Privacy Policy

X-Shred UG (haftungsbeschränkt) i.G. ("X-Shred", "we", "our") operates the mobile application X-Shred (The "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and related services.

By using X-Shred, you agree to the terms of this Privacy Policy.

1. Information We Collect

When you use X-Shred, we may collect the following types of data:

  • Personal Information: Name, email address, or account data if you create an account or join groups.

  • Location Data: GPS data to provide tracking, heatmaps, leaderboards, and group features. Location data is collected in intervals (default: every 5 seconds) while tracking is active.

  • Device Information: Device ID, operating system, app version, language, and crash reports.

  • Usage Data: Interactions with app features (e.g., tracking, maps, group invitations, leaderboard participation).

  • Payment Data: Purchase history and subscription information via Apple App Store / Google Play Store. We do not store or process your payment details directly.

  • Push Notification Data: Device token/notification ID required to deliver push notifications. This identifier is linked to your device but does not contain personal information.

2. How We Use Your Data

We process your data to:

  • Provide core app functionality (GPS tracking, stats, heatmaps, leaderboards).

  • Enable premium features (live location sharing, voice control, offline maps, add-ons).

  • Support group and social features (friend lists, QR group invites, meet-up coordination).

  • Improve app performance, troubleshoot errors, and enhance the user experience.

  • Process subscriptions and manage entitlements.

  • Ensure safety features (battery alerts, emergency location sharing).

  • Send push notifications (e.g., live updates, safety messages, reminders), if you have consented.

3. Legal Basis for Processing

We process your personal data on the following bases:

  • Contract: To deliver the services you request (subscriptions, features of the app).

  • Consent: For processing GPS and location data, push notifications, or optional analytics. You can withdraw consent at any time.

  • Legitimate Interest: To secure, maintain, and improve our services.

  • Legal Obligations: To comply with tax and accounting laws.

4. Push Notifications

  • Push notifications are only sent if you give your explicit consent.

  • Consent is collected via in-app dialogue and the operating system prompt.

  • You can withdraw consent at any time by disabling push notifications in your device settings or via the in-app toggle (if available).

  • We process a device-specific token to deliver messages. This token does not directly identify you.

  • Processing is carried out via technical service providers (e.g., Firebase Cloud Messaging or a comparable provider). Where data may be processed outside the EU/EEA, safeguards such as EU Standard Contractual Clauses are applied.

5. Data Sharing and Disclosure

We do not sell your data. We may share information with:

  • Service Providers: e.g., Firebase (Google), Apple, Google Play, hosting providers.

  • Analytics & Crash Reporting Tools: For app improvement (e.g., Firebase Analytics, Crashlytics).

  • Legal Authorities: If required by law or to protect our legal rights.

Some providers may process data in third countries (e.g., the United States). We take measures to ensure an adequate level of protection.

6. Data Retention

  • Location and activity data are stored as long as your account is active, or until you delete them.

  • Aggregated statistics (e.g., leaderboards) may be retained for service functionality.

  • Legal and transactional data (e.g., invoices) are retained in accordance with statutory obligations.

  • Push notification tokens are stored until you withdraw consent or disable push notifications.

7. Your Rights

Under the GDPR, you have the following rights:

  • Access to your personal data.

  • Correction of inaccurate data.

  • Deletion of your data ("right to be forgotten").

  • Restriction or objection to processing.

  • Data portability.

To exercise these rights, please contact us at: tblock@xshred.de.

8. Children’s Privacy

Our App is not directed to children under the age of 16. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.

9. Security

We use technical and organizational measures (such as encryption and secure servers) to protect your data against unauthorized access, loss, or misuse. However, no system is completely secure.

10. International Data Transfers

If your data is transferred outside the EU/EEA, we ensure safeguards are in place, such as EU Standard Contractual Clauses, to protect your information.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website and in the App. Continued use of the App after changes indicates acceptance of the updated policy.

12. Contact Information

X-Shred UG (haftungsbeschränkt) i.G.
Freiligrathweg 1
33034, Brakel
tblock@xshred.de

For all privacy-related questions or requests, please reach out to us.

Last updated: October 2025