TP Timon Polley Legal documents

Privacy Policy

Privacy Policy for Flatnest

Flatnest ENGLISH

Privacy Policy for Flatnest

Last Updated: June 23, 2026

This Privacy Policy explains how Timon Polley processes information in connection with Flatnest.

Controller and contact

Timon Polley, Gutenbergstrasse 5, 51469 Bergisch Gladbach, Germany. Email: dev@timonply.com.

What the app does

A shared-living coordination app for flats, members, chat, chores, expenses, shopping, decisions, invites, notifications, and household records.

This document reflects the current pre-release implementation scope and must be reviewed again before external launch.

Data and purposes

  • Account, profile, flat membership, role, invite, household summary, chore, chat, decision, expense, shopping, calendar, maintenance, guest, handbook, notification, settings, and audit metadata may be processed for the shared-living service.
  • Message bodies, private notes, receipts, payment details, and legal content are treated as sensitive and must not be used in analytics metadata. Firebase services are the planned backend; production live actions remain approval-gated in the app workspace.
  • The app is pre-release. Legal/store disclosures must be rechecked before external launch if sync, storage, analytics, paid features, RevenueCat, ads, or support-upload flows change.

Processors and third-party services

Planned Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging, Apple App Store, Google Play, and any future approved payment or subscription provider.

For EEA users, core app processing is based on performance of the user contract or user-requested functionality. Optional ads, tracking, notifications, or permissions rely on consent where required. Security, abuse prevention, and minimal service diagnostics may rely on legitimate interests where legally available.

Retention, deletion, and user controls

Flatnest provides account-related controls in the app. Deleting an account removes or anonymizes account-linked data unless retention is required for security, fraud prevention, legal compliance, dispute handling, or preserving other users’ shared records.

If you cannot use the in-app controls, contact dev@timonply.com from the email address connected to the account where applicable. We may need reasonable verification before acting on a request.

Your privacy rights

Depending on your location, you may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority. Contact dev@timonply.com for requests that cannot be completed directly in the app.

Children and age requirements

The app is not intended for unsupervised use by children below the digital-consent age in their country. A parent or guardian must review the app, purchases, ads, and data controls before a child uses it.

Security

We use reasonable technical and organizational safeguards, limit collection to the active product scope, and avoid asking users to send passwords, authentication codes, or unnecessary sensitive data by email.

International transfers

Some service providers may process data outside the EEA. Where GDPR transfer rules apply, transfers rely on appropriate safeguards such as adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses.

Automated decision-making

The app does not make automated decisions with legal or similarly significant effects. Personalized ads or store/SDK decisions may be automated where the provider offers them and required consent exists.

Changes

We may update this document when the app, legal requirements, or store disclosure requirements change. The date at the top shows the current version.