Privacy policy
As of October 2026 · Deutsch · Polski
This is a translation for your convenience. The German version is the legally binding one.
This page explains which data WellGrouped processes, why, who sees it and what rights you have. In short: we only store what the app needs to work. There are no ads, no tracking and no analytics tools.
1. Controller
2. Which data we process
Your account
- Email address and password. Both are kept only by our sign-in service (Firebase Authentication), not in your profile. The password is stored in encrypted form only. We cannot see it.
- You create your account via the personal link in your invitation email, which confirms your address. For resetting your password, Firebase sends you emails on our behalf.
Your profile
- Username, first and last name, your avatar with colour, frame and level animation, your XP and your level.
- Optionally your payment method, so that your flatmates can send you money: PayPal email address or IBAN with the recipient's name and BIC.
Your flat
- Name, address (with coordinates from the address search), flat ID, symbol, banner and frame.
- Who lives in the flat, since when, who is the flat admin, the form of government and votes.
- Cleaning tasks with checklist items, whose turn it is and who completed them when, requests to hand over a cleaning turn with reason and answer, cleaning XP per member, expenses, planned purchases, debts, code articles, reported violations and rooms.
- Join requests: username, first and last name, avatar and your message to the flat.
- Optionally photos: a proof photo when you complete a cleaning task and a receipt photo when you take over a planned expense. The app shrinks the photo on your device and stores it in your flat's database. The camera's extra information (for example the location) is removed in the process.
Sign-up on the home page
- If you enter your email address under “Für WellGrouped anmelden” (sign up for WellGrouped) on wellgrouped.tech, we store it with your browser language and the time. Against spam we briefly count how often sign-ups come from your internet connection (only a check value of the IP address, deleted after one day).
Notifications and bug reports
- Optionally notifications on your phone and/or by email (see section 5).
- Optionally bug reports that you send via “Report a bug” or the round 🐞 button: your text, your username, your
user number, the flat number and the app language. Only if you leave it switched on in the window, also:
- a screenshot of the screen as it looked when you tapped the button. It can show anything that was on it, for example the names of your flatmates or amounts. You see it before sending.
- device data: device model, operating system, browser and their versions, your browser's device identifier, screen and window size, pixel density, orientation, whether WellGrouped is installed as an app, device language, time zone, connection type, memory and CPU cores, whether notifications are allowed, the open view and the app's most recent error messages.
What is required: For an account you need an email address, a password, a username and your first and last name; to found a flat, its name and address. Without this information you cannot use WellGrouped. Everything else (payment method, photos, checklist items, messages, notifications) is optional.
The app does not access your camera or your pictures by itself: only when you tap “Take photo” or “Choose picture” does your phone open its camera or picture selection, and only the picture you choose there gets into the app.
3. Who sees your data
- Your flatmates see your profile, your payment method and everything entered in your flat. They do not see your email address.
- Only the operator sees your sign-up on the home page and your bug reports.
- Anyone who knows your flat ID only sees the flat name, symbol and banner, in order to send a join request. The flat then sees your request with name, avatar and message.
- The operator (see section 1) can access the stored data for maintenance and to fix errors. He does not pass it on and does not use it for anything else.
4. Purpose and legal basis
- So that you can use WellGrouped (account, profile, flat features): Art. 6(1)(b) GDPR (providing the service you use).
- For the secure technical operation of the website (for example server logs): Art. 6(1)(f) GDPR (legitimate interest in secure operation).
- For notifications on your phone and by email: your consent (Art. 6(1)(a) GDPR), see section 5.
- For the sign-up on the home page: your request (Art. 6(1)(b) GDPR). For the block list of rejected addresses: our legitimate interest in preventing repeated sign-ups (Art. 6(1)(f) GDPR).
- For bug reports: our legitimate interest in finding and fixing bugs (Art. 6(1)(f) GDPR). You only send them when you tap “Report a bug” yourself.
5. Services we use for this
Google Firebase
Sign-in (Firebase Authentication), the database (Cloud Firestore) and delivering the app (Firebase Hosting) run on Firebase by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The database is located in Frankfurt am Main (region europe-west3). When you open the app, Google processes technical data such as your IP address in order to deliver the page. Google may also process data in the USA. The basis for this is the EU-US Data Privacy Framework, under which Google LLC is certified, and the European Commission's standard contractual clauses. More: firebase.google.com/support/privacy.
Address search (Photon by komoot)
When you type an address while founding a flat or changing its address, the app sends the typed text to Photon (photon.komoot.io) by komoot GmbH in Potsdam, Germany, to suggest and check matching addresses. komoot also receives your IP address. Photon uses map data from OpenStreetMap.
Checking the PayPal email address (Cloudflare)
If you enter a PayPal email address as your payment method, the app checks whether the part after the @ (for example “gmail.com”) can receive emails at all. To do so it asks Cloudflare's public DNS service (cloudflare-dns.com, Cloudflare, Inc., USA). Only this domain name is sent, not your full address; Cloudflare also receives your IP address. Cloudflare is certified under the EU-US Data Privacy Framework. More: developers.cloudflare.com/1.1.1.1/privacy.
