy-related questions or requests:

Email: support@getpfandi.com

Website: https://getpfandi.com/privacy-policy