Privacy policy

This policy describes what bahoe actually stores. It was written from the database schema rather than from a template, so it is short — and the two store data declarations (Google Play's Data Safety form and Apple's privacy labels) are derived from this page, sentence by sentence.

The controller is Dream Code Factory GmbH, Dorotheergasse 6-8/14a, 1010 Vienna, Austria. Write to contact@dreamcodefactory.eu about anything on this page.

What bahoe stores

Your account. A user identifier from the sign-in system, a display name, and an email address. The display name is what other people in a plan see; the email address is used to confirm it is yours and to send you the mail described below.

What you write into a plan. The plan itself — its title, description, location, start and end time, the deadline you set and the number of people it takes — plus who was invited, each person's answer (in, out, maybe, or not yet), any tasks and who took them, and any costs with the amount and who paid.

Costs are amounts, not payments. bahoe records that somebody paid €40 for a cabin so the group can split it. It does not move money, does not connect to a bank and does not store a payment instrument of any kind. If you subscribe, the payment is taken by Paddle acting as merchant of record; we receive a subscription status, never card details.

Invitation and confirmation links. A single-use token, the plan or crew it belongs to, and when it expires. Confirmation tokens also record the address they were sent to, so a link can prove one address rather than merely one account.

Queued mail. A reminder that has not been sent yet is stored until it is sent.

What bahoe does not store

This list is as load-bearing as the one above, and it is the reason both store declarations are short:

• No payment instrument. No card number, no bank account, no billing address.
• No location. Not your device's location, not an approximate one, not an IP-derived one. The location field on a plan is a line of text somebody typed, like "Anna's place" — bahoe never reads a location from a device.
• No device identifiers, no advertising identifier, no fingerprinting.
• No analytics or advertising SDK, in the web app or in the mobile apps. Nothing on a bahoe screen reports back what you looked at, and no third party receives a record of your visit.
• No tracking across other companies' apps or websites, in the specific sense the App Store uses that term. bahoe does none.
• No contacts, photos, calendar, microphone or camera access.
• No selling or sharing of anything, to anyone, for any purpose.

Why bahoe is allowed to store it

Under the GDPR: performing the contract you entered when you created an account (Art. 6(1)(b)) covers your account and everything you and the people you invite put into a plan, including the mail that makes a plan work — an invitation, a confirmation link, a reminder before a deadline. Legitimate interest (Art. 6(1)(f)) covers keeping the service secure and running. Legal obligation (Art. 6(1)(c)) covers the records tax law requires us to keep of a subscription.

There is no consent-based processing on this list, because there is nothing here that consent would be the basis for: no analytics, no advertising, no profiling.

Who else sees it

Four processors, all in the EU, each doing one narrow thing:

The database is not shared, replicated or sold to anyone else. Backups are held encrypted in EU object storage.

Cookies

bahoe sets one cookie, and it is the one that keeps you signed in. There is no analytics cookie, no advertising cookie, and no consent banner, because there is nothing to consent to.

How long it is kept

Your account and your plans stay until you delete your account. Single-use invitation and confirmation links expire on their own and are cleared. Backups roll off on a fixed schedule. Records tied to a subscription are kept as long as tax law requires.

Deleting your account

You can delete your account from inside the app — Account → Delete your account — or from the account deletion page, which you can reach without signing in.

Deletion is immediate and cannot be undone. Be precise about what it does, because it is not "everything disappears":

Removed. Your display name, your email address, your avatar, any confirmation link and any queued reminder, your membership of every crew, and any unused invitation you created.

Kept, with your name replaced by Deleted account. The plans you were part of, your answers to them, the tasks you took, and any costs you paid or owe a share of.

That distinction is deliberate rather than convenient. A plan is a record of something that happened between several people, and a cost with your name on it is what somebody may still be owed. Erasing your half of a shared record would rewrite theirs. What is removed is everything that identifies you; what is kept is the shape of an event that other people were also at.

Two consequences worth knowing before you press the button: a crew you owned is archived, and a plan that is still open and that you alone organize is cancelled. A plan that belongs to a crew carries on, because every member of that crew already co-organizes it.

Your rights

You can ask for access, correction, erasure, restriction, portability, or object to processing — Art. 15 to 22 GDPR. Write to contact@dreamcodefactory.eu. The account deletion above is the erasure right, available without asking anyone.

You may also complain to a supervisory authority. Ours is the Austrian Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna.

Children

bahoe is not directed at children under 16 and we do not knowingly create accounts for them.

Changes

If this page changes materially, the date at the top changes with it, and both store declarations are amended in the same week — they are derived from this page and are checked against it before either is submitted.