Notifications (Cloudflare Workers and push services)
Notifications are optional and only on if you turn them on in the app and allow them on your phone. Then our small sending service at Cloudflare Workers (Cloudflare, Inc., USA) stores your device's push address with your user number and language, and for every flat the next cleaning turns (who, when, title of the task) for the morning reminder. The messages themselves (e.g. “Paul would like to hand bathroom cleaning over to you”) travel encrypted through your phone's push service (Google on Android, Apple on iPhone, Mozilla on Firefox); these services only see encrypted content. If you turn notifications off, sign out or delete your account, this device's push address is deleted; cleaning turns expire by themselves after 30 days. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the settings. More: cloudflare.com/privacypolicy.
Notifications by email (Brevo)
If you turn on “By email” in the settings, our sending service at Cloudflare Workers stores your email address and language. It takes the address from your sign-in; it does not go into your profile, so your flatmates do not see it. The emails are sent via Brevo, a service of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France. Brevo receives your email address and the content of the message (for example “Paul would like to hand bathroom cleaning over to you”). The legal basis is your consent (Art. 6(1)(a) GDPR). If you turn it off or delete your account, the address is deleted from the sending service. More: brevo.com/legal/privacypolicy.
All WellGrouped emails come from info@wellgrouped.tech. If you write to this address or reply to an email, Cloudflare (Email Routing, Cloudflare, Inc., USA, see above) forwards your message to the operator's mailbox. Cloudflare only keeps a short log for this (for example sender, recipient, time).
Sign-up on the home page (Cloudflare Workers and Brevo)
Your sign-up (see section 2) is stored by our sending service at Cloudflare Workers; the operator receives a notification on his phone. Right after signing up we send you a confirmation email via Brevo with a button “View status” (shows whether you are on the waiting list, approved or declined, and since when) and a link “Remove my address”: if you did not sign up yourself, this removes the address from the list straight away. So that the status can still be viewed after a rejection, the secret key from these links is stored with the address on the block list. If he approves you, you receive an invitation email via Brevo with the link to WellGrouped. If he rejects it, the address is put on a block list so that it cannot be signed up again. You can only register with an approved address: for this it is also on the list of approvals in our database (Firebase, see above). For the invitation we also store a secret link there that is valid only once, with your email address and, if the operator assigns you to a flat right away, that flat. It is redeemed when you create your account and remains stored with your user number as proof.
Bug reports (Cloudflare Workers)
Bug reports (see section 2) are stored by our sending service at Cloudflare Workers, a screenshot separately. The operator receives a notification on his phone and an email via Brevo with your username, your text, the device and, if you send it, the screenshot.
Roadmap and “About me” on the home page (Cloudflare Workers)
Your browser loads the roadmap and the name, text and photo of the “About me” section from our service at Cloudflare Workers when you open the home page. For technical reasons Cloudflare processes your IP address; we do not store any of it. The legal basis is our legitimate interest in delivering the page (Art. 6(1)(f) GDPR). The name below the photo links to the photographer’s LinkedIn profile; only when you tap it does your browser connect to LinkedIn (LinkedIn Ireland Unlimited Company), whose privacy policy then applies.
Links to other services
If you tap an address, Apple Maps or Google Maps opens; if you tap PayPal when paying, PayPal opens. This only happens when you tap. From then on, the privacy policies of these services apply.
6. What is stored on your device
Your browser storage holds your sign-in (so that you stay signed in) and the settings of this device: sounds, vibration, proof photo on or off, language, keyboard size, sorting of the member table and which level celebrations you have already seen, plus whether notifications are on. For notifications the app registers a service worker; it does not cache any content. There are no advertising or tracking cookies. We load the fonts from our own server, not from Google Fonts.
7. How long we store data
- Your account and your profile until you delete your account (in the app: Profile → Settings → Delete account). Profile, username and sign-in are then deleted immediately.
- What you entered in a flat (for example expenses, debts, completed tasks, votes) remains for your flatmates because it is part of their accounts. Your name is no longer shown there (“Former member”).
- Proof photos of cleaning tasks for 30 days, then the app deletes them automatically (the entry in the cleaning history remains). Receipt photos until the expense is deleted.
- A flat's data until it is dissolved. When the last member leaves the flat, everything is deleted.
- Your email address for notifications until you turn them off or delete your account.
- Bug reports including screenshot and device data until the bug has been dealt with, at most one year.
- Redeemed invitations for as long as your account exists; unredeemed ones until a new invitation replaces them.
- Every email WellGrouped sends (recipient, subject, content, time, whether it went out) for 90 days in the log of our sending service at Cloudflare, so that the operator can check whether emails arrive.
- Sign-ups from the home page for at most one year; rejected addresses on the block list until the operator lifts the block. At your request we delete both immediately.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Just write to the email address in section 1. You can also change or delete much of it directly in the app. You can withdraw a consent (for example for notifications) at any time; this does not affect what happened before.
If you think we are not processing your data correctly, you can complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.
9. No automated decisions
WellGrouped makes no automated decisions and creates no profiles within the meaning of Art. 22 GDPR. Rankings and levels are just for fun within your flat.
10. Minimum age
WellGrouped is intended for people aged 14 and over. Younger people need their parents' consent (Section 4(4) of the Austrian Data Protection Act).